IT Admin & DevSecOps Lead

Responsibilities - IT Leadership & Corporate Systems

• Serve as the head of IT, owning the vision, roadmap, and day-to-day execution of JamLoop’s internal technology operations.
• Manage and improve corporate IT systems, including identity and access management, endpoint management, SaaS administration, device lifecycle management, and employee support processes.
• Build scalable IT policies, standards, and operating procedures that support a growing company.
• Partner with leaders across Engineering, Operations, Finance, and People teams to ensure systems, tools, and processes meet business needs.
• Oversee vendor selection, procurement, renewals, and technology lifecycle planning.

Cloud Infrastructure & AWS Cost Optimization

• Lead initiatives to reduce and optimize AWS spend across infrastructure, compute, storage, networking, and observability tooling.
• Analyze current architecture and usage patterns to identify opportunities for cost savings without compromising reliability or performance.
• Drive improvements in infrastructure design, resource utilization, autoscaling, storage optimization, reserved capacity planning, and environment hygiene.
• Partner with engineering teams to implement cloud governance, tagging, budgeting, forecasting, and cost accountability practices.
• Establish infrastructure standards and automation that improve scalability, repeatability, and operational efficiency.

Security & DevSecOps

• Design and implement practical, right-sized security controls across JamLoop’s corporate and production environments.
• Own and enhance security practices in areas such as access control, secrets management, endpoint security, vulnerability management, logging and monitoring, incident response, and security awareness.
• Embed security into engineering and operational workflows through DevSecOps practices, automation, and policy enforcement.
• Partner with engineering to improve CI/CD security, infrastructure-as-code controls, dependency management, and cloud configuration hardening.
• Evaluate current risks and prioritize a roadmap for security maturity across people, process, and technology.
• Support compliance, audit readiness, customer security reviews, and documentation of security controls as needed.

Operational Excellence

Establish metrics, dashboards, and reporting for IT performance, cloud spend, system health, and security posture.
Create and maintain documentation for critical systems, processes, and recovery procedures.
Lead incident management and response efforts related to internal systems, security issues, and key operational disruptions.
Continuously identify opportunities to automate manual processes and improve reliability across the organization.

What We’re Looking For

• 7+ years of experience across IT, infrastructure, security, or DevSecOps roles, with increasing ownership and leadership responsibility.
• Proven experience leading or owning corporate IT for a growing organization.
• Deep experience with AWS, including architecture, operations, cost optimization, and security best practices.
• Strong hands-on experience with areas such as:
  • Identity and access management
  • MDM / endpoint management
  • Cloud infrastructure and networking
  • Infrastructure as code
  • CI/CD pipelines
  • Security tooling and controls
  • Monitoring, logging, and incident response
  • Demonstrated success identifying and delivering meaningful cloud cost savings.
  • Experience implementing security controls across both internal business systems and engineering environments.
  • Strong understanding of modern security principles, including least privilege, defense in depth, vulnerability management, and secure software delivery.
  • Ability to operate as both a strategic leader and a hands-on builder.
  • Excellent communication skills, with the ability to explain technical decisions and risk tradeoffs to technical and non-technical stakeholders.

Nice to Have

Experience in adtech, martech, SaaS, or other high-scale data-driven environments.
Familiarity with compliance frameworks or customer security requirements such as SOC 2, ISO 27001, or similar.
Experience managing identity providers, endpoint security platforms, SIEM/logging platforms, and cloud security tools.
Background supporting distributed or hybrid teams.
Experience building IT and security functions from the ground up or through a period of rapid growth.