TechOps Engineer

The Opportunity

In this role, you won't just be closing tickets, you'll treat our internal IT infrastructure as a product, building automated systems that enable our teams to tackle some of the hardest problems in the US healthcare system. At Candid, we view Technical Operations not as a traditional corporate cost center, but as an engineering discipline and a driver of business value.

You will balance day-to-day user support with deep project work, have a direct say in the tools we use, and work closely with Corporate Security and People Ops to scale our environment.

What You’ll Do

• Scale Onboarding & Offboarding
• : Own and automate the end-to-end operational lifecycle for employees, optimizing our current processes so they can seamlessly scale as our team grows.
• Execute High-Impact Projects: Lead immediate critical initiatives including migrating our Apple MDM platforms, perfecting a frictionless Zero-Touch Enrollment pipeline, and building Just-in-Time (JIT) access automation.
• Endpoint & App Management: Set up and maintain secure endpoint configurations for workstations and mobile devices using Apple MDM (Jamf/Kandji), AutoPkg, and complementary security software.
• Enforce Zero Trust Security: Securely implement and manage critical business applications, ensuring modern zero-trust enforcement via SSO, SAML, and MFA.
• R oot-Cause Troubleshooting: I nvestigate why things break. We value curiosity and fixing core infrastructural issues over applying quick, repetitive patches.
• Collaborate Across Teams: Work closely with stakeholders in Engineering, Security, and People Operations to deliver tools and processes that make their work safer and easier.
• Who You Are
• You bring 4+ years of hands-on Technical Operations or IT experience, ideally honed in a fast-paced tech startup or a high-volume Managed Service Provider (MSP) environment.
• You possess deep technical troubleshooting skills across macOS and hands-on experience managing Apple MDM tools (Jamf, Kandji, etc.) and packaging workflows (AutoPkg).
• You are highly autonomous and naturally biased toward action. When you see a manual task done twice, your first instinct is to script or automate it out of existence.
• You treat internal employees as your customers. You can seamlessly translate complex security or technical changes to non-technical stakeholders (from our Head of Engineering to our medical billers).
• You naturally think about compliance, data protection, and secure offboarding processes to keep patient data completely safe.

Please note:

we are looking for employees to join our in-person culture at one of our offices (Denver, New York, or San Francisco). Our weekly schedule is 4 days in-office and 1 day working remotely.