Chính sách phúc lợi
With the goal of expanding our team to 150-200 employees in 2027, Trivita AI is looking for talented individuals to join us in our next phase of growth.
Trivita AI is hiring a Middle IT Support Engineer with 3+ years of IT experience and hands-on ISO/IEC 27001 or SOC 2 audit expertise.
Trivita AI builds AI-powered products and platforms for businesses, including AI assistants, workflow automation agents, knowledge search, and speech recognition.
As a Middle IT Support Engineer, you will own the company's internal IT operations, covering identity and access management, devices, office networks, email, software, and endpoint security. You will also serve as IT's primary contact for operating the Information Security Management System (ISMS) and preparing evidence for ISO/IEC 27001 or SOC 2 audits.
Job description
- Manage the Joiner-Mover-Leaver process, including role-based access, SSO, MFA, and timely access revocation.
- Administer macOS, Windows, Linux, and mobile devices through MDM, including automated enrollment, security baselines, disk encryption, EDR, and patch management.
- Operate office network infrastructure, including firewalls, VLAN segmentation, enterprise Wi-Fi, VPN/ZTNA, cameras, printers, and meeting-room equipment.
- Secure email and collaboration platforms through SPF, DKIM, DMARC, anti-phishing measures, document-sharing policies, and basic DLP.
- Handle IT support requests through ticketing systems within agreed SLAs, maintain a knowledge base, and monitor service quality.
- Maintain hardware and software inventories, SaaS licenses, costs, and vendor security assessments.
- Implement and maintain security controls, including least-privilege access, quarterly access reviews, password management, backups, vulnerability management, and centralized logging.
- Operate the ISMS under ISO/IEC 27001:2022 and SOC 2, including risk assessments, documentation, evidence collection, internal audits, and corrective actions.
- Collaborate with Legal on personal data protection obligations, including impact assessments, access controls, and breach notifications.
- Conduct security awareness training and phishing simulations, respond to internal security incidents, and maintain IT business continuity plans.
- Collaborate with DevOps on SSO integration, identity management, and shared infrastructure across AWS, GCP, and Azure.
Requirements
- 3+ years of experience in IT Support or System Administration, including responsibility for IT operations across an entire company or office.
- Direct participation in at least one ISO/IEC 27001 or SOC 2 (Type I/II) audit, including preparing IT control evidence and working directly with auditors. ISO 9001 experience alone is not considered equivalent.
- Understanding of ISO/IEC 27001:2022, including clauses 4-10, the 93 Annex A controls, and SOC 2 Trust Services Criteria.
- Strong administration skills in Google Workspace or Microsoft 365, Entra ID/Active Directory, SSO (SAML/OIDC), MFA, and SCIM provisioning.
- Experience managing macOS and Windows devices through MDM and endpoint security tools (EDR).
- Solid networking knowledge, including TCP/IP, DNS, DHCP, VLANs, VPNs, firewalls, and enterprise Wi-Fi (802.1X).
- Ability to write automation scripts using PowerShell, Bash, or Python.
- Understanding of Vietnam's Personal Data Protection Law (Law No. 91/2025/QH15), its implementing regulations, and related cybersecurity requirements.
- Experience using AI tools such as ChatGPT, Claude, Gemini, or Copilot for scripting, troubleshooting, research, documentation, data analysis, and workflow automation while validating outputs and complying with data security policies.
- Ability to read English technical documentation and communicate effectively with non-technical employees.
Technology stack
- Identity & Access: Google Workspace, Microsoft 365, Entra ID, Active Directory, Okta, JumpCloud.
- Device Management: Jamf, Intune, Apple Business Manager, Windows Autopilot.
- Security: Microsoft Defender, CrowdStrike, SentinelOne, Fortinet, pfSense.
- IT Support: Jira Service Management, 1Password, Bitwarden.
- Compliance: Vanta, Drata.
First 6 months expectations
- Achieve 100% MDM enrollment, disk encryption, and EDR deployment across devices, with SSO and MFA enabled for all accounts.
- Ensure access is revoked on an employee's last day and quarterly access reviews are completed and documented.
- Maintain audit-ready ISMS documentation and evidence repositories, with no major non-conformities in the next audit.
- Resolve IT support requests within agreed SLAs.
Preferred qualifications
- Certifications such as CompTIA A+/Network+/Security+, CCNA, Microsoft 365, or Google Workspace Administrator.
- ISO/IEC 27001:2022 Lead Implementer or Lead Auditor certification.
- Experience with ISO/IEC 27701 or ISO/IEC 42001.
- Familiarity with compliance automation tools such as Vanta, Drata, or Secureframe.
- Basic knowledge of IAM on AWS/GCP/Azure and Kubernetes RBAC.
- Experience working at a technology company or in an environment handling sensitive data.
Contact information
- Address: No. 01, Street 104, Quarter 3, Binh Trung Ward, Ho Chi Minh City
- Phone: [protected info]