Back to jobs

IT Systems Administrator

Remote, US

About Us

Epic Kids is the leading digital reading platform built for kids 12 and under, trusted by millions of children, educators, and families around the world. Our mission is to inspire a lifelong love of reading by providing unlimited access to thousands of high-quality books, videos, and educational content through a safe and engaging experience. We combine technology, storytelling, and learning innovation to help every child become a confident reader.

At Epic, you'll join a collaborative and fast-paced global team passionate about building meaningful products that make a real impact on children's education and literacy.

About the Role

The IT Systems Administrator runs Epic's day-to-day IT operations and keeps them continuously audit-ready and in compliance with defined regulatory requirements. The scope covers corporate identity and access, endpoint and application management, business network infrastructure, and employee IT support.

As the dedicated IT function of a small company, you will work from goals and requirements set by technology leadership, with wide ownership of how the work gets done. Part of that work is maintaining the access records, change history, and control evidence that audits and security reviews rely on. You will partner closely with infrastructure, engineering, and people operations on onboarding and offboarding, access reviews, security initiatives, and Epic's compliance program.

This is a fully remote, US-based role working closely with a global engineering team.

What You'll Do

  • Administer corporate identity and access across Google Workspace and our core business applications -- accounts, groups, roles, and least-privilege permissions
  • Evolve the identity stack -- single sign-on, lifecycle automation, and identity tooling as needs grow
  • Own the user lifecycle end to end -- provisioning at hire, changes at role transitions, and complete, timely deprovisioning at exit
  • Run periodic user access reviews across in-scope systems and drive the remediation they surface to closure
  • Enforce authentication and device standards -- multi-factor enrollment, encryption, patching, and configuration baselines
  • Own device provisioning -- MDM enrollment and laptop setup, including zero-touch deployment
  • Manage business network infrastructure, including firewalls, switches, routers, wireless networks, VPNs, and internet connectivity
  • Maintain backup and recovery capabilities in line with defined RPOs and RTOs
  • Monitor privileged access and sensitive or restricted data-handling activities
  • Support data governance initiatives related to regulated or protected data
  • Administer cloud platforms and SaaS environments
  • Produce and maintain evidence for IT-owned controls, and support audits, customer security questionnaires, and vendor security reviews
  • Maintain the inventory of applications, hardware assets, and the access each grants
  • Handle day-to-day IT support for employees
  • Define and document IT procedures and keep runbooks current
  • Partner with infrastructure and people operations on policy rollout, security-awareness training completion, and incident response for IT-owned systems

What We're Looking For

Required Qualifications: 

  • 5+ years in IT administration or IT operations, with hands-on identity, endpoint, network, and business-application administration beyond ticket-queue support
  • Experience supporting a formal compliance program (SOC 2, ISO 27001, or similar) -- access reviews, evidence collection, control documentation, and working with auditors
  • Working knowledge of identity and access management -- single sign-on, multi-factor authentication, privileged access, and user lifecycle management
  • Experience administering Google Workspace or a comparable productivity and identity suite
  • Strong troubleshooting across hardware, operating systems, networking, cloud platforms, and SaaS applications
  • Experience managing business network technologies, including firewalls, routers, switches, wireless networks, and VPNs
  • Experience with controlled remote-access technologies such as VPNs, VDI, or similar
  • Clear communication and documentation, supporting both technical and non-technical employees
  • Bachelor's degree or equivalent practical experience
  • CompTIA Network+ and Security+ or equivalent
  • Associate Google Workspace Administrator or equivalent

Preferred Qualifications : 

  • Experience managing a macOS fleet with a modern MDM platform (Jamf, Kandji, Intune, or similar)
  • Experience implementing conditional / context-aware access (geo- and network-based restrictions)
  • Familiarity with data-residency and privacy requirements (COPPA, FERPA, GDPR)
  • Experience with a compliance automation platform (Vanta, Drata, or similar)
  • Experience with identity-governance or access-review tooling (SailPoint, Certalign, Lumos, or similar)
  • Experience with SSO integrations using SAML and SCIM
  • Experience with backup, disaster recovery, and business-continuity practices
  • Scripting to automate routine administration (Python, Bash, or PowerShell)
  • Cisco CCST IT Support, Cisco CCST Cybersecurity, ISC2 Certified in Cybersecurity, or similar

Compensation : 

$100K–$120K

Create a Job Alert

Interested in building your career at Epic Kids Inc.? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Resume/CV

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Epic Kids Inc.’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...