IT Manager - Google Workspace & macOS Fleet

About the role

Daylight Security, a security services company delivering managed security services, is hiring its first dedicated IT Manager in Tel Aviv. The role owns corporate IT end to end within the Infra & Security team, for a fully cloud, all-Mac company of about 60 people. It sits inside Infra & Security and works closely with Security, People and Finance.

Key responsibilities

• Own Google Workspace as the identity layer: OU and group structure, SAML/OIDC app integrations, Context-Aware Access policies, passkey and MFA enforcement, and admin API automation.
• Own the macOS fleet through MDM: zero-touch enrollment, configuration profiles, patch and OS update enforcement, software deployment, and compliance reporting.
• Own the employee lifecycle: onboarding and offboarding runbooks, access provisioning and revocation, hardware procurement, shipping and returns.
• Run day-to-day IT support in Slack, set response SLAs and service metrics, and manage the external IT provider relationship.
• Own the SaaS estate: licensing, renewals, vendor management, periodic access reviews and spend optimization.
• Build AI-native automation across Workspace, Slack, MDM and HR systems using vendor APIs, scripts and agentic tooling.
• Partner with Infra & Security on endpoint security, zero-trust network access, secrets management and incident response.
• Produce audit evidence such as device inventory, access reviews and offboarding proof.
• Own office connectivity, conference room A/V and network infrastructure, and maintain runbooks, inventories and documentation.

Required profile

• 5+ years in IT operations or system administration at a cloud-native company.
• Deep hands-on Google Workspace administration beyond user management, and strong macOS administration at scale through a modern MDM.
• Real scripting and automation ability, and solid IAM fundamentals.
• Comfortable as the sole owner of a function, self-directed and able to write things down and close loops without being chased.
• Hebrew and English.

Required skills

• Google Workspace, SAML/OIDC, SCIM, FIDO2/passkeys, MDM (Kandji, Jamf, Mosyle or similar)
• Scripting: Python, Bash or Go against vendor APIs, or low-code and agentic workflow platforms
• Nice to have: SOC 2 / ISO 27001 evidence collection, ZTNA and EDR, Slack Enterprise Grid, AWS or GCP, Terraform