Cloud Systems Administrator

Responsibilities: — Manage daily administration of SaaS and cloud vendor platforms with a focus on security and logging. — Serve as primary administrator for SaaS and cloud platforms including tenant settings, SSO/SAML and SCIM integration, MFA enforcement, API keys, roles, and permissions. — Configure and maintain audit logging on supported platforms, centralize logs, and ensure compliance with retention policies. — Conduct periodic access reviews, remove stale accounts and over-privileged roles, and maintain accurate admin rights inventory. — Oversee security posture of each vendor by reviewing security settings before rollout, tracking security notices, and evaluating new vendor risks. — Onboard and offboard employees and contractors promptly across all systems using Rippling and Google Workspace as identity sources. — Manage groups, roles, licenses, device enrollment, MDM policies, and endpoint security for company laptops. — Write and maintain scripts (Python, PowerShell, Bash) and use vendor APIs to automate provisioning, access reviews, log collection, and reporting. — Build integrations between systems to reduce manual administrative work. — Act as first responder on security incidents including triage, containment, evidence gathering, escalation, and participate in post-incident reviews. — Provide tier 1–2 IT support to employees covering hardware, accounts, access, video conferencing, printers, and office network. — Procure, image, and manage laptops and peripherals; maintain asset inventory. — Maintain internal documentation to enable self-service for common requests. Requirements: — Minimum 3 years experience administering SaaS and cloud platforms in companies of 50–500 employees, including Google Workspace and an identity/HR platform like Rippling or Okta; AWS experience preferred. — Hands-on experience with SSO/SAML, SCIM provisioning, MFA policies, and role-based access control. — Knowledge of audit logging and log review for platforms like CloudTrail, Workspace audit logs, and Zendesk audit entries. — Scripting skills in Python, PowerShell, or Bash and comfort with REST APIs. — Experience responding to security incidents such as phishing, compromised accounts, and lost devices. — Strong IT support skills with clear communication and efficient ticket resolution. — Familiarity with HIPAA or comparable compliance frameworks (SOC 2, ISO 27001) related to access control and logging. Nice to have: — AWS Certified SysOps Administrator, Security Specialty, or Google Workspace Administrator certification. — Experience with SIEM or log aggregation tools (Datadog, Splunk, Google SecOps) and writing detection rules. — MDM experience (Rippling, Jamf, Kandji, Intune) and endpoint hardening for macOS/Windows. — Infrastructure-as-code experience with Terraform or similar for AWS and SaaS configuration. — Prior work experience in healthcare or regulated industries. — Experience managing API usage and keys for AI platforms like Anthropic and OpenAI with spend and access controls. Benefits: — Base salary range $60,000 - $75,000 per year. — Eligibility to participate in equity incentive and competitive benefits plans. Equal Employment Opportunity: OneImaging is an Equal Employment Opportunity employer valuing workplace diversity and providing accommodations for qualified individuals with disabilities. Fraud and Security Notice: Only communications from the oneimaging.com email domain are official. Report suspicious contacts to law enforcement and candidateprotection@oneimaging.com. Work format: Full-Time remote position.