Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 107 days ago

IT Systems Engineer

Gyde9 open roles

Where
New York, New York, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIT Systems EngineerGyde · New York, New York, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Gyde's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

7.8% of postings close within 7 days. Measured by our own scanner across the market. Gyde postings stay open a median of 11 days.

Share of postings closed within
  1. 1.7%1 day
  2. 3.5%3 days
  3. 7.8%7 days
  4. 14.6%14 days
  5. 34.1%30 days
This job: posted 107 days ago

Gyde median: 11 days open

The posting

About Us

  • Insurance brokers sit at the intersection of care, cost, and access — yet remain one of the most underleveraged assets in the $5T healthcare value chain. They guide millions of Americans through plan selection, coverage questions, and care navigation, yet still rely on spreadsheets, manual workflows, and outdated tools that limit their growth and impact.
  • Gyde is reimagining this. We’re building the first AI-native insurance brokerage platform—a system that learns from every client interaction to automate operations, power intelligent voice and chat experiences, and predict the right coverage and products for every individual or business.
  • Our approach combines acquisition and AI: we acquire traditional brokerages and transform them into next-generation, data-driven organizations. Through Gyde’s platform, agencies run more efficiently, serve clients more personally, and scale faster than ever before.
  • Join us if you’re excited to: Redefine how millions of people access and understand their healthcare coverage, by building systems that turn unstructured data, human conversations, and fragmented processes into intelligence. Build AI systems that improve how people access healthcare Design production-grade voice, chat, and predictive models for a highly regulated domain Launch technologies that augment human judgment and make complex decisions transparent and scalable Help reinvent an entire industry from the inside out
  • We’re creating the future of brokerage — where every interaction, insight, and decision is powered by intelligence.
  • Our founding team boasts pedigrees from Oscar, Stripe, Vista Equity Partners, and Alpine. Lightspeed led Gyde’s $60M financing, with participation from Optum Ventures, Crystal Venture Partners, Virtue, MVP Ventures, and multiple endowment funds, among others. Hear why on LSVP Investment Memo.

Role Summary

You are the systems engineer behind every agency we bring into Gyde — and the person they reach when something breaks. When we acquire an agency, its people need accounts, laptops, and access working on day one, and you own that experience end to end: before, during, and after cutover. But you don't just run that playbook by hand — you engineer it. Every provisioning step, compliance check, and access change is something you'd rather express as code and automate than repeat.

You'll sit on the Infrastructure team, report to the Head of Infrastructure, and turn the Infra Engineer's integration runbooks into repeatable, automated systems — while staying close enough to real users to know exactly where the friction is.

There is real operations work here, and more of it as we scale: device fleets across multiple entities, MFA and SSO resets, and account lifecycle across Entra/Okta and Google Workspace/M365. What defines this role is how you approach that work. You treat each recurring operational task as a bug to fix at the root and a candidate for automation — not a ticket to close and forget. It's also high-trust: we operate in a HIPAA-aware environment, so you handle identity verification, device loss, and access changes with care, every time.

The ideal hire has run end-user IT in a fast-moving, multi-tenant or MSP-style environment, is fluent with scripting and configuration-as-code, stays calm under a cutover deadline, and is happiest when they've automated away last month's busywork.

Key Responsibilities

  • Engineer the agency-integration experience, don't just run it. Own onboarding, cutover, hypercare, and day-to-day support for acquired agencies as the primary IT point of contact — and continuously convert that work into scripted, repeatable systems so each integration is faster and more hands-off than the last.
  • Manage endpoints and devices as code. Image, enroll, ship, and lifecycle-manage laptops (provisioning through RMA and offboarding retrieval); operate the MDM (Hexnode) day to day, and codify policies, baselines, and compliance remediation instead of clicking through consoles.
  • Automate the identity and access lifecycle. Provision, modify, and deprovision accounts across Entra/Okta, Google Workspace/M365, and core SaaS; run JML workflows with same-day deprovisioning as a non-negotiable, and drive toward automated, HRIS-triggered lifecycle so it happens reliably without manual steps.
  • Turn integration runbooks into repeatable tooling. Take the Infra Engineer's runbooks, schedule and run cutover waves with agency leadership, capture friction, and feed fixes back as automation and version-controlled process; own status comms during rollouts and incidents.
  • Build security hygiene into the system. Enforce endpoint baselines, disk encryption, MFA enrollment, and screen-lock policies through managed, auditable configuration; support phishing reporting and basic user security education; flag anomalies (impossible travel, unmanaged devices, shadow IT) to Security/Infra; keep HIPAA-aware habits by default.

What you bring / core competencies

  • Automation & Configuration-as-Code. You script and version-control your work (PowerShell, Python, Graph API, or similar), and you'd rather define infrastructure and policy as code than manage it by hand. You see a recurring task and instinctively reach for a way to make it disappear.
  • Identity & Access Management. Confident across an IdP (Entra/Okta), Google Workspace/M365, MFA, SSO, and conditional access, with clean JML hygiene. You reason about least privilege and entitlements, and you don't need to be told when an offboarding has to happen same-day.
  • Endpoint & MDM Operations. You've owned a device fleet, not just touched one — imaging, enrollment, lifecycle, inventory reconciliation, and policy/compliance troubleshooting in an MDM (Hexnode or comparable), ideally managed as code.
  • End-User Support & Troubleshooting. You diagnose and resolve laptop, SaaS, connectivity, and access issues quickly and explain them plainly to non-technical users — and you treat a recurring issue as a signal to fix or automate something upstream, not a task to close.
  • Communication & Stakeholder Management. Calm, clear, and credible with non-technical agency users and leadership, especially under cutover pressure. You can explain what's happening and what's next without jargon.
  • Operational Rigor & Security Mindset. You follow and improve runbooks, document recurring quirks, and handle HIPAA-aware verification and device-loss scenarios without being prompted. You build process and tooling, not just habit.

Technical / Functional Requirements

  • 4–6 years in end-user IT, IT operations, systems engineering, or an MSP environment.
  • Hands-on scripting and automation (PowerShell, Python, or similar) and comfort managing configuration as code. This is a core requirement for this role, not a bonus.
  • Hands-on administration of an IdP (Entra ID or Okta) plus Google Workspace and/or Microsoft 365.
  • MDM experience including policy and compliance management (Hexnode a plus; Intune, Jamf, or Kandji acceptable).
  • Comfortable imaging/provisioning laptops and managing the device lifecycle end to end.
  • Solid working grasp of MFA, SSO/conditional access, VPN, and AVD or a comparable remote-desktop setup.

Nice to have

  • Config-as-code / IaC tooling for identity or endpoints (e.g., Terraform, Okta Workflows, Entra Lifecycle Workflows, or Intune-as-code).
  • Experience supporting a HIPAA or otherwise regulated environment.
  • Multi-tenant, MSP, or M&A / agency-integration IT experience.
  • Hexnode and Azure Virtual Desktop (AVD) specifically.

What we offer

Gyde offers a competitive benefits package to all employees.

  • Top of the market compensation
  • Flexible (Unlimited) Paid Time Off
  • Medical, Dental, and Vision benefits for you and your family
  • Retirement Plan (e.g., 401K)
  • Parental Leave
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Gyde's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Gyde's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Gyde's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.