IT Systems Administrator
Substack is building a new economic engine for culture, giving the brightest, most interesting, and most creative people on the internet the power of their own publishing platform. Substack empowers independent writers, artists, videographers, podcasters, and creators of all types to create, share, and make a living off their work through subscriptions, while offering them creative freedom, ownership, and a direct connection to their audiences.
About the Role
We're looking for an IT Systems Administrator to own our internal IT operations end to end. This is a hands-on individual contributor role for someone who thrives in a fast-moving environment, takes pride in running a tight, well-organized IT function, and knows how to build systems that scale. You'll be the go-to person for everything from onboarding new hires to managing our SaaS tool stack and supporting our path to SOC 2 compliance.
What You'll Own
Identity & Access Management
Administer Okta across our full tool stack — managing SSO, SCIM provisioning, and app integrations
Onboard and offboard users across both Okta and non-Okta applications
Add and deactivate tools in Okta as our stack evolves
Manage and track access for vendors and contractors, ensuring appropriate permissions are granted and revoked promptly
IT Onboarding & Endpoint Management
Own the new hire IT onboarding experience — from laptop setup to tool access on day one
Manage device enrollment, configuration, and compliance through Iru
Maintain hardware inventory and manage device lifecycle
SaaS & Vendor Management
Serve as the point of contact for IT tool vendors
Identify integration requirements for new tools and manage their setup and deprecation
Maintain documentation on our tool stack, access policies, and vendor relationships
SOC 2 Readiness
Partner with our Systems Team to support SOC 2 compliance efforts
Help implement and manage our future compliance platform, such as Vanta.
Ensure IT processes around access, onboarding, and offboarding meet audit requirements
What We're Looking For
3–5 years of experience in a corporate IT or systems administration role, ideally at a tech company
Hands-on Okta experience — you've set up SSO integrations and managed provisioning, not just administered existing configs
Experience with an Apple-focused MDM — Iru/Kandji, Jamf, or similar
Familiarity with SOC 2 requirements and ideally experience working in or toward a SOC 2 environment
Experience with compliance platforms like Vanta or Drata is a plus
Strong communicator who can work cross-functionally with operations, engineering, and external vendors
Organized and process-oriented — you document what you build and build for repeatability
Substack’s compensation package includes a market-competitive salary, equity for all full-time roles, and exceptional benefits. Our cash compensation salary range for this role is $120,000-$160,000. Multiple factors, including candidate experience and expertise, determine final offer amounts and may vary from the amounts listed above.
Substack is an equal opportunity employer. All applicants will be considered for employment without regard to race, color, religion, sex (including pregnancy, sexual orientation, gender identity or transgender status), age, national origin, veteran or disability status. We’re seeking people passionate about enabling independent expression and building a better business model for creators. If you want to see what media, communities, and content can become when unmoored from advertising models, and you have the skills and experience to contribute, we’d love to meet you.
Please see our Privacy Notice for details regarding Substack's collection and use of personal information relating to the application and recruitment process by clicking here.
Check your CV against this role
Drop your CV. You get a 0-100 fit score against the actual job description, plus the read a senior engineering lead would write. Private to you.
Score this once, or every future role
Start the candidate journey and every new role on the board gets scored against you.
Five minutes. Tell us what you’re after, drop your CV once, pick how we should reach out. You get a candid read back and you only hear from us when a role actually fits.