Location: Bengaluru

Experience: 1-2 years

About LH2 AI Labs

LH2 AI Labs builds post-training infrastructure for frontier AI models. Our mission is to bring data that has never been used for training (the code, conversations, documents and workflows inside real institutions) into frontier AI pipelines, safely and with the trust of the people who own it. We work across verticals such as coding, computer use, agentic workflows, medical and audio, alongside a network of vetted domain experts. We’re a small team in Bengaluru, founded by second-time founders.

About the role:

Companies trust us with their internal code and data, and that trust starts with the basics: who has access, which devices touch company data, and how rapid access is removed when someone leaves. You’ll be one of our first IT hires, and you’ll run identity, devices and SaaS for everyone at LH2, including employees, contractors and our expert network. We want someone who automates rather than clicks, and who sees a well-run laptop fleet as a security control.

Responsibilities:

- Manage identity for everyone at LH2: SSO, MFA, groups and roles, so access follows each person from joining to leaving.
- Enroll and manage every device that touches company data. That covers device management (MDM), disk encryption, patching, and device health checks before access is granted.
- Automate onboarding and offboarding so access is ready on day one and fully revoked within an hour of someone leaving.
- Keep an up-to-date inventory of the SaaS tools we use and who can reach what in each.




- Configure email and collaboration tools against phishing, spoofing (SPF, DKIM, DMARC) and accidental oversharing.
- Set up access for contractors, vetted experts and vendors on devices we don’t own, without exposing anything else.
- Run regular access reviews and keep records an auditor would accept.
- Be the first point of contact for IT support across the team.

You may be a good fit if you:

- Have 1-2 years of experience in IT administration, IT engineering or a similar role.
- Have hands-on experience with an identity provider (Google Workspace, Okta, Microsoft Entra ID or similar) and an MDM tool (Jamf, Kandji, Intune or similar).
- Can script repetitive tasks in Python, Bash, PowerShell or a similar language.
- Understand the basics of networking, SSO protocols (SAML, OIDC) and endpoint security.
- Are organised and careful with documentation, and treat “how do we know it worked?” as part of the job.
- Communicate clearly with non-technical teammates.

Nice to have

- Experience setting up IT at a startup.
- Exposure to zero-trust or device-aware access tools.
- Familiarity with SOC 2 or ISO 27001 controls for IT.

Representative projects

- Make offboarding a single action: one change in the identity provider removes access from every SaaS tool, repo and device within the hour, and produces a record proving it.
- Put every laptop that touches customer data under management, and block access from any device that isn’t.
- Build a complete SaaS and access inventory, and help make “nobody gets access they don’t need” true.

📌 IT Administrator (Bengaluru)
🏢 LH2 AI Labs
📍 Bengaluru