IT & Security Manager ○ Boulder

Job Overview: We're looking for a hands‑on IT & Security Expert to own our technology infrastructure from the ground up. You'll be our first dedicated IT hire — which means you'll do the work, shape how we do it, and build the systems and practices that will carry us through our next phase of growth. You'll report to the CTO. You'll work directly with the team rather than in a silo, and the job is to make people's lives easier, not to gatekeep. This is an IC role today with room to grow in scope and seniority as we scale. This is a full‑time role based in Palo Alto, CA or Boulder, CO, with travel as well as flexibility for some remote work.

What You’ll Do: IT Operations & Infrastructure Own and manage our full IT stack (computers, software, network, firewall, and office infrastructure across macOS, Linux, and Windows environments) Stand up a secure VPN; deploy MDM (device management and policy enforcement) and endpoint security (currently CrowdStrike Falcon) across the full device fleet; build toward zero‑trust architecture, asset inventory, centralized logging, and SIEMManage hardware procurement, asset tracking, onboarding/offboarding, software license management, IT budget Manage IT and security vendor relationships — decide what to manage internally vs. outsource, evaluate new tools before they touch our systems, and hold vendors accountable to commitments Support on‑site rack‑mounted server hardware and bare‑metal Linux as we productize Own our AI usage and safety policies by defining practical protocols and policies that balance productivity with IP protection Identity, Access & Secrets Management Stand up an identity platform (Active Directory, Entra ID) with SSO, MFA, and role‑based access; connect our internal web infrastructure's login to itImplement secrets management (Vault, 1Password Teams, SSM) with key rotation and no credentials sitting in repos Implement a zero‑trust mesh or VPN (Tailscale, WireGuard, Cloudflare Access) with identity‑gated SSHOwn cloud security across AWS, GCP, and SLURM — IAM, VPC/network segmentation, controlled ingress/egress Maintain encrypted backups; build toward secure external access to our hardware as we productize Compliance & Security Lead and own all compliance roadmaps and certification efforts (e.g., CMMC Level 2, SOC 2) — oversee buildouts, ongoing compliance, documentation of policies and procedures, and coordination with external assessors and managed providers Build toward a real security program: zero‑trust architecture, asset inventory, centralized logging and SIEM, monitoring, and identity governance Own incident response, disaster recovery, and business continuity planning Maintain awareness of export control rules given our deep tech work and government contracts