IT and Security Generalist

Summary

Galileo is a team-based medical practice working to improve the quality and affordability of health care for all through high-touch, data-driven, multi-specialty care. The IT and Security Generalist will operate and improve identity, endpoint, security monitoring, audit evidence, and automation systems while handling exceptions and supporting the development of security engineering expertise.

Responsibilities

• Administer identities in Okta (users, groups, applications, device trust)
• Manage the MacBook fleet through the MDM platform: enrollment, configuration, compliance, remote actions
• Monitor and refine onboarding and offboarding through the existing automated lifecycle workflows and handle the exceptions they surface
• Maintain and extend the automation estate that runs lifecycle, monitoring, and reporting workflows, including the LLM-assisted triage steps built using GenAI
• Own the workflows you build: monitor them, fix failures, retire what no longer serves a purpose
• Build new automation for manual processes across the company, working with the teams that own those processes
• Respond to alerts from endpoint protection, cloud monitoring, and identity systems within defined SLAs
• Investigate and document security events; escalate incidents per the incident handling procedure
• Support vulnerability management: review findings, track remediation with engineering, report status
• Participate in security review of engineering changes, integrations, and vendor connections
• Review authentication, authorization, and data handling patterns in internal applications and workflows
• Work with engineering to set secure defaults from the start, instead of reviewing security after changes are made
• Make sure automated evidence collection continues to work and look into any gaps flagged by the reconciler
• Gather and prepare evidence samples for SOC 2 and HITRUST assessments when automation does not handle a request
• Handle support requests that need system access or judgment beyond what the helpdesk bot and knowledge base can provide
• Write and update end-user documentation using clear, simple language

Skills

• You communicate clearly in writing and can explain a problem, a decision, and its status in just a few sentences
• You take responsibility for your work, making sure what you build keeps working. You monitor systems and fix issues as soon as they come up
• You have 4-5 years of experience in fast-moving IT, security operations, or systems administration environments, or equivalent proven experience
• Working knowledge of identity systems (Okta or equivalent) and macOS administration
• Some scripting experience and an understanding of the fundamentals. Experience with workflow automation tools, LLMs, and APIs, or a strong interest in learning them
• Familiarity with security fundamentals: authentication, least privilege, and logging
• You understand when to decide on your own and when to ask for advice. You discuss decisions before acting on them and let the team know about any blockers right away
• Exposure to HIPAA, SOC 2, or HITRUST environments
• AWS or GCP administration
• Experience with EDR, SIEM, or cloud security monitoring tools
• A security certification in progress or completed

Qualifications

Must Haves

• You communicate clearly in writing and can explain a problem, a decision, and its status in just a few sentences
• You take responsibility for your work, making sure what you build keeps working. You monitor systems and fix issues as soon as they come up
• You have 4-5 years of experience in fast-moving IT, security operations, or systems administration environments, or equivalent proven experience
• Working knowledge of identity systems (Okta or equivalent) and macOS administration
• Some scripting experience and an understanding of the fundamentals. Experience with workflow automation tools, LLMs, and APIs, or a strong interest in learning them
• Familiarity with security fundamentals: authentication, least privilege, and logging
• You understand when to decide on your own and when to ask for advice. You discuss decisions before acting on them and let the team know about any blockers right away

Nice to Haves

• Exposure to HIPAA, SOC 2, or HITRUST environments
• AWS or GCP administration
• Experience with EDR, SIEM, or cloud security monitoring tools
• A security certification in progress or completed

Benefits

• Medical / Dental / Vision insurance
• Flexible Spending Account
• Health Savings Account + match
• Company paid STD/LTD, AD&D, and Life insurance
• Paid Family Leave
• 401K + match
• Paid Time Off