Senior/Staff IT Engineer - Biotech/Pharma

Job Description: 

We are seeking a Senior/Staff IT Engineer to operate the technology systems that Dash runs on, with particular emphasis on the workstations, networks, and identity infrastructure that connect our employees and our instruments. This is a hands-on engineering role for someone who wants to stay technical and be the most capable person in the room on the systems they own.

The reason this matters more here than at a typical company of our size is that Dash is a tech-first bioanalytical CRO, and the coupling between our lab instruments and the Windows workstations that control them is tight. When a workstation drifts out of its qualified state, a study is affected. When identity provisioning breaks, a scientist cannot get to the data they generated. The systems in this role's scope are not conveniences; they are part of how the science gets done and how the record of that science holds up under inspection.

Our IT landscape is currently supported in significant part by an outsourced managed service provider (MSP). This role is our first full-time IT role and will take on the most critical and challenging IT projects and tasks. The remainder will stay with our MSP, but you will own that relationship day to day: defining the work, holding them to their commitments, escalating what needs escalating, etc.

Operating in a GxP-regulated environment shapes all of this. Comfort with 21 CFR Part 11 and related expectations for change control, documentation, and qualification is a requirement, not a nice-to-have.

Key Responsibilities:

• End-User Computing: Manage the fleet across Mac (majority) and Windows. Own MDM on both platforms, including imaging, configuration profiles, patching, and hardware lifecycle. Make day-one provisioning fast and predictable, and make offboarding equally complete.
• Lab Workstation Management: Bring control, consistency, and reliability to the Windows machines that drive our lab instruments and robotics. These machines carry qualification, change control, and uptime requirements that ordinary corporate endpoints do not. Partner with the Science, Automation, and Quality teams on qualification and documentation, and build practices that let us patch and maintain these systems without disturbing their validated state.
• Identity & Access Management: Operate our SSO and identity infrastructure, including the IdP, SCIM provisioning, directory sync, and integrations across SaaS and internal systems. Maintain group structures and access models that stay comprehensible as headcount grows, and support future identity platform migrations.
• Network Operations & Support: Maintain and troubleshoot the corporate and lab network, including VLANs and segmentation, site-to-site and remote-access VPN, redundant ISP, firewalls, and wireless. Execute changes, coordinate with our network vendor and MSP on work beyond our internal scope, and be the person who can diagnose an instrument connectivity problem quickly and correctly.
• Security Operations: Operate the corporate security stack day to day, including EDR agent coverage, patch and vulnerability remediation, backup verification and restore testing, email security, and security awareness training. Support customer security reviews and audits by assembling accurate evidence about how our systems are actually configured. Work with our external security providers on findings and remediation.
• Productivity & SaaS Administration: Administer Google Workspace, Slack, and the broader productivity stack. Manage licensing, configuration, and integrations. Automate the repetitive parts.
• MSP Management: Own the relationship with our outsourced service providers. Define and refine the scope of work, track performance against SLAs, run the escalation path, and bring us a recommendation over time about which work belongs with them and which should come in-house.
• Change Control & Compliance: Operate within GxP-aligned change control and documentation practices. Maintain records sufficient to support regulatory inspections, customer audits, and qualification requirements. Treat documentation as part of the work rather than as something done afterward.

Qualifications:

• Experience: 6 to 8 years in IT and infrastructure roles for the Senior level, or 8 to 12 years for the Staff level.
• Industry: Experience in biotech, pharma, or a comparably regulated setting governed by GMP, GLP, or GCP requirements, including formal change control and documentation. Familiarity with how those requirements shape decisions about hardware, software, access, and data.
• End-User Computing: Demonstrated experience managing mixed Mac and Windows fleets with modern MDM. Deep, hands-on Windows workstation expertise is required and is not substitutable.
• Lab or Instrument Systems: Experience supporting instrument-attached or otherwise specialized workstations is strongly preferred. Comparable experience with production systems where downtime and configuration drift carry real consequences will also be considered.
• Identity: Hands-on experience operating modern SSO and identity infrastructure, including provisioning and directory integration. Entra experience is directly relevant, and prior participation in an IdP migration is a plus.
• Networking: Strong practical networking skills. You should be able to troubleshoot a segmented network, VPN, and firewall configuration with confidence, read a topology you did not build, and know when a problem needs to go to a vendor.
• Security: Working knowledge across the standard corporate security stack, including EDR, patching, vulnerability management, and backup and recovery. Experience contributing to customer security questionnaires and audits.
• Cloud: Familiarity with AWS sufficient to partner effectively with Engineering.
• MSP Management: Experience working with or coordinating external IT service providers, including scoping work and holding vendors accountable to their commitments.
• Operating Style: Pragmatic, organized, and biased toward action. Comfortable owning a domain end to end and improving the systems you inherit.
• Education: Bachelor's degree preferred; equivalent experience considered. Certifications in networking, security, or systems administration are welcome but not required.