IT Engineer

About the role

Higgsfield AI is seeking an IT Engineer to manage and improve internal IT systems, including laptops, accounts, endpoint security, email, corporate SaaS, and the office network. The role supports a largely Almaty‑based engineering and operations team and involves handling employee requests independently.

Key responsibilities

• Manage the device fleet via a cross‑platform MDM platform, primarily macOS devices, including enrollment, app distribution, compliance policies, and inventory.
• Maintain endpoint security: encryption, OS security baselines, agent health, and reporting, and assist in transitioning to a new endpoint solution.
• Administer cloud directories, configure SSO and provisioning for SaaS applications using SAML, OIDC, SCIM, and claim mapping.
• Handle transactional email setup: sending domains, DNS, DKIM, DMARC, bounce investigation, and sending policies.
• Operate the ticketing platform with Slack integration, resolve daily requests, and maintain corporate tools.
• Oversee onboarding and offboarding processes, including hardware, accounts, and access.
• Support office IT infrastructure: LAN, routing, and self‑hosted storage, ensuring global services remain accessible from Kazakhstan.

Required profile

• Several years of experience in IT engineering or systems administration, preferably in a small company with independent ownership of issues.
• Experience managing MDM at fleet scale and writing/debugging policies beyond enrollment.
• Hands‑on experience with cloud directory administration and troubleshooting SAML, OIDC, SCIM.
• Strong knowledge of DNS and email authentication, comfortable making production changes.
• Solid networking fundamentals and ability to analyze packet captures.
• Scripting skills for automation and sound judgment for independent decision‑making.

Required skills

• MDM management (cross‑platform, macOS)
• Apple Business Enrollment and app distribution tools
• Endpoint security (encryption, OS baselines, agent health)
• SAML, OIDC, SCIM configuration and troubleshooting
• DNS management, DKIM, DMARC
• Network troubleshooting and packet capture analysis
• Scripting/automation (e.g., Bash, Python)

What we offer

• Competitive compensation in USD
• Opportunity to set standards for hardware and internal tools across the company