Security & IT Operations Engineer
Prefect · Remote
About this role
## Security & IT Operations Engineer ### About Prefect Prefect builds automation for an unpredictable world. In August 2026, Prefect and Dagster joined forces to build the next generation of automation infrastructure. Together, their ecosystem includes Dagster (data platform), Prefect (agent platform), and FastMCP (open-source developer framework for the MCP ecosystem). Prefect is remote-first and values high standards, ownership, and thoughtful collaboration. ### The Role As Prefect and Dagster combine into one company, this role helps unify overlapping security compliance and corporate IT systems into a single setup that runs well and gets easier to operate each quarter. You’ll own the day-to-day of: - **Security compliance (SOC 2 program)** - **Corporate IT** You’ll report to the **Security & Systems Lead** as the first hire on this new team. ### What You’ll Own - **Run day-to-day compliance**: SOC 2 controls, evidence collection, access reviews, policy acknowledgments, and training. Work with auditors and control owners to drive findings to resolution. - **Consolidate compliance programs**: Choose and set up a **GRC platform** (with a team lead and consultant). Adapt control descriptions across environments and reduce manual work. - **Own corporate IT**: Run **Google Workspace** and SaaS apps, manage onboarding/offboarding with People Ops, and administer your **Mac fleet** via **Rippling**. Help employees with laptop/access issues and improve the setup over time. - **Improve access management**: Partner with your identity provider on request/approval/grant/removal workflows. Own daily processes and keep documentation current. - **Protect corporate systems**: Manage macOS and application updates, investigate endpoint alerts, track vulnerabilities through remediation, verify fixes, and participate in phishing and incident response. - **Automate repetitive work**: Use scripts, APIs, workflow tools, or AI to reduce manual IT/compliance tasks and enable self-service for common requests. Recent examples include consolidating Mac device management into Rippling, running access reviews supporting both SOC 2 programs, and assigning tool owners while retiring duplicates. ### Where the Role Can Grow You’ll help shape the combined **Security & Systems** function. Starting with day-to-day IT and compliance, you can grow toward areas such as: - Security operations & engineering (vulnerability management, corporate incident response, corporate security engineering) - Risk management & AI governance Growth direction depends on your strengths, interests, and company needs. ### What You’ll Bring - **SOC 2 ownership + auditor experience** (or auditing experience): Understand controls, evidence, and how to adapt them across systems/teams. - **Hands-on corporate IT administration**: Account management, onboarding/offboarding, and Macs managed via MDM. Comfortable with patching, endpoint alerts, remediation tracking, phishing/suspicious activity, and employee troubleshooting. - **Automation mindset**: Comfortable automating recurring tasks with scripts/APIs/workflow tools/AI, and able to explain what you built. - **Cross-team execution**: Set owners/deadlines, remove blockers, follow through, document outcomes, and know when to escalate. ### Nice to Have - Experience with **Google Workspace**, **Rippling**, or a **GRC platform** (e.g., Vanta, Drata, Thoropass) - Familiarity with **SSO**, **SCIM provisioning**, or other access automation - Exper
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.