[Remote] Mac System Administrator

Note: The job is a remote job and is open to candidates in USA. Nsight Health is transforming healthcare delivery through innovative technology and remote patient monitoring solutions. They are seeking a Mac System Administrator to manage macOS endpoints, oversee identity and access management, and lead technical projects while ensuring compliance and documentation in a fast-growing technology environment.ResponsibilitiesOwn the Iru (formerly Kandji) environment from top to bottom including blueprints, configuration profiles, patch management, vulnerability response, and fleet healthManage the full macOS lifecycle from imaging and deployment through refresh and retirementTriage endpoint detection and response alerts in partnership with the CISO and the MSPOperate the identity provider (Okta strongly preferred) day-to-day across groups, applications, SCIM provisioning, lifecycle workflows, and MFA policiesOwn the platform that makes joiner, mover, and leaver workflows effortless for the businessMaintain access reviews and audit-ready records in partnership with the Security teamAdminister Google Workspace at depth across users, groups, organizational unit design, DLP rules, security center monitoring, Vault retention, and application access policiesBuild and maintain automations using GAM, Apps Script, or equivalentLead technical projects including identity provider rollouts, MDM migrations, integrations, and automation initiativesWrite scripts and tooling in Bash, Python, AppleScript, the Iru API, Okta Workflows, and GAM that reduce ticket volume and make the environment easier to operate for everyoneServe as Tier 3 escalation for the managed service partner, solving what they cannotParticipate in a light on-call rotation for genuine emergencies and work alongside the Director to set clear expectations, provide accurate documentation, and give the MSP the feedback they need to performDocument everything. If it is not in a runbook, it does not existOperate inside an active HIPAA, SOC 2, and HiTrust environment and partner with Security and Engineering to support audit evidence and control attestationSkills4 or more years of hands-on systems administration experience with at least 2 years in a macOS-first environmentStrong working knowledge of macOS internals, command line, scripting in Bash and Python, and deep troubleshooting abilityProduction experience with an enterprise MDM; Iru (formerly Kandji) is strongly preferred and comparable depth in another MDM is acceptableDeep Google Workspace administration experience across users, groups, DLP, security center, Vault, OU design, and application access policies; surface-level admin is not enough for this roleWorking knowledge of a modern identity provider with Okta strongly preferred; SSO, MFA, SCIM provisioning, and lifecycle workflows should be part of your daily vocabularyWorking knowledge of endpoint detection and response using SentinelOne or equivalentA genuine documentation habit; we will look for evidence of it in the interviewDirect production experience with Iru (formerly Kandji), Okta Workforce Identity Cloud, and SentinelOne SingularityApple certifications such as ACSP or ACMTExperience in healthcare or another regulated environmentComfort working in a co-managed model alongside a managed service partnerBenefitsPerformance-Based Bonus: Eligible for an annual bonus based on company and individual performance.Accrual-based PTOMedical, Dental, Vision, and supplemental insurance options401(k) Plan with 3.5% Company MatchCompany-provided equipmentCompany OverviewNsight enables provider-directed remote care programs by combining clinical services, patient engagement, and connected medical devices. It was founded in 2018, and is headquartered in Miami, Florida, USA, with a workforce of 201-500 employees. Its website is https://nsightcare.com.