Engineering and operations team largely based in Almaty.
Responsibilities
Manage the device fleet through a cross-platform MDM platform, mostly macOS; administer Apple business enrollment and app distribution, configuration and compliance policies, rollout standards, hardware inventory.
Maintain endpoint security: encryption, OS security baselines, agent health, reporting on coverage; participate in transition to a new endpoint solution.
Administer cloud directories and configure SSO and provisioning for corporate SaaS; work with SAML, OIDC, SCIM, claim mapping.
Manage transactional email through a third-party provider: sending domains, DNS, DKIM and DMARC, bounce investigation, sending policies.
Administer ticketing platform and Slack integration; handle onboarding and offboarding end to end.
Support office IT infrastructure: LAN, routing, self-hosted storage.
Keep global services accessible from Kazakhstan; investigate network-level issues.
Requirements
A few years of experience in IT engineering or systems administration, ideally in a smaller company.
Experience managing MDM at fleet scale, including writing and debugging policies beyond enrollment.
Cloud directory administration experience and hands-on troubleshooting with SAML, OIDC, SCIM.
Strong knowledge of DNS and email authentication, confident making production changes.
Solid networking fundamentals and ability to analyze packet captures.
Scripting skills to automate repetitive tasks.
Sound judgment to make decisions independently.
English proficiency sufficient for vendor support and collaboration.
Nice to have
Experience migrating a live device fleet from one endpoint agent to another.
Experience with self-hosted storage and backups.
Experience keeping global services working reliably from Kazakhstan.
Conditions
Full-time, on-site work in Almaty; must be based in Kazakhstan and eligible to work here.