System Administrator

📋 Job Overview

Join Zeely as a System Administrator (IT & Security Operations) and build a managed, automated, and audit-ready corporate IT function from scratch. You will be the first person in this function: no legacy processes, with the opportunity to build everything according to your vision. You will work closely with DevOps and Security teams and contribute to preparing the company for SOC 2 and ISO 27001 certifications.

🏢 About Zeely

Zeely is an agent AI platform for creating, launching, and scaling paid advertising. Simply put: we have made the best AI solutions and marketing tools accessible to small and medium-sized businesses — tools that were previously only available to large brands with expensive marketing teams. The next big step is B2B solutions for large marketing teams and enterprise clients: workflows, creative analytics, and full control over campaigns for the entire team.

🎯 The Role

You will build the complete identity lifecycle: onboarding and offboarding by role profiles, fulfilling access requests to 30+ systems, maintaining the access matrix, and quarterly access reviews. You will manage MFA/SSO coverage, configure access management through groups instead of individual grants, and remove orphaned accounts. You will be responsible for endpoint management: equipment inventory, deployment of MDM and EDR, patch management, control of browser extensions and unauthorized software. You will manage VPN users: issuance, revocation, key rotation, session auditing, and inactive accounts. You will maintain a registry of vendors and providers (contracts, billing, DPA, sub-processors), track limits and renewal deadlines, and prepare monthly spend reports. You will collect evidence for audits, maintain a registry of policies, and together with the Security Officer organize security awareness training and phishing simulations. You will be the first line (L1) in security incidents on workstations: collecting facts, isolating the device, and maintaining a timeline.

✅ Key Responsibilities

• Build the complete identity lifecycle: onboarding and offboarding by role profiles, fulfilling access requests to 30+ systems, maintaining the access matrix, and quarterly access reviews.
• Manage MFA/SSO coverage, configure access management through groups instead of individual grants, and remove orphaned accounts.
• Be responsible for endpoint management: equipment inventory, deployment of MDM and EDR, patch management, control of browser extensions and unauthorized software.
• Manage VPN users: issuance, revocation, key rotation, session auditing, and inactive accounts.
• Maintain a registry of vendors and providers (contracts, billing, DPA, sub-processors), track limits and renewal deadlines, and prepare monthly spend reports.
• Collect evidence for audits, maintain a registry of policies, and together with the Security Officer organize security awareness training and phishing simulations.
• Be the first line (L1) in security incidents on workstations: collecting facts, isolating the device, and maintaining a timeline.

📌 Required Qualifications

• 4+ years of experience as a System Administrator / IT Administrator / IT Ops in a product IT company with a distributed team of 30–40 people.
• Confident administration of Google Workspace: users, groups, OUs, security policies, mandatory MFA, audit logs.
• Practical experience with onboarding / offboarding and access management based on the principle of least privilege.
• Experience with SaaS services: Slack, Jira/Confluence, GitHub, Notion, Figma, password manager (NordPass, 1Password, Bitwarden).
• Experience with MDM for macOS, Linux, and Windows, control of updates and security patches.
• Experience with deploying and administering antivirus / EDR.
• Experience with administering VPN users.
• Understanding of basic information security principles: MFA, separation of duties, risks of shared and orphaned accounts.
• Systematic approach to documentation and record keeping.
• Daily use of AI assistants (Claude, ChatGPT, Gemini) for scripts, documentation, and checklists, and understanding the risks of shadow AI.
• English from B1.
• Willingness to respond to security incidents outside of working hours (with additional payment).

⭐ Desirable Experience

• Experience with preparing for SOC 2, ISO 27001, or other external audits, experience with compliance platforms.
• Configuration of SSO/SAML and SCIM provisioning.
• Experience with Jamf, Kandji, Mosyle, or Microsoft Intune.
• Experience with CrowdStrike, SentinelOne, or Microsoft Defender for Endpoint.
• Automation with scripts: Bash, Python, PowerShell, Google Apps Script, GAM.
• Experience with vendor management and understanding of AWS and GCP billing.
• Jira Service Management or other ticketing for access requests.
• Certifications: CompTIA Security+, Google Workspace Administrator, Jamf Certified, Microsoft Intune.

🎁 Benefits

• Opportunity to build corporate IT and security operations from scratch according to your vision.
• Participation in preparing for SOC 2 / ISO 27001 — a rare and valuable experience on the market.
• Clear career path to IT & Security Operations Lead.
• Work with modern technologies and contribute to creating AI tools.
• Strong team of A-players who motivate each other to grow.
• Remote-first format with offices in Warsaw and Kyiv.
• Regular performance reviews to ensure your growth is transparent and rewarded.

🛂 Visa & Eligibility

No specific visa or eligibility information provided.