IT Lifecycle Management Lead

About the Role

A new hire's first day goes well or badly because of IT. When someone leaves, every hour of lingering access is a security and compliance risk. OpenLoop brings on many kinds of workers every week: W-2 employees, contracted clinicians, outsourced support teams in several countries, as well as various other users. Each one follows a different path today. We're hiring an IT Onboarding Manager to own the full identity and device lifecycle from offer to exit, make every path predictable, and automate as much of it as possible.

What You'll Do

• Own the end-to-end IT lifecycle. Be accountable for every IT onboarding, getting employees to value in hours not days, role change and offboarding across all worker types, from HR or vendor intake through day-1 readiness and final deprovisioning.
• Make day one work, every time. Make sure every new hire has working accounts, the right access and a configured device before they start, and confirm they can log in on day one instead of assuming they can.
• Close access fast and cleanly on exit. Run offboarding so access is removed as soon as HR confirms the departure, devices are recovered, shared credentials are rotated, and every step leaves audit-ready evidence.
• Standardize intake. Work with HR, and BPO partners so every request arrives structured, complete and tied to a standard role-based access profile instead of a list of names.
• Automate the repeatable work. Partner with IT Systems Engineering to automate account creation, access assignment and deprovisioning, and measure what each automation actually saves.
• Run device logistics. Own laptop inventory, ordering, enrollment, shipping and returns for domestic and international hires. Keep returned devices refurbished and ready to reissue so new orders are only placed when needed.
• Keep it compliant. Tie application access to HIPAA training and role requirements, run periodic access reviews, and keep documentation ready for audits and client security reviews.
• Measure and report. Track day-1 readiness, time to provision, time to deprovision, error rates and request volume, and use the numbers to decide what to fix next.
• Keep the playbooks current. Maintain the SOPs and runbooks in Confluence, and train help desk technicians to run them consistently.

Who You Are

• You treat onboarding and offboarding as a product, not a pile of tickets.
• You notice when the same manual step happens fifty times a week and you remove it.
• You're comfortable working with HR, Security, vendors and executives, you follow up until the job is done, and you see access removal as critical - not admin work.

Required Qualifications

• 4+ years in IT operations, identity and access management, or end-user services, with direct ownership of onboarding and offboarding.
• Hands-on administration of an identity provider (Okta heavily preferred), including groups, lifecycle states and SSO-connected app provisioning.
• Experience with Apple device management (Kandji / IRU, Jamf or similar) and zero-touch enrollment through Apple Business Manager.
• Experience running lifecycle workflows in an ITSM or ticketing platform (Jira Service Management preferred).

Preferred Qualifications

• Experience integrating an HRIS (Rippling or Workday) with an identity provider for automated provisioning.
• Scripting or automation experience (Okta Workflows, Python, APIs, or AI-assisted tooling).
• Experience with Google Workspace administration.
• Experience managing global device logistics vendors.
• Healthcare, telehealth or high-growth company experience.
• Relevant certifications (e.g., Okta Certified Administrator, Jamf / Kandji / IRU, ITIL Foundation).
• Working knowledge of HIPAA and access-control requirements in a regulated environment.

Our Benefits

In addition, for salaried positions you would also be eligible for

• Medical, Dental, and Vision plans
• Flexible Spending/Health Savings Accounts
• Flexible PTO
• 401(k) + Company Match
• Life Insurance, Pet insurance, and more