layiq
worthy; deserving; fitting; suitable.
A role, opportunity, or path that merits attention, time, and pursuit.
Loading LAYIQ…Job opportunity
Faro Health Inc.
San Diego, CA, US
Source: Faro Health Inc. careers · View original posting
From Faro Health Inc.'s posting. “We” and “our” refer to the employer.
Faro Health aims to improve lives by helping life sciences companies answer complex clinical questions, simply, efficiently and effectively. Our software platform is used to orchestrate complex clinical development with a single source of truth. It brings words, data and teams together, empowering researchers to design more intelligent trials, master complexity and reach milestones faster.
Faro is a mission-driven company and we pride ourselves on a vibrant, inclusive, and growth mindset-oriented culture. Faro offers competitive compensation and benefits, generous vacation and parental leave, flexible working hours, and remote-friendly ways of working. Remote employees work from home and travel periodically for in-person collaboration and team events.
The AI IT Manager owns Faro's internal IT function end to end: identity and access, endpoint and device management, SaaS administration, and the day-to-day service desk that keeps a fully distributed company working. Reporting to the Sr. Director of Security and Compliance, you will be accountable for the operational health of the systems every Faro employee touches, and for the IT controls that underpin Faro's security certifications.
This is Faro's first dedicated IT hire and needs an owner who will take it from functional to well-run. You will inherit a mature set of tools and a real backlog, and wide latitude to decide how the function is operated, automated, and measured. You will not have direct reports at hire; you are expected to build and lead the team as Faro grows, and how quickly that happens depends in large part on how effectively you automate the work in front of you.
The role is equal parts operator and builder, and automation is the larger half. Running IT well, meaning provisioning, access requests, procurement, fleet management, and the service desk, is the baseline expectation. What distinguishes success in this role is how much of that work you can turn into scripted, event-driven, or self-service processes that run without you: joiner-mover-leaver flows that fire from the HR system, access requests that route and provision themselves, license reclamation that happens on a schedule, evidence
that collects itself for audit. We would rather you spend a week automating a task than a year performing it.
Duties and Responsibilities
Drive automation as the primary lever of the role: identify the highest-volume manual IT work and eliminate it through scripting, APIs, workflow automation, and integration between Faro's identity, MDM, ITSM, HR, and compliance systems
Build and maintain automated joiner-mover-leaver provisioning, license reclamation, access and compliance reporting, and audit evidence collection, keeping the code and runbooks version-controlled and documented so nothing depends on one person
Expand self-service where it reduces ticket volume: request catalogs, automated approval and provisioning routing, and documentation that lets employees resolve common issues without opening a ticket
Compensation
Equity
In addition to this position's salary (listed above), equity will be a major component of the total compensation for this position. We aim to offer higher-than-average equity compensation for a company of our size, and communicate equity amounts at the time of offer issuance.
LAYIQ is an independent job-discovery service. This listing does not imply a partnership with or endorsement by the employer. Review the original posting for current details and availability.
Employer posted:
Own Faro's identity and access management program across Google Workspace, Microsoft Entra ID, and the broader SaaS estate, including user lifecycle (onboarding and offboarding), group and OU structure, SSO and MFA enforcement, and privileged access segmentation
Run the IT service desk, managing intake, triage, prioritization, and resolution of access requests, hardware issues, and software support through Jira Service Management, and establish response and resolution targets the business can rely on Manage the Mac fleet through MDM, including device enrollment and provisioning, blueprint and configuration management, OS patching and update enforcement, security baseline compliance, and certificate rotation
Administer Faro's core productivity and collaboration platforms (Google Workspace, Microsoft 365, Slack, Zoom, and the Atlassian suite), including user provisioning, permissions, workflow configuration, and license management
Execute quarterly user access reviews and access change requests in line with Faro's documented work instructions, producing the evidence required for SOC 2 and ISO 27001 audit cycles
Manage SaaS vendor relationships and the software portfolio end to end: license optimization, renewal timing, spend review, procurement requests, and maintaining an accurate inventory of applications and their owners
Own hardware procurement, asset inventory, and device lifecycle from purchase through decommissioning, including the office network and ISP relationship
Administer cloud account access and IAM policy for Azure, AWS, and GCP at the tenant level, and support cloud cost monitoring and anomaly review (DevOps owns infrastructure build-out)
Manage DNS, domain, certificate, and web platform administration, coordinating with the website development team as needed
Measure the effect of that automation, tracking ticket volume, time to provision, and manual touches per request, and use those numbers to set priorities and to make the case for additional headcount
Maintain and improve IT policies, work instructions, and runbooks in Faro's QMS, and contribute to disaster recovery and business continuity planning, testing, and stakeholder training
Support security operations where IT and security overlap, including endpoint protection deployment, DNS filtering, removable storage exceptions, and assisting incident response as directed
Produce reporting on IT service metrics, fleet and patch compliance, access review completion, and software spend for leadership
Hello Nanny!® · San Diego, CA
PracticeTek · Green Bay, WI, US; Las Vegas, NV, US; San Diego, CA, US; San Marcos, CA, US; US
MedImpact · WM1 - San Diego
Neurocrine · US CA San Diego
Heartstrings Pet Hospice, In-Home Euthanasia & Aftercare · Chula Vista, CA, US; El Cajon, CA, US; La Mesa, CA, US; San Diego, CA, US
San Diego County Regional Airport Authority · San Diego, CA, US