SOC Lead

About the role

The SOC Lead will evaluate agent‑generated security investigations, confirming their validity, completeness and actionable value. You will act as the technical authority for these investigations and communicate findings to customers with credibility gained from hands‑on incident experience.

Key responsibilities

• Own corporate IT operations and infrastructure, including endpoint fleet management and the full onboarding/off‑boarding lifecycle.
• Run identity and access management processes (SSO, provisioning, joiner/mover/leaver flows, access reviews, least‑privilege enforcement).
• Manage the device estate via MDM, handling enrollment, baseline configuration, patching and compliance policies.
• Administer productivity and SaaS stack, overseeing licensing, tenant configuration and application governance.
• Maintain networking and connectivity – firewalls, VPN, Wi‑Fi and switching across sites.
• Ensure IT controls align with SOC 2 and ISO 27001, collaborating with security on endpoint protection and EDR coverage.
• Run the service desk: ticketing, SLA management, escalation paths and reporting of recurring issues.
• Lead a small IT/helpdesk team, manage vendors, contracts and the IT budget.

Required profile

• Proven experience owning corporate IT end‑to‑end, including large‑scale endpoint fleet management and onboarding/off‑boarding.
• Strong hands‑on identity and access management experience with solutions such as Okta, Microsoft Entra ID (Azure AD) or JumpCloud.
• Demonstrated ability to assess security investigations and communicate findings to customers.
• Experience leading or mentoring a small technical team and managing external vendors.

Required skills

• Okta
• Microsoft Entra ID (Azure AD)
• JumpCloud
• Mobile Device Management (MDM)
• Endpoint Detection & Response (EDR)
• SOC 2 compliance
• ISO 27001 compliance
• Firewalls, VPN, Wi‑Fi, network switching
• SaaS administration and licensing
• Ticketing systems and SLA management