Back to jobs
New

IT Systems Engineer

Remote - US Only

About First Due

First Due’s mission is to prevent first responder injury or death by providing fire and EMS agencies with transformative, end-to-end software solutions that empower them to run safer, smarter, and more effective operations.

Job Title: IT Systems Engineer

Location: Remote - US Only
Country: United States
Department: Corporate IT
Reports To: Director of Corporate IT
Position Type: Full-Time
Salary: $100,000

Job Summary:

First Due is looking for a hands-on IT Systems Engineer to join our small but growing IT team. In this individual contributor role, you’ll own the day-to-day administration of our Microsoft 365 environment and core identity infrastructure. You’ll be an active contributor to the helpdesk team — owning a meaningful share of the incoming IT ticket queue alongside your teammates, while also serving as the senior technical resource who handles the most complex escalations and helps raise the team’s overall capability. 

You’ll work closely with the Director of Corporate IT on strategic initiatives including SSO and SaaS application governance, identity and access management, endpoint security, and compliance readiness. A near-term priority for this role is systematically onboarding our SaaS portfolio to SSO via Entra ID and building the automation that makes access provisioning reliable and auditable. This is a high-ownership role with real visibility across the organization. 

Key Responsibilities:

Automation, Scripting & SaaS Governance 

  • Build and maintain PowerShell and Graph API scripts to automate onboarding, offboarding, and access provisioning workflows.
  • Identify manual IT processes and reduce toil through scripting and workflow tooling (e.g., Power Automate).
  • Own and systematically expand our SSO integration program — evaluate existing SaaS applications, prioritize SAML/OIDC integrations via Entra ID, and build automated provisioning/deprovisioning workflows (SCIM where supported).
  • Maintain a SaaS application catalog — tracking ownership, license counts, renewal dates, and SSO/MFA status across the organization’s tool portfolio.

Identity & Access Management 

  • Serve as a senior technical lead for Entra ID (Azure AD) — partnering with the team to manage user lifecycle, group management, Conditional Access policies, and MFA enforcement.
  • Drive SSO integration across SaaS applications using SAML/OIDC via Entra ID.
  • Implement and maintain least-privilege access principles across the tenant; support ongoing access reviews.
  • Contribute to Zero Trust architecture initiatives in partnership with the IT Director. 

Endpoint & Device Management 

  • Administer and mature our MDM platform (Intune) for Windows devices, ensuring device compliance, configuration, and security baselines; contribute to the evaluation and implementation of a dedicated macOS MDM solution (e.g., Jamf or Kandji) as the Mac fleet grows.
  • Manage device lifecycle: procurement, provisioning, compliance enforcement, and decommission.
  • Develop and maintain configuration profiles, compliance policies, and device health reporting. 

 Microsoft 365 Administration 

  • Administer core M365 workloads: Exchange Online, Teams, SharePoint, OneDrive, and Defender.
  • Manage licensing, provisioning workflows, and tenant-wide security configurations.
  • Support email security infrastructure (SPF, DKIM, DMARC) and respond to mail flow issues. 

 Compliance & Security 

  • Support SOC 2 compliance efforts by maintaining system documentation, generating audit evidence, and remediating findings.
  • Participate in security reviews, vulnerability assessments, and policy enforcement activities.
  • Collaborate with the security function on DLP policies, CASB configurations, and data governance. 

 AI Tool Governance 

  • Support the governance of AI productivity tools across the organization — managing access, tracking usage, and coordinating with department leads as our AI toolset evolves.
  • Establish and maintain an AI application vetting process — evaluate third-party AI tools for data handling risk, enforce acceptable use policies, and maintain visibility into AI usage across the org.
  • Configure Purview sensitivity labels and DLP policies to prevent oversharing of data through AI tools and other collaboration surfaces. 

 Helpdesk & Team Support 

  • Carry an active share of the IT helpdesk ticket queue alongside the team — handling Tier 2/3 issues directly while serving as the go-to escalation point for the most complex cases and coaching teammates through them.
  • Help define and refine helpdesk processes, runbooks, and escalation paths.
  • Contribute to IT documentation, KB articles, and internal training materials.

Qualifications:

  • 4–6 years of hands-on experience in an IT systems or infrastructure role.
  • Solid working knowledge of Entra ID / Azure AD — user and group management, Conditional Access, MFA, app registrations.
  • Experience administering Microsoft 365 workloads (Exchange Online, Teams, SharePoint, OneDrive).
  • Solid experience with Intune for Windows device management; familiarity with macOS MDM platforms (Jamf or Kandji) a plus, as we plan to formalize macOS management going forward.
  • Proficiency with PowerShell for scripting and automation; Graph API experience (PowerShell or REST) a plus.
  • Experience integrating SaaS applications with an IdP via SSO (SAML/OIDC) and automating provisioning via SCIM — ideally at scale across 20+ applications.
  • Exposure to SOC 2 compliance processes — evidence gathering, policy documentation, or control testing.
  • Strong troubleshooting skills and ability to work independently in a remote environment.
  • Microsoft certifications (MS-102, AZ-104, SC-300, or similar) a plus.
  • Experience with Microsoft Purview (DLP, sensitivity labels, compliance policies, eDiscovery) a plus.
  • Experience governing AI productivity tools (any platform) — access management, acceptable use policy enforcement, or usage visibility — a plus.
  • Background in government technology, public safety, or other regulated environments a plus.
  • Familiarity with FedRAMP compliance requirements or experience supporting a FedRAMP authorization effort a plus. 

For US-based Roles
All applicants must be authorized to work for any US employer in the United States. Locality Media LLC is unable to sponsor or transition sponsorship ownership of employment visas at this time. Hiring is contingent upon candidates successfully passing a criminal background check. As part of the I-9 verification of authorization to work in the US, Locality Media participates in E-Verify.

Physical Demands and Work Environment
This role is fully remote with minimal travel expectations at this time. Reasonable accommodation may be made to enable qualified employees and applicants to perform the essential functions as outlined above. If you require an accommodation during the interview process, please reach out to people@firstdue.com.

Working at First Due
First Due offers a comprehensive compensation and benefits package for eligible employees, including competitive pay, medical, dental, and vision coverage, FSA/HSA, 401(k), flexible PTO, a fully remote workplace, a technology stipend, opportunities for advancement, and other benefits and perks that sets our team apart. Visit www.firstdue.com to learn more.

If you are a resident of a state requiring wage transparency, please reach out to people@firstdue.com for a reasonable estimate of annual base compensation and any eligible incentive compensation. The actual compensation offered to successful candidates for roles may be higher or lower, based on non-discriminatory criteria including but not limited to relevant professional experience, geographic location, knowledge, skills, and abilities. This range will be reviewed on a regular basis.

First Due is an equal opportunity employer. We do not discriminate in any aspect of employment on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status, or any other protected status or class. We are committed to promoting an environment of respect, acceptance, diversity and inclusivity, and equal opportunity. Discrimination and harassment of any type in any form will not be tolerated.

When you apply for a role at Locality Media, LLC d/b/a First Due, we collect personal information such as identifiers (e.g., name, email, phone number), professional and employment information, education information, and information you provide in your application materials. We use this information to evaluate your candidacy, communicate with you, and manage our recruiting process. We may share this information with our service providers who assist with recruiting and background screening. We do not sell or share applicant personal information for cross-context behavioral advertising. We retain applicant information in accordance with our data retention policies. California residents have rights under the California Consumer Privacy Act (CCPA), as amended by the CPRA. For more information, please review our Candidate Privacy here.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Education

Select...
Select...
Select...
Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in First Due’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.