IT Engineer

📋 Description

• • Fundamental is at the forefront of AI innovation, dedicated to revolutionizing enterprise decision-making through its proprietary Large Tabular Model (LTM) called NEXUS. Founded by esteemed alumni from DeepMind, our mission is to unlock trillions of dollars in business value by empowering companies with predictive capabilities. We are backed by leading investors and trusted by Fortune 100 corporations, positioning us as a category-defining company in the rapidly evolving AI landscape.
• • As an IT Engineer at Fundamental, you will play a pivotal role in shaping and maintaining the internal IT infrastructure that underpins our groundbreaking AI development. This is a hands-on position for an individual who thrives on automation and possesses a deep understanding of IT systems. You will be responsible for the entire lifecycle of our IT operations, from the critical areas of identity and access management (IAM) and endpoint security to ensuring robust compliance with industry standards.
• • Your primary focus will be on designing, implementing, and managing automated, scalable systems that guarantee the security, compliance, and seamless operation of our fast-growing AI company. This role requires a proactive approach to problem-solving and a commitment to continuous improvement in our IT environment.
• • You will collaborate closely with our DevOps, Security, and Engineering leadership teams. This partnership is essential to ensure that our internal IT infrastructure is as robust, secure, and reliable as the enterprise-grade AI platform we are building. Your contributions will directly impact our ability to operate efficiently and securely as we scale.
• • Key responsibilities include owning and managing IAM provisioning and lifecycle across a suite of essential tools such as Okta, Rippling, and Google Workspace. This involves developing automated processes for user onboarding and offboarding, configuring Single Sign-On (SSO), implementing SCIM provisioning, managing Multi-Factor Authentication (MFA), and conducting regular access reviews to maintain security hygiene.
• • You will also be tasked with configuring and maintaining our Mobile Device Management (MDM) solutions for both macOS and Windows fleets. This includes enforcing critical security policies such as disk encryption, timely patching, firewall configurations, and establishing device compliance baselines to protect our corporate assets.
• • A significant aspect of this role involves automating IT workflows. You will leverage your scripting expertise in Python, Bash, or PowerShell to build integrations between various systems via APIs, develop self-service tools for end-users and IT staff, and actively work to reduce manual operational tasks, thereby increasing efficiency and reducing the potential for human error.
• • Supporting our compliance initiatives is paramount. You will play a key role in the SOC 2 Type II and ISO 27001 certification processes. This includes collecting necessary evidence, implementing and enforcing controls, developing and refining policies, and ensuring overall audit readiness. Your work will directly contribute to our ability to meet stringent security and compliance requirements demanded by our enterprise clients.
• • You will manage vulnerability scanning and patching schedules for our corporate endpoints, ensuring that all systems are up-to-date and protected against known threats. Furthermore, you will be involved in incident response procedures, acting swiftly and effectively to mitigate any security incidents that may arise.
• • Maintaining comprehensive compliance documentation and responding to customer security questionnaires will be an integral part of your duties. This requires a clear understanding of our security posture and the ability to articulate it effectively to external parties.
• • Administering our diverse range of SaaS applications is also within your purview. This includes managing licenses, configuring settings, integrating applications, and overseeing user management to ensure optimal utilization and security.
• • You will manage our corporate network infrastructure, encompassing VPN, DNS, and the setup and maintenance of office IT environments, ensuring reliable connectivity and secure network access for all employees.
• • Finally, you will own the entire hardware lifecycle management process. This covers everything from procurement and initial provisioning of employee devices to meticulous inventory tracking, managing repairs, and overseeing the collection of devices during offboarding, ensuring a secure and efficient asset management process.