• Corporate Technology Infrastructure
• Own the technology experience and systems that all Fronteers rely on daily, from laptop management and endpoint security to email and collaboration tools.
• Manage endpoints across the fleet of Mac and Windows devices (Iru, Jamf, Intune).
• Own integration governance across iPaaS tools such as Workato, including integration ownership, credential handling, environment separation, and approval gates.
• Partner with our Office team on all planning and build-out for new offices, US and international, including network infrastructure and video conferencing solutions such as Zoom Rooms.
• Own capacity planning and IT budget management. You should know what everything costs and why.
• Own the strategy, roadmaps, engineering, administration, and support of core collaboration and productivity platforms, including Google Workspace, Slack, Zoom, Jira, Notion, and related SaaS tools.
• Collaborate with AI enablement functions to incorporate enterprise AI strategy into collaboration and productivity platforms.
• Own vendor security review for every new tool entering Front, track renewals ahead of their notice windows, and partner with the procurement team on negotiations and right-sizing.
• Enterprise Security

Engineering owns product and application security. You own corporate and enterprise security, and you will take on more of it over time. The scope below is where the role starts, not where it ends.

• Define the strategy and roadmap for all areas of corporate security, including SaaS, endpoint, network, and physical security.
• Partner with internal compliance teams on SOC 2 and ISO 27001 requirements and audits.
• Own the implementation, monitoring, and enforcement of corporate security controls, and build the roadmap for improving our security posture over time.
• Own the security of our SaaS applications, including DLP, SaaS configuration management, OAuth integrations, and access controls.
• Own incident response for corporate systems: detection, runbooks, tabletop exercises, and post-incident review.
• Ensure all corporate systems are monitored for security events using a SIEM (Panther, Sumo Logic, etc.).
• Drive Front's internal Identity and Access Management (IAM) strategy, including Okta SSO, identity governance, access management, self-service requests, least privilege access, and just-in-time provisioning.
• Co-chair Front's AI Security & Governance charter alongside Engineering. You set the rules for what data an AI agent can reach, under whose identity, with what approval path and what audit trail, and you enforce them in Okta and Workato.
• Maintain a working partnership with Engineering security where the boundary is clear and neither side assumes the other has it covered.
• IT Operations and Help Desk
• Lead Front's IT Support function, owning the employee IT experience from first day to last.
• Manage the IT team's support queue using our own product, Front. Own ticket intake, routing, knowledge management, escalations, and SLAs. This is a player-coach role, so be ready to take on tickets directly.
• Deliver onboarding and day-one enablement that works on day one, every time, in every location, with offboarding as a timely, automated, and repeatable process.
• Own the vision and strategy for the system automations that power employee onboarding and offboarding using Workato and Okta Workflows.
• Write runbooks and documentation to a standard where the team can operate without you.
• Run on-call and escalation that is fair and actually followed.
• Manage our IT and software asset management systems and strategy, with accurate renewal dates, purchase information, and ownership.
• Set standards for collaboration tools, including consolidating overlapping ones.
• Build a strong change management practice for implementing IT changes in collaboration with cross-functional teams.
• Define and execute an end-user compute strategy encompassing endpoint hardware lifecycle management (laptops, AV/teleconference equipment), asset inventory, procurement planning, and budget forecasting.
• G&A Systems Management
• Own the integration and automation strategy between HR, Finance, and Legal systems.
• Lead implementation and integrations for any systems changes (e.g., ERP, HRIS, ATS).
• Provide administrative support to finance teams, including making changes to NetSuite integrations and configuration.
• Team and planning
• Lead, develop, and grow a global IT & Security team (4+ team members).
• Hire into gaps, set expectations, and run real performance conversations.
• Own the IT budget, forecast it accurately, and partner with Finance on spend visibility.
• Run an annual and quarterly planning process that leadership can read and track.
• Stay hands-on. At this size, the leader still does the work.

What skills and experience do you need?

• Required
• 8+ years in IT, infrastructure, or security, with 3+ years managing a team you hired and developed.
• Hands-on depth in identity, cloud infrastructure, network, and endpoint management. You can whiteboard the architecture, not just name the vendor.
• Deep experience running an IAM program, with hands-on experience implementing and managing Okta.
• Experience with a modern SaaS stack at a fast-paced startup: Slack, Google Workspace, Zoom, Iru, Notion, Microsoft 365.
• You have run a security program, not just bought security tools. SOC 2 Type II, access reviews, incident response, and vendor risk should be work you have personally owned.
• You have built IT operations end-to-end: intake, SLAs, runbooks, on-call. We want to hear the before and after, with numbers.
• Formal change management experience, including the time a change went wrong and what you changed afterward.
• iPaaS or integration platform governance (Workato, MuleSoft, Boomi, Tray, or similar).
• Budget ownership and capacity planning in a high-growth environment.
• Executive-level influence. You can get a roadmap funded and a standard adopted across functions that don't report to you.
• Clear written communication with non-technical stakeholders.
• Strong signals
• You have deployed AI into IT or security operations and can speak to what worked and what didn't.
• Working knowledge of MCP, agent authentication patterns, and the access questions AI agents create.
• Experience supporting a distributed, global workforce across multiple offices and time zones.
• Experience at a company of 300 to 1,500 people, where you were the most senior technical person in your function.
• Comfort with the GTM stack: Salesforce, Snowflake, GitHub, Jira.
• You have inherited a function with known gaps and fixed them without burning the team down.

Front operates on a hybrid model — we come together in the office each Tuesday, Wednesday, and Thursday to collaborate and stay connected.

• Competitive salary
• Equity (we are post-series D & backed by some of the best VCs in the US)
• Private health insurance, including plan options at no cost to employees
• Paid parental leave
• Flexible time off policy
• Flexibility to work from home Monday and Friday, unless posted as a fully remote role
• Mental health support with Workplace Options
• Family planning support with Maven
• $100 per month Lifestyle Stipend to spend on fitness, health and wellness, and other activities
• Wellness Days - Fronteers get an additional day off on months with no holidays
• Winter Break - Our offices are closed from Christmas to New Year's Day!