Cloud Systems Administrator

Headquarters: URL: https://oneimaging.com Radiology is the second most used healthcare service, used by over 51% of the workforce annually. Despite the critical role of radiology in healthcare, the process for undergoing a medical imaging exam has remained unchanged for decades. OneImaging is solving this with a concierge approach and a premium-quality radiology network of over 5,000 vetted providers across 48 states, which also reduces imaging costs by 60-80%. Our solution helps patients and families access essential radiology services at fair prices and without surprise bills, all while delivering immediate savings and ROI for employers and payers on every exam. The Systems Administrator owns the day-to-day administration of our SaaS and cloud vendor stack, with security and logging as the first priority. You will manage user access across every platform we use, keep audit logging and security controls configured and reviewed, write scripts to automate repetitive admin work, and act as a first responder on security incidents. You will also provide hands-on IT support to employees. This is a generalist role for someone who likes owning systems end to end: you are the person who knows how each vendor is set up, who has access to what, and where the logs live. What you'll do: Vendor and SaaS administration (security and logging first) • Serve as the primary administrator for our SaaS and cloud platforms: tenant settings, SSO/SAML and SCIM integration, MFA enforcement, API keys, roles and permissions. • Configure and maintain audit logging on every platform that supports it; centralize logs where possible and make sure retention meets our compliance needs. • Run periodic access reviews, remove stale accounts and over-privileged roles, and keep an accurate inventory of who has admin rights where. • Own the security posture of each vendor: review security settings on new tools before rollout, track vendor security notices, and evaluate new vendor requests for risk. User lifecycle and identity • Onboard and offboard employees and contractors across all systems the same day, driven from Rippling and Google Workspace, our identity sources of truth. • Manage groups, roles and licenses; keep license counts right-sized and flag waste. • Maintain device enrollment, MDM policies and endpoint security for company laptops. Scripting and automation • Write and maintain scripts (Python, PowerShell, Bash) and use vendor APIs to automate provisioning, access reviews, log collection and reporting. • Build lightweight integrations between systems (for example, HRIS to identity provider to SaaS) so manual admin work shrinks over time. Security incident response • Act as a first responder on security alerts: triage, contain (disable accounts, revoke tokens, isolate devices), gather evidence from logs, and escalate. • Participate in post-incident reviews and implement the fixes that come out of them. • Help maintain and test our incident response and business continuity runbooks. IT support • Provide tier 1–2 support to employees: hardware, accounts, access, video conferencing, printers and office network. • Procure, image and manage laptops and peripherals; keep an asset inventory current. • Write and keep up internal how-to documentation so common requests become self-service. Platforms you will administer These are our largest software and cloud vendors by spend over the last 12 months. Deep experience with the first group is expected; the rest you will pick up on the job. Area Platforms Cloud infrastructure Amazon Web Services (IAM, CloudTrail, GuardDuty, Security Hub) Identity, HR and devices Rippling (HRIS, SSO, device management) and Google Workspace, used together as our identity source of truth Productivity and