About The Role:

We are looking for an IT and Data Security Specialist to join our high-impact engineering team, which is focused on the US market. This is a senior, hands-on role, not a helpdesk position. You will own IT, security, and access management for the company, operate with independent judgment, and proactively improve systems rather than react to issues.

Responsibilities

- Run the full user lifecycle (onboarding and offboarding) across core SaaS platforms, cloud environments, code repositories, VPN, the password manager, and AI tools, using a documented checklist and audit trail.
- Set up and maintain macOS, Linux, and Windows devices remotely.
- Manage MDM/UEM and endpoint security for all devices that access company data, including full-disk encryption.
- Manage VPN and network access controls.
- Manage AWS/GCP IAM, Security Groups, firewall rules, and access reviews.
- Manage secrets, API keys, and tokens (storage, rotation, and revocation).
- Review cloud storage (e.g., S3) for public exposure and enforce data retention policies.
- Govern access to AI/LLM tools and the data sent to them, including PII redaction.
- Own vulnerability and dependency management in partnership with engineering.
- Manage DNS and Cloudflare (records, proxying, WAF).
- Plan and run security audits and drive remediation.
- Lead response to access and security incidents (credential leaks, data exposure, compromised accounts).
- Design secure, restricted work environments for teams that handle sensitive data.
- Run phishing and social-engineering awareness training.
- Own SOPs, runbooks, and KB articles.
- Maintain audit trails and data access governance.




- Complete client and vendor security questionnaires and maintain the supporting evidence.

Requirements

- 4+ years in an IT and Data Specialist or similar role supporting a distributed team.
- Hands-on macOS, Linux, and Windows.
- Least privilege, MFA enforcement, and endpoint hardening.
- Secrets and credential management (password managers, API keys, rotation).
- AWS and/or GCP IAM and access control.
- DNS and Cloudflare.
- Security audits with actionable remediation plans.
- User lifecycle management across SaaS platforms.
- VPN setup and management.
- Strong documentation skills, including guides that non-technical teammates can follow.
- Strong written English and comfort working asynchronously across time zones.
- Sound judgment and discretion when handling privileged access and sensitive data.
- Should be comfortable working with US Overlapping hours

Preferred Skills

- MDM/UEM (JumpCloud, Jamf, Intune).
- Zero-trust tools (Tailscale, Cloudflare Access).
- SSO/IdP (Okta, Google Workspace, Entra ID).
- Scripting (Bash, Python, PowerShell).
- Vulnerability scanning tools (Nessus, Qualys).
- Terraform or CloudFormation.
- SOC 2/ISO 27001 exposure.
- Experience completing client or vendor security questionnaires.

What We Offer

- Competitive, performance-linked compensation - we pay for impact.
- Opportunity to work alongside experienced leaders
- Ownership of a high-visibility engineering function with real strategic influence.
- A fast-moving setting where your ideas ship quickly and your growth is real.
- Remote-first flexibility with a collaborative, high-agency culture.

📌 IT and Data Security Specialist (India)
🏢 LexHive (Formerly DemandLane)
📍 India