Contract-to-Hire • $20–$30/hr Competitive Pay • Full-Time Remote (U.S. based only) Raborn Media is seeking a disciplined MSP Support Engineer (Level 2) to serve as the operational backbone of our managed services division. You will move beyond simple ticket resolution to design, secure, and maintain institutional-grade infrastructure for our clients. You will work directly with leadership to enforce "security-by-design" principles, ensuring our clients’ technology supports disciplined growth rather than creating operational risk. Tech you’ll use: Public Cloud Platforms (AWS, Azure, and GCP) Enterprise Password Managers (e.g., 1Password Business, Keeper, LastPass) Identity Providers (SSO, MFA, IAM policies) RMM/MDM: NinjaOne or Atera/SuperOps; Splashtop (remote support) DNS/web filtering, email security add-ons, domain hosting What Success Looks Like Enforce Identity Governance: You will lock down client environments by implementing MFA, configuring SSO, and eliminating shared logins to ensure identity is the primary security perimeter. Eliminate Credential Chaos: You will deploy and manage enterprise password managers (e.g., 1Password, Keeper), migrating clients off ad-hoc tools and enforcing secure, masked sharing workflows. Command the Endpoint: You will maintain 100% RMM/MDM agent health across client fleets to enforce disk encryption, automate patch compliance, and enable reliable remote support. Standardize the Stack: You will build repeatable, documented onboarding procedures and integrate compliance tooling (SOC 2) to turn unique client setups into a governed, uniform architecture. Translate Technical Wins: You will move clients from "reactive support" to "managed security" by providing clear, non-technical updates on security posture and contributing to long-term roadmaps. Minimum Qualifications 3–5 years of professional experience in an MSP or Enterprise IT environment (Level 2 capacity). Cloud Productivity & Directory Administration: Deep familiarity with managing users, groups, security settings, and basic SSO in major SaaS platforms (e.g., Microsoft 365 or Google Workspace). RMM/MDM Proficiency: Hands-on experience deploying and managing agents (specifically NinjaOne, Kandji, or Atera) across a laptop fleet. Identity & Access Security: Experience implementing MFA, hardening identity, and managing Enterprise Password Managers (1Password, Keeper, etc.). Technical Troubleshooting: Strong ability to diagnose issues across macOS/Windows endpoints, SaaS apps, networks, and browsers. Communication: Comfortable explaining technical changes to non-technical stakeholders in plain language. Availability: Ability to work standard U.S. business hours (e.g., 8–5 in your timezone). Nice to Have (Not Required) Compliance: Familiarity with SOC 2 or similar frameworks Advanced Identity: Experience with complex SSO integrations (SAML, OIDC) or context-aware access policies. Automation: Experience with Zapier/Make or scripting (Google Apps Script, PowerShell, Bash, Python). Project-Based Workflow: Experience using project management tools (Asana, Jira, Monday, etc.) to execute engineering checklists autonomously, rather than relying on reactive ticketing queues or daily oversight. Background in client-facing technical roles Not a Fit If You are not authorized to work in the U.S. You have less than 3 years of professional IT/sysadmin/MSP experience You are uncomfortable owning security-sensitive work and documenting what you do You prefer only narrow helpdesk ticket work instead of end-to-end system ownership You're looking for short-term freelance work Contract-to-Hire Framework This role begins with a 6-month contract period to ensure mutual fit. We strongly desire to make this transition to FTE with you! Successful performance leads to conversion into a full-time role with growth opportunities. Compensation: $20–$30/hour (~8 hours per day) during the contract period, based on experience and scope. If converted to full-time, compensation transitions to salary + benefits and is determined based on performance and responsibilities. Full-Time Employment Opportunity & Benefits (Available upon successful conversion after the contract period) Competitive pay, growth opportunities, and performance-based bonuses 17 days PTO + company-paid holidays Health Insurance: The firm pays 50% of the employee's monthly premium. All dependents added must be paid 100% by the employee Dental & Vision: Optional employee-paid plans available Vanguard 401(k) with Company Match Paid Maternity and Paternity Leave Raborn Media is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.