# AI IT Manager **Company:** [Faro Health Inc.](https://jobs.workable.com/companies/if52RTg28crvKvw2AjLUfy.md) **Location:** San Diego, United States **Workplace:** hybrid **Employment type:** Full-time **Department:** Engineering [Apply for this job](https://jobs.workable.com/view/0fa16ca2-0559-43ef-823e-e646da62f176) ## Description Faro Health aims to improve lives by helping life sciences companies answer complex clinical questions, simply, efficiently and effectively. Our software platform is used to orchestrate complex clinical development with a single source of truth. It brings words, data and teams together, empowering researchers to design more intelligent trials, master complexity and reach milestones faster. Faro is a mission-driven company and we pride ourselves on a vibrant, inclusive, and growth mindset-oriented culture. Faro offers competitive compensation and benefits, generous vacation and parental leave, flexible working hours, and remote-friendly ways of working. Remote employees work from home and travel periodically for in-person collaboration and team events. About the Role The AI IT Manager owns Faro's internal IT function end to end: identity and access, endpoint and device management, SaaS administration, and the day-to-day service desk that keeps a fully distributed company working. Reporting to the Sr. Director of Security and Compliance, you will be accountable for the operational health of the systems every Faro employee touches, and for the IT controls that underpin Faro's security certifications. This is Faro's first dedicated IT hire and needs an owner who will take it from functional to well-run. You will inherit a mature set of tools and a real backlog, and wide latitude to decide how the function is operated, automated, and measured. You will not have direct reports at hire; you are expected to build and lead the team as Faro grows, and how quickly that happens depends in large part on how effectively you automate the work in front of you. The role is equal parts operator and builder, and automation is the larger half. Running IT well, meaning provisioning, access requests, procurement, fleet management, and the service desk, is the baseline expectation. What distinguishes success in this role is how much of that work you can turn into scripted, event-driven, or self-service processes that run without you: joiner-mover-leaver flows that fire from the HR system, access requests that route and provision themselves, license reclamation that happens on a schedule, evidence that collects itself for audit. We would rather you spend a week automating a task than a year performing it. Duties and Responsibilities - Drive automation as the primary lever of the role: identify the highest-volume manual IT work and eliminate it through scripting, APIs, workflow automation, and integration between Faro's identity, MDM, ITSM, HR, and compliance systems - Build and maintain automated joiner-mover-leaver provisioning, license reclamation, access and compliance reporting, and audit evidence collection, keeping the code and runbooks version-controlled and documented so nothing depends on one person - Expand self-service where it reduces ticket volume: request catalogs, automated approval and provisioning routing, and documentation that lets employees resolve common issues without opening a ticket - Own Faro's identity and access management program across Google Workspace, Microsoft Entra ID, and the broader SaaS estate, including user lifecycle (onboarding and offboarding), group and OU structure, SSO and MFA enforcement, and privileged access segmentation - Run the IT service desk, managing intake, triage, prioritization, and resolution of access requests, hardware issues, and software support through Jira Service Management, and establish response and resolution targets the business can rely on - Manage the Mac fleet through MDM, including device enrollment and provisioning, blueprint and configuration management, OS patching and update enforcement, security baseline compliance, and certificate rotation - Administer Faro's core productivity and collaboration platforms (Google Workspace, Microsoft 365, Slack, Zoom, and the Atlassian suite), including user provisioning, permissions, workflow configuration, and license management - Execute quarterly user access reviews and access change requests in line with Faro's documented work instructions, producing the evidence required for SOC 2 and ISO 27001 audit cycles - Manage SaaS vendor relationships and the software portfolio end to end: license optimization, renewal timing, spend review, procurement requests, and maintaining an accurate inventory of applications and their owners - Own hardware procurement, asset inventory, and device lifecycle from purchase through decommissioning, including the office network and ISP relationship - Administer cloud account access and IAM policy for Azure, AWS, and GCP at the tenant level, and support cloud cost monitoring and anomaly review (DevOps owns infrastructure build-out) - Manage DNS, domain, certificate, and web platform administration, coordinating with the website development team as needed - Measure the effect of that automation, tracking ticket volume, time to provision, and manual touches per request, and use those numbers to set priorities and to make the case for additional headcount - Maintain and improve IT policies, work instructions, and runbooks in Faro's QMS, and contribute to disaster recovery and business continuity planning, testing, and stakeholder training - Support security operations where IT and security overlap, including endpoint protection deployment, DNS filtering, removable storage exceptions, and assisting incident response as directed - Produce reporting on IT service metrics, fleet and patch compliance, access review completion, and software spend for leadership ## Requirements Qualifications - 6+ years of experience in IT operations, systems administration, or IT management, with at least 2 years owning an IT function or leading IT initiatives independently - Hands-on experience administering identity platforms, including SSO, MFA, conditional access, and group-based access control - Demonstrated experience managing a laptop fleet through an MDM platform including zero-touch enrollment, configuration profiles, and patch enforcement - Experience administering Atlassian products (Jira, Jira Service Management, Confluence), including permissions, workflows, and service desk configuration - Experience running IT onboarding and offboarding at scale, with an understanding of why timely deprovisioning matters to both security and audit - Working knowledge of SaaS license management and IT procurement, including renewal negotiation and spend optimization - Familiarity with IT controls under compliance frameworks such as SOC 2 and ISO 27001, including access reviews, change management, and evidence production - Strong scripting ability in Python, Bash, or PowerShell, and fluency with REST APIs, webhooks, and workflow automation tools; you should be able to show work you have automated end to end, not just tools you have configured - Demonstrated track record of replacing manual IT processes with automation and measuring the result, ideally including automated user lifecycle provisioning across multiple systems - Comfort working in version control and reviewing your own infrastructure or automation code, with an appreciation for why IT automation needs change control like any other production system - Comfortable working in a small team environment where you will own outcomes end to end. - Bachelor's Degree in Information Technology or related field, or equivalent practical experience - Ability to be in-office 3 times per week in Sorrento Valley, San Diego. Preferred / Bonus Qualifications - Experience supporting a fully remote or hybrid, fully Mac-based workforce - Experience administering cloud tenant access and IAM policy across Azure, AWS, or GCP - Experience with an IT or GRC automation platform (Drata, Vanta, or similar) and with connecting IT systems to compliance evidence collection - Experience implementing data loss prevention, device compliance, or SaaS security posture management tooling - Experience in healthcare, life sciences, pharmaceutical, or other regulated industries - Relevant certifications such as AZ-104, Google Workspace Administrator, Apple Certified Support Professional, ITIL, or similar - Experience in a startup or high-growth environment - Experience managing contractor or third-party workstation access and audit Skills and Competencies - Service-minded and responsive; you understand that IT is judged on whether people can do their jobs, and you treat internal users as customers - Process-oriented and automation-minded; you look for ways to systematize and automate recurring work rather than treating each request as one-off - Able to lead without direct authority; you will set IT direction and drive change across the company before you have a team, and you will be expected to hire and lead one as the function grows - Exceptional organizational skills and attention to detail, with the ability to manage a service queue, a project backlog, and recurring compliance obligations at the same time - Strong written communication, with a habit of documenting what you build so the next person can run it - Sound judgment on risk and access; you can say no to a request when it is the right call, and explain why in terms the requester understands - Self-motivated and able to work independently with minimal supervision - Collaborative approach, comfortable working across engineering, security, finance, and people operations - Willingness to learn new technologies and adapt as Faro's environment evolves ## Benefits Salary - Salary range for this position is $145,000 to $165,000 - Salary listed reflects the base salary only and does not include other elements of total compensation - Individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training Equity In addition to this position's salary (listed above), equity will be a major component of the total compensation for this position. We aim to offer higher-than-average equity compensation for a company of our size, and communicate equity amounts at the time of offer issuance. Benefits - Health Care Plan (Medical, Dental & Vision) - Retirement Plan (401k) - Life Insurance (Basic) - Short Term and Long Term Disability - Paid Time Off (Flexible Vacation Policy; Paid Sick & Public Holidays Observed) - Training & Development Reimbursement - Hybrid Work Environment - Peer-to-peer bonus program - Company/department outings and events - Stock Option Plan - HQ On-Premises Amenities; gym, restaurants tenant discount, Padel Nine