Daylight is a security services company delivering Managed Agentic Security Services (MASS), including MDR, threat hunting, security data lake, and more, through a fundamentally different architecture than traditional security services providers.
Daylight's architecture combines an agentic platform that runs the full cycle from detection to response with security experts from IR and threat hunting backgrounds. The platform collects identity and business context across systems to investigate alerts and continuously learns your environment. Security experts validate decisions, feed insights into the platform, optimize detections, and take over in case of an incident.
The result: security teams move from firefighting to strategic work.
We're looking for a hands-on IT Manager to join us at Daylight Security and own corporate IT end to end. This is our first dedicated IT hire — today the work is split between the Infra & Security team and a part-time external provider. You'll take it over, professionalize it, and automate as much of it as possible, for a fully cloud, all-Mac company of ~60 people.
At a security company, the corporate fleet is an attack surface. This role sits inside Infra & Security, not next to it, and you'll work closely with Security, People, and Finance.
If you're excited by owning a function outright, enjoy working in a fast-paced startup, and want your work to have real impact, we'd love to meet you.
Responsibilities:
- Own Google Workspace as our identity layer — OU and group structure, SAML/OIDC app integrations, Context-Aware Access policies, passkey and MFA enforcement, admin API automation
- Own the macOS fleet through MDM — zero-touch enrollment, configuration profiles, patch and OS update enforcement, software deployment, compliance reporting
- Own the employee lifecycle — onboarding and offboarding runbooks, access provisioning and revocation, hardware procurement, shipping, and returns
- Run day-to-day IT support in Slack, set response SLAs and service metrics, and manage the external IT provider relationship
- Own the SaaS estate — licensing, renewals, vendor management, periodic access reviews, and spend optimization
- Build AI-native automation across Workspace, Slack, MDM, and HR systems using vendor APIs, scripts, and agentic tooling. We build AI agents for a living; internal IT should run on them
- Partner with Infra & Security on endpoint security, zero-trust network access, secrets management, and incident response
- Produce audit evidence — device inventory, access reviews, offboarding proof
- Own office connectivity, conference room A/V, and network infrastructure
- Maintain runbooks, inventories, and documentation good enough that someone else can follow them
Requirements:
- 5+ years in IT operations or system administration at a cloud-native company
- Deep hands-on Google Workspace administration, beyond user management — OUs, SAML app integration, Context-Aware Access, admin API, domain-wide delegation hygiene
- Strong macOS administration at scale through a modern MDM (Kandji, Jamf, Mosyle, or similar), including scripting and configuration profiles
- Real scripting and automation ability — Python, Bash, or Go against vendor APIs, or low-code and agentic workflow platforms
- Solid IAM fundamentals — SAML/OIDC, SCIM, FIDO2/passkeys, least privilege, joiner-mover-leaver
- Comfort working in an AI-native environment, whether that's using AI in your daily work or building automation on top of it
- Comfortable as the sole owner of a function — self-directed, writes things down, closes loops without being chased
- Hebrew and English
Nice to have:
- Prior IT at a security or regulated company; SOC 2 / ISO 27001 evidence collection
- ZTNA (Twingate, Tailscale, Cloudflare) and EDR (CrowdStrike, SentinelOne)
- Slack Enterprise Grid administration
- AWS or GCP exposure; Terraform