IT Manager

Daylight is a security services company delivering Managed Agentic Security Services (MASS), including MDR, threat hunting, security data lake, and more, through a fundamentally different architecture than traditional security services providers.

Daylight's architecture combines an agentic platform that runs the full cycle from detection to response with security experts from IR and threat hunting backgrounds. The platform collects identity and business context across systems to investigate alerts and continuously learns your environment. Security experts validate decisions, feed insights into the platform, optimize detections, and take over in case of an incident.

The result: security teams move from firefighting to strategic work.

We're looking for a hands-on IT Manager to join us at Daylight Security and own corporate IT end to end. This is our first dedicated IT hire — today the work is split between the Infra & Security team and a part-time external provider. You'll take it over, professionalize it, and automate as much of it as possible, for a fully cloud, all-Mac company of ~60 people.

At a security company, the corporate fleet is an attack surface. This role sits inside Infra & Security, not next to it, and you'll work closely with Security, People, and Finance.

If you're excited by owning a function outright, enjoy working in a fast-paced startup, and want your work to have real impact, we'd love to meet you.

Responsibilities:

Own Google Workspace as our identity layer — OU and group structure, SAML/OIDC app integrations, Context-Aware Access policies, passkey and MFA enforcement, admin API automation

Own the macOS fleet through MDM — zero-touch enrollment, configuration profiles, patch and OS update enforcement, software deployment, compliance reporting

Own the employee lifecycle — onboarding and offboarding runbooks, access provisioning and revocation, hardware procurement, shipping, and returns

Run day-to-day IT support in Slack, set response SLAs and service metrics, and manage the external IT provider relationship

Own the SaaS estate — licensing, renewals, vendor management, periodic access reviews, and spend optimization

Build AI-native automation across Workspace, Slack, MDM, and HR systems using vendor APIs, scripts, and agentic tooling. We build AI agents for a living; internal IT should run on them

Partner with Infra & Security on endpoint security, zero-trust network access, secrets management, and incident response

Produce audit evidence — device inventory, access reviews, offboarding proof

Own office connectivity, conference room A/V, and network infrastructure

Maintain runbooks, inventories, and documentation good enough that someone else can follow them

Requirements:

5+ years in IT operations or system administration at a cloud-native company

Deep hands-on Google Workspace administration, beyond user management — OUs, SAML app integration, Context-Aware Access, admin API, domain-wide delegation hygiene

Strong macOS administration at scale through a modern MDM (Kandji, Jamf, Mosyle, or similar), including scripting and configuration profiles

Real scripting and automation ability — Python, Bash, or Go against vendor APIs, or low-code and agentic workflow platforms

Solid IAM fundamentals — SAML/OIDC, SCIM, FIDO2/passkeys, least privilege, joiner-mover-leaver

Comfort working in an AI-native environment, whether that's using AI in your daily work or building automation on top of it

Comfortable as the sole owner of a function — self-directed, writes things down, closes loops without being chased

Hebrew and English

Nice to have:

Prior IT at a security or regulated company; SOC 2 / ISO 27001 evidence collection

ZTNA (Twingate, Tailscale, Cloudflare) and EDR (CrowdStrike, SentinelOne)

Slack Enterprise Grid administration

AWS or GCP exposure; Terraform