• Design and implement beehiiv's corporate IT infrastructure from its current state to an enterprise-ready foundation — including network architecture, tooling selection, and systems integration. • Establish and document IT standards, policies, and procedures where none currently exist, creating a repeatable and auditable framework as the company scales. • Evaluate, procure, and deploy new tools and platforms that align with our security posture and operational needs. • Build automated provisioning and de-provisioning workflows that reduce manual overhead and human error as headcount grows. • Own the IT roadmap: identify gaps, propose solutions, and drive implementation with minimal hand-holding. • Own the full lifecycle of employee identity — seamless onboarding/offboarding, group permissions management, and strict enforcement of MFA/SSO protocols in Okta. • Design and maintain role-based access control (RBAC) structures that scale with the organization without creating security debt. • Manage a global fleet of company MacBooks (and some Windows/Linux machines) using Kandji, ensuring all devices are encrypted, patched, and compliant with our security policies. • Act as the primary admin for Google Workspace, managing everything from email routing and shared drives to security auditing and tenant-level configuration. • Handle escalated IT helpdesk tasks — tech support, hardware troubleshooting, application access — with an eye for detecting social engineering or phishing attempts. • Assist in hunting down corporate phishing attempts, performing malware removal, and implementing security protocols to keep our remote perimeter safe. • Partner with HR (BambooHR) and Engineering to automate provisioning workflows and integrate IT systems into the broader operational stack.