Senior IT Engineer at Narmi (New York, NY)Senior IT Engineer

IT at Narmi is a small, high-impact function that keeps our people productive and our systems secure. As a fintech serving banks and credit unions, the way we manage devices, identity, and access is part of the trust our customers place in us. We're looking for a Senior IT Engineer to own and scale the systems that make that possible, starting with Jamf and Google Workspace. You'll have real influence on how IT runs at Narmi: which tools we adopt, how we automate the employee lifecycle, and how we meet the security and compliance expectations of the financial institutions we serve. Being a self-starter who sees what needs fixing and fixes it at the root is what makes people successful here.

• Own Narmi's Apple fleet end to end in Jamf Pro: enrollment, configuration profiles, policies, Smart Groups, patching, app deployment, and compliance reporting.
• Administer Google Workspace as our core productivity and identity platform, including organizational units, groups, sharing and security policies, and Google Vault.
• Build and maintain identity and access controls across our SaaS stack, including SSO, SCIM provisioning, and MFA enforcement.
• Automate the employee lifecycle so onboarding, role changes, and offboarding are fast, consistent, and auditable.
• Write scripts and integrations (Bash, Python, GAM, Jamf API) that remove manual work and fix recurring issues at the root.
• Partner with Security and Compliance on SOC 2 and customer audit requests by producing evidence, hardening endpoint baselines, and closing gaps.
• Serve as the escalation point for complex IT issues and help shape how support is delivered across the company.
• Evaluate, roll out, and document new tools as Narmi grows.

• 5+ years of relevant, post-college IT or systems engineering experience
• Expert-level Jamf Pro experience managing a macOS fleet, including policies, configuration profiles, Smart Groups, extension attributes, and zero-touch deployment through Apple Business Manager
• Deep hands-on experience administering Google Workspace, including identity, security settings, groups, and data governance
• Experience with SSO and identity providers (Okta, Google, or similar), SCIM provisioning, and MFA
• Scripting proficiency in Bash, Python, or similar, and comfort working with APIs to automate workflows
• Ability to explain technical concepts with clarity and simplicity, whether to an engineer or an executive
• A strong sense of ownership and an eagerness to build systems that scale with the company
• Based in New York City or willing to relocate
• Authorized to work in the United States

• Jamf certifications (Jamf 300 or Jamf 400 / Certified Expert)
• Experience supporting SOC 2, PCI DSS, or similar audits
• Familiarity with AWS, especially IAM and account administration
• Experience with Jamf Connect, Jamf Protect, or other endpoint security tooling
• Background in fintech, financial services, or another regulated industry
• Experience building IT functions at a high-growth startup