IT Systems & DevOps Engineer (Hybrid)

About ZenQMS

From life-saving therapies to sustainable materials, today’s scientific breakthroughs are reshaping our future. Yet as science accelerates, the challenge isn’t discovery, it’s maintaining the highest standards of quality at speed and scale.

At ZenQMS, we’re redefining quality for the Life Sciences industry. Our mission isn’t just to elevate the role of quality, it’s to empower science to move faster. Trusted by regulated companies around the world, our digital quality management platform simplifies compliance, streamlines operations, reduces risk & drives continuous improvement.

ZenQMS is built by quality leaders who believe quality teams deserve better, “less stress” solutions that make their lives easier, innovation faster, and consumers safer. Our team and broader community are organized around our core values: be kind, always be improving, be part of the community, and keep it simple.

Join us to help bring modern, simple quality solutions to innovators in the Life Sciences!

About The Role

ZenQMS is looking for an IT Systems & DevOps Engineer to own, secure, and automate our employee lifecycle and SaaS ecosystem, while bridging the gap into cloud infrastructure. This is the ultimate "jack-of-all-trades" engineering role for someone who loves automation, hates manual tickets, and wants to grow their skills into DevOps and cloud management.

You will start by optimizing our modern identity and device management footprint across our global team (US, Brazil, Romania), but your scope won't stop there. Once our onboarding and endpoint automations are humming, you will have the opportunity to partner with our engineering teams to take on DevOps tasks, manage AWS resources, and help drive our SOC 2 compliance evidence pipeline.

Location: This is a hybrid role based out of our Ardmore, PA office (2-3 days/week in-office). Candidates must be local to the Greater Philadelphia area to be considered.

What You'll Do

• Identity & Google Workspace: Serve as the primary administrator for Google Workspace (OUs, Context-Aware Access, Vault retention, and data workflows). Own our identity source of truth, ensuring automated access management via modern directory tools.
• Automated Onboarding & Offboarding: Eliminate manual IT tickets. Partner with HR to deliver "day-1-ready" provisioning for hardware, software, and local PC/Mac accounts, as well as bulletproof offboarding workflows.
• Endpoint Security & MDM: Manage and tune our endpoint detection (EDR) and MDM solutions (we use CrowdStrike and Rippling, but we’ll train you on them). Ensure 100% security sensor coverage across our fleet of Macs and PCs.
• Database & Tooling Maintenance: Maintain and continue development on an internal PostgreSQL database (ram_db) and its AI-assisted web front-end used for internal tracking.
• DevOps & AWS Growth (As Capacity Allows): Once core IT workflows and identity automations are running smoothly, there is an open runway to assist our engineering teams with DevOps tasks, AWS cloud resource management, and infrastructure-as-code patterns.
• Audit & Compliance Pipelines: Collect, automate, and translate system reports into audit evidence to support ZenQMS’s rigorous SOC 2 and customer compliance standards.

What You'll Bring

• The Mid-Market Sweet Spot: 2–4 years of experience managing IT systems, identity platforms, or endpoints in a fast-paced, growing company (not a 10,000-seat corporate monolith).
• Google Workspace Admin Expertise: Strong, hands-on experience managing Google Workspace, including organizational units (OUs), group routing, and basic security policies.
• Exposure to Modern Identity & MDM: Experience with identity and device providers (e.g., Okta, Rippling, JumpCloud, Jamf, Intune, or similar). You don’t need to be a guru, but you must understand how provisioning workflows function.
• Security Mindset: Familiarity with modern EDR platforms (CrowdStrike, SentinelOne, Defender, etc.) and an understanding of what baseline endpoint security looks like.
• Scripting & SQL Basics: Comfort with SQL for database queries and at least one scripting language (Python, Bash, or PowerShell) to automate repetitive tasks.
• The Hybrid Commute: A desire to be in the Ardmore, PA office 2-3 days a week to handle physical hardware/logistics when needed and collaborate with the local team.

Nice-to-haves

• Basic exposure to AWS (EC2, IAM, S3) or a strong desire to learn cloud infrastructure.
• Familiarity with DevOps concepts or Infrastructure-as-Code (Terraform, Ansible).
• Experience assisting with SOC 2, ISO 27001, or similar compliance audits.
• Familiarity with PostgreSQL database administration basics (backups, simple user management).

What Success Looks Like

• Day 1 Perfection: New hires get their accounts, software, and hardware fully provisioned with zero manual intervention from the IT team.
• A "Set-and-Forget" Fleet: Automated, weekly compliance reports that flag any missing security sensors or outdated patches within 24 hours.
• Proactive Support: Core IT tasks and ticket queues are optimized so efficiently that you have the bandwidth to cross-train and take on introductory DevOps or AWS automation tasks.
• Audit-Ready Architecture: SOC 2 evidence is backed by automated, queryable system reports rather than a scramble for manual screenshots.