Director, IT

About this role

DNSFilter's mission is to protect our customers and partners with products they love to use! We are revolutionizing network security by providing fast, accurate, and reliable threat protection and content filtering. We're a rapidly growing company dedicated to creating a safer internet for businesses and organizations worldwide. Leveraging AI-driven threat intelligence, DNSFilter empowers our customers to proactively block threats before they impact their networks. We foster a collaborative, innovative, and results-oriented culture where every team member contributes to our mission of making the internet safer.

We are a security company, and how we run our own systems should reflect that. Our internal IT function has kept pace with a growing company through automation rather than headcount, and it is ready for someone to own it end to end. That's where you come in!

We are looking for a Director of IT, based in our Tampa office, to own internal identity, endpoints, and employee technology at DNSFilter. This is a hands-on leadership role, not an oversight role. You will run Okta, Google Workspace, and our MDM platforms yourself while leading one Senior IT Support Analyst, and you will be accountable for whether our controls actually work, not just whether they are configured. The ideal candidate has built an IT function at this stage before, is comfortable in the consoles, and would rather automate a recurring problem than staff it.

This role reports to the SVP of Operations and partners closely with Security, People, Finance, and every department that depends on getting access to their tools on day one.

This is a full-time hybrid-office role for our Tampa (Westchase), Florida office.

Eligible candidates have worked successfully in a small- to mid-sized, fast-paced, hyper-growth SaaS start-up or scale-up.

We recognize that people come with a wealth of experience and talent beyond just the technical requirements of a job. If you feel like this job is for you, please apply. We believe diversity of experience and skills, including transferable skills, combined with passion, is a key to innovation and excellence; therefore, we encourage people from all backgrounds to apply to our positions!

In this role, you will:

Identity and Access

• Own Okta day to day: user administration, SSO configuration, app assignments, MFA policy implementation, lifecycle rules, and Okta Desktop MFA across the fleet

• Own Google Workspace administration, including groups, distribution lists, delegated access, and directory hygiene

• Own the onboarding, offboarding, and change management lifecycle end to end, and be accountable for the number that says access was actually revoked on time

• Partner with Security to define, and own the operation of, the access model for contractors and BYOD users, including what they can reach, how it is isolated from personal use, and how access and company data end when an engagement does

• Reduce the volume of manual access requests through automation, group-based entitlements, and self-service, rather than by working the queue faster

Endpoint and Fleet

• Own Mosyle for Apple and JumpCloud for everything else: enrollment, configuration profiles, app deployment, patch posture, and device inventory

• Ensure every company device is enrolled through a supervised path, and close the gaps where it is not

• Maintain accurate fleet coverage reporting, including whether our own machines run DNSFilter's Roaming Client under an enforcing policy

• Support the Security team's rollout of endpoint security tooling on the devices you manage

Asset Lifecycle

• Own hardware end to end: procurement through Insight and CDW, zero-touch enrollment and provisioning, asset tagging, drop-ship to employees, and return logistics

• Redeploy returned devices under three years old before ordering new, and route anything three years or older to certified recycling

• Maintain an accurate record of every deployed device that reconciles to headcount, MDM, and Finance's asset register

• Manage warranty, repair, and replacement, and own the refresh cycle and the budget behind it

• Own retirement: secure wipe, certified disposal, and the documentation that proves a device was sanitized before it left our hands

• Own device recovery from departing employees and contractors, including the follow-up on equipment that has not been returned

Application Portfolio and Spend

• Own the full inventory of business applications, including what sits outside SSO and how it got there

• Manage licenses against actual usage, reclaim what is unused, and bring renewals forward with a recommendation rather than an invoice

• Own the IT budget: build it, forecast it, and be able to explain why spend moved

• Own IT vendor relationships and contracts, and make the call when a tool is no longer earning its cost

Workplace Technology

• Own the technology in our Tampa office: the Ubiquiti stack end to end, including UniFi network and wifi, Access with facial recognition entry, and Protect cameras

• Own physical access and surveillance systems in partnership with People Ops and Security, including who has access to what, retention of footage, and handling of biometric data

• Own conference room AV, printers, and shared office equipment

• Make in-office and hybrid meetings work reliably, because the ones that do not are the ones everyone remembers

Service Delivery

• Own the Zendesk helpdesk: intake, taxonomy, priority definitions, SLAs, and customer satisfaction measurement

• Report a small set of IT metrics monthly, and be the person who explains the number when it moves the wrong way

• Publish a service catalog so the company knows what IT does, how to ask for it, and what to expect

Availability and Continuity

• Define and run the escalation path for IT incidents, including lockouts, outages, and issues that hit people while traveling

• Own IT business continuity: what we do when a core system is…