Cloud Systems Administrator

• Manage groups, roles and licenses; keep license counts right-sized and flag waste.

• Maintain device enrollment, MDM policies and endpoint security for company laptops.

Scripting and automation

• Write and maintain scripts (Python, PowerShell, Bash) and use vendor APIs to automate provisioning, access reviews, log collection and reporting.

• Build lightweight integrations between systems (for example, HRIS to identity provider to SaaS) so manual admin work shrinks over time.

Security incident response

• Act as a first responder on security alerts: triage, contain (disable accounts, revoke tokens, isolate devices), gather evidence from logs, and escalate.

• Participate in post-incident reviews and implement the fixes that come out of them.

• Help maintain and test our incident response and business continuity runbooks.

IT support

• Provide tier 1–2 support to employees: hardware, accounts, access, video conferencing, printers and office network.

• Procure, image and manage laptops and peripherals; keep an asset inventory current.

• Write and keep up internal how-to documentation so common requests become self-service.

Platforms you will administer

These are our largest software and cloud vendors by spend over the last 12 months. Deep experience with the first group is expected; the rest you will pick up on the job.

Area

Platforms

Cloud infrastructure

Amazon Web Services (IAM, CloudTrail, GuardDuty, Security Hub)

Identity, HR and devices

Rippling (HRIS, SSO, device management) and Google Workspace, used together as our identity source of truth

Productivity and email

Google Workspace (admin console, Vault, security center)

Customer support and CRM

Zendesk, Salesforce, Intercom

Communications

Zoom, Aircall, Twilio

Data and engineering

Databricks, MongoDB Atlas, Sentry, Linear, Postman, Stytch

AI platforms

Anthropic, OpenAI (API key and usage management)

Collaboration and design

Notion, Lucid, Figma, Adobe, Scribe

Security tools

NordVPN Teams, Virtru (email encryption)

Healthcare operations

Waystar, AdvancedMD

Marketing and recruiting

Braze, ActiveCampaign, Greenhouse, LinkedIn

About you:

• 3+ years administering SaaS and cloud platforms in a company of 50–500 people, including Google Workspace and an identity/HR platform like Rippling or Okta, and ideally AWS.

• Hands-on experience configuring SSO/SAML, SCIM provisioning, MFA policies and role-based access.

• Working knowledge of audit logging and log review: you know what a CloudTrail event, a Workspace audit log or a Zendesk audit entry looks like and what to do with it.

• Scripting ability in at least one of Python, PowerShell or Bash, and comfort calling REST APIs.

• Experience responding to security incidents (phishing, compromised accounts, lost devices) and documenting what happened.

• Strong IT support instincts: you communicate clearly with non-technical colleagues and close tickets fast.

• Familiarity with HIPAA or a comparable compliance framework (SOC 2, ISO 27001) and what it means for access control and logging.

Nice to have:

• AWS Certified SysOps Administrator, Security Specialty, or Google Workspace Administrator certification.

• Experience with a SIEM or log aggregation tool (Datadog, Splunk, Google SecOps, or similar) and writing detection rules.

• MDM experience (Rippling, Jamf, Kandji, Intune) and macOS/Windows endpoint hardening.

• Terraform or other infrastructure-as-code for managing AWS and SaaS configuration.

• Prior work in a healthcare or other regulated company.

• Experience administering API usage and keys for AI platforms (Anthropic, OpenAI) and setting spend and access controls.

The base salary range for this position is $60,000 - $75,000. Individual compensation will depend on various factors, including qualifications, skills, experience, location, and applicable laws. In addition to base salary, this role is eligible to participate in our equity incentive and competitive benefits plans.

Fraud and Security Notice:

Please be aware of recent job scam attempts. Our team uses the oneimaging.com email domain exclusively. If you have been contacted by someone claiming to be a OneImaging recruiter or a hiring manager from a different domain about a potential job, please report it to law enforcement here and to candidateprotection@oneimaging.com .

Equal Employment Opportunity:

OneImaging is proud to be an Equal Employment Opportunity employer and values diversity in the workplace. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views, or other applicable legally protected characteristics.

OneImaging is committed to providing accommodations for qualified individuals with disabilities in our recruiting process. If you need assistance or an accommodation due to a disability, you may contact us at talent@oneimaging.com .

• Full-Stack Programming

Source: We Work Remotely