Lead of Internal IT

ChillBase·Serbia, Kazakhstan·3 нед. назад

We’re looking for a Lead of Internal IT to develop our internal IT infrastructure and services together with a team of 3–6 engineers. You’ll automate routine tasks, connect corporate systems, make employee support faster and more reliable, and build efficient processes.

This role involves plenty of hands-on work, technical decision-making, and the freedom to choose the right tools. Your goal will be to build a connected IT environment that meets the real needs of a game studio without adding unnecessary complexity.

Our tech stack:

Identity: Google Workspace, JumpCloud, Keycloak.

Device management: macOS (Jamf), Windows (Intune / Autopilot), high-performance workstations for development and rendering.

ITSM and automation: Jira Service Management, n8n / Make / Zapier, Python / Bash / PowerShell.

What we want to see:

7+ years of experience in Internal IT / System Administration, including at least 3 years as an IT Lead or in a similar role.
Deep understanding of IAM: SSO (SAML 2.0, OIDC), SCIM provisioning, MFA and Conditional Access, RBAC, and the Joiner–Mover–Leaver (JML) lifecycle.
Experience administering Google Workspace and at least one identity provider (IdP) or directory solution, such as JumpCloud, Keycloak, Okta, or Entra ID.
Experience managing a mixed macOS and Windows device fleet through MDM: Jamf (configuration profiles, policies, ABM / zero-touch enrollment) and Intune / Autopilot, as well as patch management, disk encryption, and compliance policies.
Experience configuring and automating Jira Service Management: request types, SLAs, workflows, automation rules, and Assets / CMDB.
Hands-on experience building end-to-end integrations using REST APIs, webhooks, and automation platforms such as n8n, Make, or Zapier.
Strong scripting skills in Python and Bash / PowerShell, including integrations, parsing, API usage, and IT task automation.
Good knowledge of networking: VLANs, DHCP/DNS, VPNs (WireGuard / OpenVPN / IPsec), corporate Wi-Fi (802.1X, RADIUS), and firewalls.
Experience leading a technical team: prioritizing work, assigning tasks, developing team members, and reviewing code and configurations.
Practical experience using AI agents and LLM-based tools for tasks such as support automation, script generation, and knowledge base management.
English at B2 level or above for documentation, communication with vendors, and collaboration with a distributed team.
Russian language proficiency at C1 level.

Nice to have:

Experience in game development, including build machines, GPU workstations, console devkits, and large file storage systems.
Experience with Infrastructure as Code / GitOps (Terraform, Ansible, configuration management in Git).
Experience implementing EDR and SIEM solutions, managing vulnerabilities, and participating in ISO 27001 / SOC 2 audits.
Experience with SaaS management and software license management.
Knowledge of physical access control systems and their integration with an IdP.

What you'll do:

Build end-to-end Internal IT automation by connecting Google Workspace, JumpCloud / Keycloak, Jamf / Intune, Jira Service Management, and the HR system through APIs, webhooks, n8n, and scripts.
Fully automate employee onboarding and offboarding, including accounts, groups and access rights, device provisioning and enrollment, licenses, and physical access. The entire process should be triggered by a single event in the HR system.
Develop centralized IAM by implementing SSO and SCIM across all key services, enforcing MFA, and establishing regular access reviews.
Manage the macOS and Windows device fleet through Jamf and Intune, including zero-touch enrollment, baseline configurations, patching, encryption, and inventory management.
Improve Jira Service Management by developing the service catalog, SLAs, automated request routing, Assets / CMDB, and an AI assistant for first-line support.
Manage office infrastructure across multiple locations, including networks, Wi-Fi, VPNs and remote access, physical access control systems, meeting rooms, and equipment.
Select and implement enterprise tools for a distributed company, assess total cost of ownership (TCO), and negotiate with vendors.
Lead a team of 3–6 engineers by setting priorities, assigning tasks, monitoring results, and supporting professional development.
Establish documentation practices, including runbooks and a knowledge base, and ensure knowledge sharing and team backup coverage.
Ensure the reliability and security of Internal IT through monitoring, backups, incident management, and baseline security controls.

What we expect you to achieve in the first 6–12 months:

Employee onboarding and offboarding are fully automated and take only minutes.
All key services are integrated with SSO and mandatory MFA.
100% of devices are enrolled in MDM and comply with security and compliance policies.
A clear IT service catalog with defined SLAs is in place, and some support requests are resolved automatically without engineer involvement.

Growth and development

Our project is continuously growing, just like the teams behind it. We invest in the growth of team members, conduct regular performance reviews, and review salaries based on performance.

Care for employees

Paid sick days, the ability to take days off, support during difficult life situations, and a minimum of bureaucracy and processes for the sake of processes.