IT Ops Manager - CO

The Role

The platform is in place; the function is not. This is a build, not an inherited, well-run stack. We are standing up a real IT function for the first time. NinjaOne is our RMM and unified endpoint management platform and it is already in use, but it was set up before anyone at the firm owned it.

We need someone to take ownership of it, audit and correct its configuration, and own everything that runs on top of it: endpoint management, mobile device management, automated software installation, patch management and operating system updates, backup management and automation, remote endpoint administration, and support ticketing for every employee. You would also own IT security operations and access governance. There is no direct report: this is a sole-practitioner function.

• Endpoint Lifecycle: Manage full device lifecycles via NinjaOne (zero-touch deployment, hardware logistics, remote lock/wipe) and GCPW/macOS sign-ins.

• Mobile Device Management (MDM): Enforce configuration, compliance, remote wipes, and BYOD policy across iOS, Android, and macOS.

• Patch Management: Execute end-to-end OS and third-party patching via NinjaOne automations, managing risks, rollbacks, and compliance metrics.

• Backups & Restores: Manage endpoint, server, and SaaS (Workspace) backups, enforcing client retention policies and conducting scheduled restore tests.

• Helpdesk & Remediation: Own NinjaOne ticketing and support, prioritizing scripted remediations to permanently reduce repeat issues.

• Client Credential Governance: Administer client marketplace (Amazon, Walmart) access via strict RBAC, API/token management, and instant offboarding. Managing Partner approval is required for escalations.

• Cloud & AI Admin: Manage BigQuery IAM/costs and enterprise AI (Gemini, Claude) access, holding the final security veto over data connectors.

• Workspace & Chrome: Administer Google Groups, user profiles, shared drives, and enforce a strict allowlist for Chrome extensions.

• Security Operations: Own device hardening (MFA, disk encryption), incident response, and quarterly access reviews across all platforms.

• NinjaOne Admin: Optimize platform structure, script libraries, API integrations, tuned alerts, and internal documentation.

• Business Continuity: Author and actively test disaster recovery plans for critical scenarios (e.g., ransomware, lost devices).

• Vendor & Cost Management: Manage IT vendor relationships, reclaim unused software licenses, and advise the IT budget.

• Client Setup & Teardown: Build secure, isolated engagement environments (2FA, vaults) at onboarding, and execute verified, complete access revocations at offboarding.

• Documentation Standards: Set and own firm-wide governance standards (runbooks, access records, retention), defaulting as the owner across technical roles.

• Absence Coverage: Guarantee IT continuity during your time off via robust runbooks, limited cross-training, and managing an external on-call provider.

• Policy Authorship: Draft comprehensive IT and InfoSec policies (access, devices, incident response) for Managing Partner approval.

Requirements

• Required

• Experience: 5+ years in IT Ops, with 2+ years owning endpoint management for a real fleet.

• RMM & MDM: Hands-on configuration of an RMM/UEM (NinjaOne strongly preferred) and full MDM across iOS, Android, and macOS.

• Remote Support: 100% remote workforce management (zero-touch provisioning, drop-shipping).

• Home Setup: Resilient workspace with backup internet and power.

• Patching & Backups: Scaled patch management (rings, rollbacks) and backup ownership (must have hands-on restore testing experience).

• Scripting: PowerShell and macOS shell for automation.

• Google Workspace: Administration of Groups, shared drives, GCPW, and Chrome policy.

• Cloud & SaaS Admin: Cloud IAM (GCP/BigQuery or AWS/Azure) and enterprise SaaS/AI data governance (retention, connector permissions).

• Security & Access: Strict execution of RBAC, MFA, API/token management (secure storage, rotation), and master account governance (break-glass procedures).

• Service & Incidents: Root-cause focused support queue management and hands-on incident response experience.

• Communication: Clear English writing for policies and runbooks.

• Risk Judgment: Accountability for the contractual risks of accessing clients' revenue-generating accounts.

• Solo Practitioner: Ability to thrive as the sole IT resource while documenting for external coverage.

• Nice to Have

• NinjaOne Academy certification or current admin usage.

• MSP, e-commerce, or agency background.

• Experience with compliance (SOC 2) or client security questionnaires.

• Large-scale Apple fleet management.

• Practical application of AI tools in IT workflows.

• Experience building an IT function from scratch or managing solo-IT absence coverage.

Benefits

• Competitive Salary: Get paid what you're worth!

• Prepaid Medicine: Your health is our priority!

• Life Insurance: Peace of mind for you and your loved ones!

• Birthday Day Off: Celebrate your special day YOUR way!

• Indefinite-Term Labor Contract: Stability and all legal benefits included!