Job Opportunities API

veritree and Job Overview veritree is an award-winning climate tech start-up based in Vancouver. Launched in 2021, our technology measures and verifies the impact of global restoration efforts from the ground up. We are on a mission to plant 1 billion verified trees by 2030, collaborating with businesses, planting organizations, and consumers who believe in the transformative power of verified restoration projects to create real and meaningful impact for the planet, nature, and people. veritree is seeking an IT Engineer to support the veritree & tentree’s organizations. This role requires someone with IT experience able to be self-sufficient and manage the IT needs of two separate organizations that share resources. You must be able to work from our shared office several days a week, and as required by either group that you’ll be supporting. 6 Month Key Outcomes Take full ownership of IT operations and end-user support with a smooth handover on both veritree and tentree, becoming the go-to owner for the device fleet, identity, and day-to-day support across the organizations. Fully own and optimize our MDM solutions across the fleet - zero-touch enrollment, enforced hardening baselines, patching running smoothly across all devices - and complete the Windows MDM rollout. Establish a solid security operations baseline - oversee our managed EDR provider, enforce MFA and least-privilege access across Google Workspace and SaaS, and put onboarding/offboarding and incident-response runbooks in place - leveraging AI tools to accelerate documentation and automation. What You'll Do: IT Operations, Infrastructure & End-User Support Provide responsive, high-quality end-user support across hardware, software, access, and connectivity. Support core IT infrastructure - DNS, VPN, Wi-Fi, networking, SaaS platforms, and productivity tools. Own IT asset, license, and vendor management - procurement, renewals, cost optimization, lifecycle tracking, and tool evaluation. Create and maintain clear documentation, runbooks, and knowledge-base articles to make IT repeatable, auditable, and scalable. Identity, Access & Endpoint Management Administer Google Workspace and Microsoft 365 - users, groups, identity, licensing, SSO, and security/DLP policies. Own the full onboarding/offboarding lifecycle and enforce MFA, least-privilege, and periodic access reviews across all systems. Own the MDM platforms across the fleet - Mosyle MDM and Apple Business Manager for Apple, plus the Microsoft Intune rollout for Windows - driving zero-touch enrollment, app deployment, OS patching, and enforced hardening/security baselines across macOS and Windows. Standardize device provisioning, inventory, and refresh processes, including mobile/BYOD where applicable. Security Operations & Governance Oversee our managed EDR provider and security monitoring/logging, and lead incident response end-to-end using MITRE ATT&CK. Run the phishing and email security program (SPF/DKIM/DMARC, simulations, awareness training) and vulnerability management across endpoints, SaaS, and infrastructure. Author and maintain security policies, runbooks, and a risk register, aligned to recognized frameworks (CIS Controls, NIST CSF). AI & Automation Leverage AI tools (e.g., Claude, ChatGPT, GitHub Copilot) to accelerate documentation, scripting, log/alert analysis, and troubleshooting. Build automations and workflows (scripting, MDM automation, integration platforms) to reduce manual effort and human error. Requirements Qualifications Professional Requirements or Qualifications Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline - or equivalent hands-on experience. 3+ years of experience in IT operations / systems administration, with exposure to security-related fields, and the ability to own the IT function independently. Proven experience managing device fleets via MDM - A