IT & Security Operations Contractor - SF AI Startup

Retell AI is a San Francisco-based voice AI platform that makes it easy for businesses to build, test, and deploy AI-powered phone agents. Our customers span healthcare, real estate, financial services, and more. We're a fast-growing startup backed by top investors and working with hundreds of companies ranging from startups to enterprises. We are looking for an IT & Security Operations Contractor to help manage and improve our internal IT, identity, endpoint, and security tooling. This is a hands-on operational role for someone who can own day-to-day IT systems administration while also helping us scale toward stronger enterprise security and compliance requirements. Our current stack includes Google Workspace, Apple Business Manager, Kandji, Cloudflare, and a growing set of SaaS tools used across engineering, sales, support, legal, finance, and operations. What you'll do: Manage Google Workspace administration, user access, groups, MFA, SSO, and security settings Manage Kandji / MDM policies for company Macs, including FileVault, OS updates, app deployment, security profiles, and device compliance Manage Apple Business Manager and zero-touch enrollment for employee and contractor Macs Help configure and maintain SSO, SCIM, and access policies across core SaaS apps Manage Cloudflare security tools such as Zero Trust, Access, Gateway, DNS, and related policies Improve employee and contractor onboarding/offboarding workflows Help define and enforce managed-device access for sensitive systems Support global contractor device setup, security, and return logistics Maintain access reviews, device inventory, and audit-ready documentation Help respond to customer security reviews and compliance needs around SOC 2, ISO 27001, HIPAA, GDPR, PCI, and related frameworks Troubleshoot internal IT/security issues and help employees get unblocked quickly Requirements: Hands-on experience administering Google Workspace / Cloud Identity Experience managing Mac fleets with Kandji, Jamf, Mosyle, or similar MDM tools Familiarity with Apple Business Manager and automated device enrollment Experience configuring SSO, MFA, SaaS access controls, and user lifecycle workflows Experience with Cloudflare Zero Trust, Access, Gateway, DNS, or similar tools Strong understanding of endpoint security, BYOD risk, contractor access, and offboarding controls Comfortable working independently in a fast-moving startup environment Clear documentation and communication skills Nice to have: Experience with Kandji specifically Experience with Google Context-Aware Access and Endpoint Verification Experience with Okta, Rippling, or other identity/lifecycle systems Experience supporting SOC 2, ISO 27001, HIPAA, GDPR, PCI, or enterprise security reviews Experience managing global contractor devices and remote employee IT Experience administering tools like Lark, Slack, Zoom, HubSpot, Stripe, Ironclad, Postman, OpenAI, Anthropic, Deel, Ashby, or Pylon Experience at a B2B SaaS, AI, healthcare, fintech, or security-sensitive startup Engagement details: Contract role 10-20 hrs / week to start Potential for long-term ongoing support Must have overlap with US Pacific Time business hours Remote role