Job Description
About Us:
At Near, we help top talent in Latin America find remote roles with US companies. Our mission is to create better lives by fostering a remote work culture that transcends borders.
About Our Client:
Our client is a US-based e-commerce agency that manages the full marketplace business for consumer brands, covering catalog, content, retail operations, and advertising across Amazon (Seller Central and Vendor Central), Walmart Marketplace, Target Plus, and other emerging channels. Their clients span CPG, cosmetics, skincare, apparel, footwear, and handbags. Because the company operates these channels end to end, it holds administrative access to client accounts that generate real revenue, which makes security and access governance central to how it runs. The company is fully remote and also runs an AI Agentic Commerce practice, building its own tooling.
About the Role:
We are looking for an IT Operations Manager to build and own the company’s IT function for the first time. NinjaOne is already in use as the RMM and endpoint management platform, but it was set up before anyone owned it and has never been audited. Backups are only partly configured and have never been restore-tested, software installation and patching are still manual, and there is very little documentation. This is a build, not an inherited, well-run environment.
You’ll own everything from endpoint management, MDM, patching, backups, and support ticketing to security operations, identity and access governance, and the administration of the company’s cloud data and AI platforms. A key part of the role is governing access to client marketplace accounts (Amazon, Walmart, Target Plus), where mistakes have contractual consequences.
This is an individual contributor role with no direct reports and no second IT seat. You’ll be both the person who designs the patch strategy and the person who remotes into a laptop to fix an issue before a client call. Because the whole team works from home, zero-touch enrollment, drop-shipped devices, and remote administration are the core of the job. You’ll report to the VP of Commercial and Retail Media and work closely with the Managing Partner on security and policy. You’ll also partner with the company’s Applied AI & Analytics Manager, a peer role that relies on your infrastructure and access governance.
This is a remote, full-time contractor role aligned with US business hours.
Key Responsibilities:
- Take ownership of NinjaOne: audit and correct its configuration, policies, alerting, script library, and integrations, and document it all.
- Manage the full device lifecycle across a remote Windows and macOS fleet, including zero-touch enrollment, automated software installation, home shipping, device returns, and verified wipes.
- Manage iOS, Android, and macOS devices through MDM, including remote wipe and a defined BYOD policy.
- Own patch management end to end, including staged rings, maintenance windows, OS and third-party updates, exception handling, rollback procedures, and compliance reporting.
- Own backup management (endpoint, server, and Google Workspace), including retention policies, recovery objectives, and scheduled, documented restore tests.
- Run support ticketing for all employees, set response targets, build a knowledge base, and use automation to reduce repeat issues.
- Govern access to client marketplace accounts, including role-based access control, API key and token management, master account security, and same-day offboarding verified in-console.
- Own end-to-end setup and teardown of client engagements, including mailboxes, vaults, browser profiles, marketplace permissions, and verified offboarding.
- Administer the infrastructure side of Google Cloud / BigQuery (projects, IAM, service accounts, quota, and cost) and the enterprise settings of AI platforms (Claude, Gemini), including approving connectors and plugins on security grounds.
- Administer Google Workspace groups, shared drives, Google Credential Provider for Windows, and Chrome browser policy, including the extension allowlist.
- Lead security operations, including endpoint hardening, encryption, MFA, endpoint protection, quarterly access reviews, and incident response.
- Write IT and information security policies, runbooks, and a tested disaster recovery plan.
- Manage IT vendors, licenses, renewals, and costs, and set up absence coverage through runbooks and an external provider.
What We’re Looking For:
- 5+ years of experience in IT operations or systems administration, including at least 2 years owning endpoint management across a real fleet.
- Hands-on ownership and configuration of an RMM or endpoint management platform (NinjaOne strongly preferred; Datto, ConnectWise, Kaseya, Atera, N-able, Intune, Jamf, Kandji, or Addigy are also relevant).
- Experience supporting a fully remote workforce through zero-touch provisioning, drop-shipped hardware, and remote troubleshooting.
- Proven patch management experience at scale, including staged rollouts and handling at least one bad update.
- Backup ownership that includes actual restore testing.
- MDM experience across iOS, Android, and macOS.
- Scripting skills in PowerShell and shell (macOS) for automation.
- Google Workspace administration experience, including groups, shared drives, Google Credential Provider for Windows, and Chrome browser management.
- Strong identity and access governance experience (RBAC, least privilege, MFA, joiner-mover-leaver processes, and access reviews).
- Experience managing API keys, tokens, secrets, and privileged/master accounts.
- Cloud IAM experience, ideally Google Cloud / BigQuery (AWS or Azure also relevant).
- Experience administering SaaS platforms and their data governance settings.
- Incident response experience, including handling at least one real suspected compromise.
- Comfort working as the sole IT person and documenting to a standard someone else could follow.
- A reliable home setup with business-grade internet, a backup connection, and backup power.
- NinjaOne certification or current NinjaOne administration is a plus.
- MSP background is a plus.
- Experience with SOC 2, client security questionnaires, or similar compliance work is a plus.
- Experience building an IT function from scratch is a plus.
- E-commerce, marketplace, or agency experience is a plus.
- Excellent English communication skills, both written and verbal.
- Availability to work full-time aligned with US Eastern business hours (up to US Pacific hours is acceptable).
Perks – What’s in It for You?
- 10 days of PTO per year.
- Remote, full-time contractor position.
- Full ownership of the company’s IT function, with the freedom to set your own standards.
- Direct access to company leadership on security and policy decisions.
- A live platform with budget already committed, ready to be built out properly.
- Opportunity to work on high-impact, security-critical work for recognizable consumer brands.
Ready to apply?
Sign in or create your near profile in under a minute.
