About HONK

The Role 

• Drive IT and security initiatives such as lightweight mobile application management, and endpoint baseline enforcement (disk encryption, screen lock, EDR health).
• Administer Google Workspace end to end: org units, groups, security settings, retention, etc.
• Manage the full device lifecycle through Iru endpoint management (formerly Kandji): procurement, enrollment and imaging, OS version enforcement, patching, repairs, refresh cycles, and secure wiping/retirement of returned devices.
• Provision and manage our software tooling: set up, license, and administer the core SaaS stack, handle access requests, and evaluate new tools that keep a growing company secure without slowing it down.
• Own employee onboarding and offboarding: hardware, accounts, and access provisioned by day one and revoked same-day at exit.
• Maintain the IT asset inventory and write the runbooks and documentation you'd want to inherit.
• Automate the repetitive parts of the role — onboarding steps, evidence collection, endpoint compliance reports — using AI tools and scripts, so the IT function scales faster than headcount.
• Run our internal helpdesk end to end: triage, resolve, and document IT issues across the company.
• Own the security awareness program: run phishing simulation campaigns, enroll clickers into training, and track completion.
• Operate and evidence the corporate IT and other controls in our SOC 2 and PCI DSS audits: access reviews, on/offboarding records, endpoint compliance, and training completion.
• Support audit coordination through our compliance platform: field auditor requests and track evidence collection in partnership with our Infrastructure/DevOps team, who own production infrastructure controls.

About You

• 4–7+ years in IT administration/operations, ideally as the sole or senior IT owner at a 50–200 person company.
• High ownership, discretion, and judgment: this role holds privileged access to nearly every system we run, and a background check is required.
• Clear and professional communication skills — you're the approachable face of IT and security best practices across the org.
• Full-lifecycle Google Workspace administration experience, owning everything from organizational unit structure and security policies to account provisioning and audit compliance.
• Hands-on MDM/endpoint management experience in a macOS-first environment (Iru/Kandji, Jamf, or Mosyle), including zero-touch deployment via Apple Business Manager; enough Windows familiarity to support a small number of exceptions.
• EDR deployment and management experience (CrowdStrike preferred).
• Direct experience supporting and implementing audit controls on devices and endpoints; comfort with compliance automation platforms like Vanta, Drata, or Secureframe.
• AI-native approach to automation — you use AI tools to write scripts, build workflows, and eliminate repetitive work rather than doing the same task a third time.
• Meticulous on/offboarding discipline and strong documentation habits.

• SSO/IdP administration (Okta, Google, JumpCloud).
• PCI DSS exposure.
• Security awareness tooling (KnowBe4 or similar).
• Certifications: Google Workspace Administrator, Jamf, CompTIA Security+ or similar.

• Hybrid from our mid-town Toronto office 2+ days/week.
• Comprehensive health, dental and vision coverage.