Systems Administrator

QBench is a fast-growing, fully remote SaaS company powering modern laboratory operations through our cloud-based LIMS platform. As we scale and serve increasingly sophisticated customers, secure, reliable, and well-controlled internal systems are essential to protecting customer data, enabling our team, and meeting compliance expectations such as SOC 2.

The Systems Administrator plays a critical role in ensuring QBench employees have secure, reliable, and frictionless access to the tools they need—while also owning key IT and security controls that support our SOC 2 posture. This role goes beyond day-to-day IT support and into building scalable systems, improving security maturity, and continuously raising the bar for internal IT services.

The Role

We are looking for a proactive, security-minded Systems Administrator who thrives in a remote-first environment and takes pride in building clean, well-documented, and auditable systems.

You will own our device fleet and internal platforms, help enforce access and security controls, and partner closely with Operations, Engineering, and Leadership to support SOC 2 readiness and ongoing compliance. You'll be encouraged to identify risks, propose improvements, and implement better ways of working—without waiting to be asked.

Key Responsibilities:

Device & Endpoint Management

• Own and manage all company-issued devices using JAMF MDM (macOS-first environment).
• Configure secure baseline device configurations aligned with company security policies.
• Ensure devices are properly encrypted, patched, monitored, and compliant with SOC 2 requirements.
• Manage the full device lifecycle including provisioning, onboarding, offboarding, and secure decommissioning.
• Maintain accurate device inventory and documentation for audit and security purposes.

Security, Antivirus & Access Controls

• Manage endpoint protection, antivirus, and security tooling across all company devices.
• Enforce least-privilege access by managing user access provisioning, changes, and deprovisioning across systems.
• Participate in and support regular access reviews to validate appropriate permissions.
• Monitor security alerts and assist with investigation and remediation of endpoint or access-related incidents.
• Support incident response processes and documentation as required for SOC 2 controls.

Systems & SaaS Administration

• Administer and support company-wide platforms such as identity management, productivity tools, collaboration systems, password management, and security tooling.
• Ensure access to systems is role-based, documented, and auditable.
• Maintain SOPs, policies, and system documentation that support security, availability, and confidentiality requirements.
• Assist with vendor and third-party access management and security reviews.

SOC 2 Compliance & Audit Support

• Own day-to-day IT and endpoint controls that map to SOC 2 Trust Services Criteria (Security, Availability, Confidentiality).
• Collect, maintain, and provide audit evidence related to:
• Device management and endpoint security
• User access controls and lifecycle management
• Antivirus and monitoring
• Change management for internal systems
• Partner with Operations and Leadership to prepare for SOC 2 audits and address auditor requests.
• Identify and remediate control gaps identified through audits or internal reviews.
• Continuously improve the maturity of IT controls as the company scales.

IT Operations & Continuous Improvement

• Identify opportunities to improve reliability, security, and employee experience across IT services.
• Standardize and automate repeatable IT workflows where possible.
• Track and improve key IT metrics such as onboarding time, device issues, and access-related incidents.
• Proactively recommend improvements to tools, policies, and processes.

Cross-Functional & Special Projects

• Spend an initial portion of time assisting the Operations team with special projects related to systems, security, compliance, or scaling initiatives.
• Collaborate with Finance, People Ops, Engineering, and Leadership on systems-related needs.
• Act as a trusted internal advisor on IT and security best practices.

Measurable Outcomes / Success Metrics

• 100% of company devices managed, secure, and compliant via JAMF
• Timely and accurate onboarding/offboarding with no access control gaps
• Successful completion of SOC 2 audits with no high-severity findings related to IT controls
• Clear, auditable documentation for all in-scope IT systems and processes
• Reduced device, access, and security-related incidents over time
• Positive internal feedback on IT reliability and responsiveness

Required Qualifications

• 4+ years of experience in a Systems Administrator, IT Administrator, or similar role.
• Hands-on experience managing macOS devices using JAMF or equivalent MDM.
• Experience managing endpoint security, antivirus, and device compliance.
• Experience administering SaaS tools in a fully remote environment.
• Strong understanding of identity and access management concepts.
• Experience supporting or working within SOC 2-aligned environments.
• Excellent written communication and documentation skills.
• Comfortable operating independently in a remote, async-first company.
• Legal resident of the United States residing in the United States.

Preferred / Nice-to-Have

• Experience supporting SOC 2 Type I or Type II audits
• Familiarity with SOC 2 tooling (Drata, Vanta, Secureframe, or similar)
• Experience with IT automation or scripting
• Prior experience at a SaaS company with 50–200+ employees
• Background assisting with vendor risk assessments or security reviews

Who You Are

• Ownership-Oriented: You take responsibility for systems, controls, and outcomes.
• Security-Minded: You proactively think about risk, access, and data protection.
• Process-Driven: You value documentation, repeatability, and audit-ready systems.
• Curious & Improving: You're always looking for better tools and smarter processes.
• Collaborative: You partner well with Operations and other teams to solve real problems.

Why QBench?

• Fully remote, US-based role
• High ownership and autonomy
• Direct impact on security, compliance, and company scalability
• Competitive compensation and benefits
• Opportunity to shape IT and security foundations as QBench grows

Job Type: Full-time

Pay: $80, $100,000.00 per year

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

Experience:

• SoC: 1 year (Preferred)
• Apple Device Management: 1 year (Required)
• Google Workspace: 1 year (Required)
• System administration: 4 years (Required)

Work Location: Remote