IT Engineer

Mission: Keep AIM’s Infrastructure as reliable as our machinesLocation: Greater Seattle Area (on-site)Employment Type: Full-Time | Contract-to-HireReports to: Head of SoftwareThe MissionEverything humanity depends on is mined, dug, or grown. At AIM, we are building the autonomous linchpin of civilization. We transform heavy machinery—bulldozers, loaders, excavators—into AI-powered fleets that operate continuously, safely, and at peak performance in the world’s harshest environments.AIM runs production mines, large scale infrastructure builds, and defense operations as a TRL9 hardened system, not a science experiment.Built by engineers from mining, construction, Waymo, SpaceX, Google and Tesla, AIM enables scalable earthmoving, turbocharging the global economy’s physical foundation. AIM is backed by some of the most sophisticated capital in the world, including General Catalyst, Khosla Ventures, Elad Gil, Human Capital, Ironspring Ventures, Mantis, DCVC.AIM is on the cutting edge of Physical AI, automating the earthmoving industry — safely, reliably, and at speed — enabling a transformation in an industry that has been largely unchanged for over 100 years. AIM is scaling rapidly across deployments, partnerships, and technical capability. Our autonomy platform operates in mining, construction, military, and extreme-condition environments across the globe. The machines are real. The deployments are live. The proof exists — and now the world needs to see it. Learn more about AIM here.The RoleAIM is seeking an IT Engineer to be our on-site technology partner as we scale. This is not a break-fix ticket queue. You will own the systems, devices, and identity infrastructure that keep our engineers, operators, and business team running securely at speed.You will execute day-to-day end-user support while simultaneously leading foundational IT projects that set AIM up to scale securely: a full Okta identity rollout, Windows device/endpoint management, Mac device management via SimpleMDM, Google Workspace cleanup and automation, and assisting with security compliance readiness. You will work closely with Operations, Engineering, and Leadership to make sure our infrastructure never becomes the bottleneck.Key Responsibilities:Be the On-Site IT AnchorServe as the first line of support for all hardware, software, printer, Wi-Fi, and general device issuesManage VPN access and remote connectivity for distributed team membersSupport conference room AV equipment, meeting room displays, and Joan room-scheduling devicesManage onsite networking hardware and infrastructure (Wi-Fi Access Points, Switches, Firewalls)Bring in outside vendors or specialists to solve in-house networking issues.Own Device & Identity ManagementDeploy and Administer Okta as AIM’s primary identity provider: user lifecycle, SSO integrations, and app assignmentsOwn and manage company device management through SimpleMDM and Intune and/or similar, including managing device policies and automatic provisioning when applicableExecute and continuously improve onboarding and offboarding workflows from account provisioning to device setup to access revocationEnforce device compliance baselines that protect company IP and meet security requirementsAdminister Google Workspace & Software LicensingManage Google Workspace: group structure, OU administration, permissions, and admin settingsOwn software subscriptions and licenses — assign seats, reclaim unused licenses, and control costsMaintain SSO integrations and automate provisioning/deprovisioning across the SaaS stackManage Network, Facilities & Physical AccessTroubleshoot on-site Wi-Fi performance and network issues; oversee expansion of internal network infrastructure (additional Ethernet drops, etc.)Design and maintain guest Wi-Fi segmentation so visitor access is simple and secureAdminister visitor check-in workflows, badge issuance, and access photo processesSupport Security & ComplianceMaintain spam filtering, phishing protection, and cybersecurity hygiene baselinesSupport audits and compliance reviews as AIM’s operational footprint growsYear 1 Foundational ProjectsIn addition to ongoing support, you will lead a set of high-priority projects that build AIM’s IT foundation:Okta deployment and full rollout as AIM’s primary IdP, replacing Google Workspace in that roleDeploy Windows device management rollout via Intune (or similar) and finalize SimpleMDM policy alignment for MacsGoogle Workspace redesign: rationalize OU vs. group structure, define role-based access, and establish scalable email group architectureGuest Wi-Fi redesign and network segmentationVisitor check-in and badging workflow: initial design and rolloutSecurity compliance readiness: implement IT controls, close identified gaps, and build documentation that scalesWhat We're Looking For3+ years of IT support or systems administration experience in a professional environmentHands-on experience with Google Workspace administration, Microsoft Intune, and Okta (or comparable IdP)Proficiency supporting both Windows and macOS devices; experience with MDM platforms (Intune, SimpleMDM, Jamf, or equivalent)Working knowledge of networking fundamentals: VLANs, Wi-Fi, VPN, DNS/DHCPComfort managing networking hardware (switches, firewalls) in the Juniper ecosystemAbility to manage competing priorities and communicate clearly with non-technical teammatesHands-on approach — equally comfortable owning a strategic rollout and untangling a conference room cableNice to HaveFamiliarity with CMMC, NIST SP 800-171, Cloud Security Alliance or other compliance frameworksExperience designing or improving automated provisioning/deprovisioning workflowsScripting or automation skillsA/V setup and event support experienceCompTIA A+, Network+, Security+, or similar certificationsLocation & Work ModelThis role is hybrid, based in or around Seattle, WA, but due to the nature of the work in-office visits will likely be regular.What Success Looks LikeIn your first 30 days, you will have met every key stakeholder, audited the current state of devices, identity, and network infrastructure, and delivered a prioritized plan for the Year 1 foundational projects.By 60 days, onboarding and offboarding workflows will be tightened, the Okta rollout will be underway, and day-to-day support will run without friction.By 90 days, AIM’s device management, identity infrastructure, and compliance posture will be materially stronger and you will have built the foundation for them to scale with the company.Why AIM?Impact: You are building the autonomous infrastructure that powers the global economy, one of the most consequential applications of autonomy in the physical world.Real World Impact: The proof of the product exists, your job is to make the world see itPedigree: Work alongside serial business builders, pioneers from Google, Waymo, SpaceX, Tesla, heavy ecosystem. You will have direct ownership of a marketing function with real organizational influence.Maturity: Join a TRL9 company with real-world production systems and global revenue. You are joining at the moment AIM is scaling, this role shapes the company's public identity from the ground upEquity and Headroom: Meaningful equity participation in a company solving a 100-trillion-dollar problem