• Administer and support daily configuration changes across BambooHR, Lever, Lattice, ADP, and other HR systems • Build and maintain a current-state map of HR systems, their configurations, and how data flows between them • Document and maintain integrations between HR platforms and with Okta (identity/provisioning) and NetSuite (finance/HRIS data flows) • Serve as a point of escalation for HR systems issues raised by HR, People Ops, and end users • Partner with IT Operations Team Members and InfoSec on access provisioning/deprovisioning tied to HR system changes (joiners, movers, leavers) • Evaluate the current HR tooling landscape and identify gaps, redundancies, or risks in the existing stack • Maintain documentation of system configurations, integration architecture, and change history • Support audits and compliance efforts requiring HR systems evidence (e.g. SOC 2, access reviews)

• Examine and evaluate existing systems • Identify system requirements • Liaise with users to identify additional requirements and features • Document interfaces between new and legacy systems • Validate changes through program testing • Train users on new operating systems and provide support • Ensure deadlines and budgets are met • Stay up to date with current technologies and technical advances

Role Description Our client is a managed IT services provider in Los Angeles. They support small businesses, mostly law firms and professional services. This is a genuine Tier 3 role. If a previous "L3" title covered work that was really Tier 2, this likely is not the right fit, and that is okay. We need someone who can take a problem from first report to resolution without anyone reviewing the work behind them. What you'll own: - Handle technical escalations that currently reach the COO. - Lead Microsoft and infrastructure projects end to end: - Tenant migrations - Intune and Autopilot rollouts - Exchange and SharePoint - Server migrations - Network builds - Security hardening - Mentor three junior technicians and lead the on-call rotation. - Move to project work or assist wherever the team is short when the escalation queue is quiet. Qualifications - Deep, hands-on Intune experience. - Strong Microsoft 365 expertise (Exchange Online, SharePoint, Entra ID, mail flow, recovery). - Solid networking skills (Meraki, Fortigate, site-to-site VPN, VLAN design). - Real security incident-response experience. - Jamf or Apple MDM experience is a plus. - Perfectly fluent English, written and spoken. - Ability to work independently and document as you go. - Five years of MSP experience is a rough floor, but design ability matters more than the number. - No degree required. Requirements - 5+ years of experience working in an MSP environment in the US (or equivalent MSP in LATAM). - Proven expertise with Autopilot and Intune. - Expertise with Microsoft 365 (Exchange Online, SharePoint, Entra ID, mail flow, recovery) and networking (Meraki, Fortigate, site-to-site VPN, VLAN design). - English level must be above a C1. Benefits - Work remotely Monday - Friday, 20 hours a week (no weekends). - Vacation: 10 business days a year. - Holidays: 5 National Holidays a year. - Company Holidays: 5 Company Holidays a year (Christmas Eve, Christmas Day, New Year's Eve, New Year's Day, Zipdev Day). - Parental Leave. - Health Care Reimbursement. - Active Lifestyle Reimbursement. - Quarterly Home Office Reimbursement. - Payroll Deduction Purchase Plans. - Longevity Bonus. - Continuous Learning Bonus. - Access to Training and Professional Development Platforms. - Did we mention it's REMOTE?!!

- Develop and maintain connectivity across Ethernet, Wi-Fi, Thread, Zigbee, and BLE. - Build and optimise secure, reliable device messaging using protocols such as MQTT, CoAP, HTTP, or WebSockets. - Support reliable device time synchronisation using NTP or PTP. - Contribute to secure boot flows, key and certificate provisioning, and hardware-backed device identity using TPMs or secure elements. - Help build and maintain signed firmware update pipelines, including OTA update and rollback mechanisms. - Support security best practices across the device lifecycle, including vulnerability management and secure provisioning. - Integrate devices with cloud IoT platforms and backend services. - Define and improve telemetry, health monitoring, and observability for deployed devices. - Support reliable operation of connected devices in the field, including debugging fleet issues and improving resilience. - Support testing and validation for safety, EMC, radio, and related product requirements. - Help prepare test plans, certification artefacts, and validation documentation. - Work with manufacturing and cross-functional teams through engineering and production validation cycles. - Work closely with firmware, hardware, power electronics, mechanical, and software teams to deliver production-ready devices. - Contribute to design reviews, technical documentation, and interface specifications. - Share knowledge and contribute to engineering best practices across connectivity, embedded systems, and device security.