IT Operations Engineer - Compliance & Controls

Top Skills' Details

IT Compliance / Controls: 2+ years of hands-on IT Operations, systems administration, or infrastructure experience with responsibility for implementing and maintaining technical controls aligned with ITGC, SOC 2 Type II, SOX, or NIST. The candidate must understand how compliance requirements translate into system configurations, operational processes, and audit evidence.

- Control Remediation: Proven ability to identify control gaps, determine root causes, implement corrective actions, and drive remediation through completion. This person should be a hands-on technical contributor—not solely an auditor or documentation-focused GRC analyst.

- Audit Readiness: Experience maintaining audit-ready systems through control documentation, evidence collection, access reviews, patching, change-management records, security monitoring, and repeatable operational procedures.

- Systems Administration: Strong production experience supporting enterprise infrastructure, identity, networking, SaaS applications, or cloud environments. The candidate must understand how systems operate and how compliance controls affect day-to-day IT Operations.

- Automation: Hands-on PowerShell or Python experience used to automate controls, evidence collection, monitoring, patching, access-management tasks, or other repetitive operational processes.

- Microsoft Environment: Working knowledge of Microsoft Entra ID, on-premises Active Directory, Azure infrastructure, identity synchronization, access controls, and user-lifecycle processes within a hybrid environment.

Description

Our Healthcare client is seeking an IT Operations Engineer – Compliance & Controls to support the security, reliability, and continuous audit readiness of its enterprise systems. This role will combine hands-on IT Operations engineering with technical compliance ownership, ensuring infrastructure, identity, and operational processes align with ITGC, SOC 1, SOC 2 Type II, SOX, and NIST requirements.

The engineer will partner with IT Operations, Security, Engineering, and other system owners to identify control gaps, implement technical remediations, automate repeatable processes, and maintain clear evidence that controls are operating effectively. This is not an audit-only or documentation-focused GRC role; the selected candidate must be capable of making technical changes and improving the systems and processes being evaluated.

Key Responsibilities

- Assess enterprise systems and operational processes against ITGC, SOC 1, SOC 2 Type II, SOX, and NIST requirements.

- Translate compliance requirements into sustainable system configurations, controls, workflows, and technical procedures.

- Identify control gaps, perform root-cause analysis, and drive remediation through completion.

- Maintain continuous audit readiness through control documentation, evidence collection, access reviews, patching records, change records, and security-monitoring outputs.

- Support hybrid infrastructure and identity environments involving Microsoft Azure, Microsoft Entra ID, and on-premises Active Directory.

- Partner with Security and IAM teams to troubleshoot access, policy, synchronization, and identity-governance issues.

- Automate manual compliance and IT Operations activities using PowerShell, Python, and AI-assisted scripting tools.

- Govern patching, system monitoring, access controls, change management, and other recurring operational controls.

- Use tools such as Datadog and Wiz to monitor system health, security posture, and control effectiveness.

- Support incident response, root-cause analysis, and documentation of lessons learned.

- Create and maintain SOPs, technical documentation, runbooks, control narratives, and remediation plans.

- Support disaster recovery, operational resilience, and technical-standardization initiatives.

- Use AI-assisted tools responsibly for scripting, troubleshooting, analysis, and documentation while recognizing when traditional logs, technical investigation, or vendor escalation is required.

- Communicate control status, remediation progress, and technical risks clearly to IT Operations, Security, auditors, and leadership.

Success in this role will be measured by the percentage of in-scope IT controls operating effectively and supported by current audit evidence, with the goal of maintaining continuous audit readiness.

Skills

IT Compliance, ITGC, SOC 2, Control Remediation, Audit Readiness, Systems Administration, PowerShell, Azure, Entra, AI Fluency, Python, NIST, SOX, SOC 1, Active Directory, identity governance, Change Management, Incident Response, Datadog, Wiz, GitHub Actions, Disaster Recovery, Technical Documentation

Top Skills Details

IT Compliance,ITGC,SOC 2,Control Remediation,Audit Readiness,Systems Administration,PowerShell,Azure,Entra

Additional Skills & Qualifications

- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field preferred.

- Experience working within healthcare, financial services, or another regulated industry is beneficial.

- Familiarity with SOC 1, SOX, NIST, identity governance, change management, incident response, and disaster recovery is preferred.

- Experience supporting Microsoft Azure, Microsoft Entra ID, on-premises Active Directory, hybrid identity synchronization, and cloud networking is beneficial.

- Familiarity with observability and security tools such as Datadog and Wiz is preferred.

- Experience delivering infrastructure changes through CI/CD tools such as GitHub Actions or GitLab is beneficial.

- Experience developing SOPs, runbooks, control narratives, technical documentation, and remediation plans.

- Practical AI fluency, including the ability to build and document repeatable AI-assisted scripting and troubleshooting workflows while applying appropriate security controls and human review.

- Ability to distinguish between an IT system failure, security-policy restriction, and compliance-control issue using logs, telemetry, and structured troubleshooting.

- Strong analytical, problem-solving, documentation, and communication skills.

- Ability to work independently, prioritize competing responsibilities, and partner effectively with IT Operations, Security, Engineering, IAM, auditors, and business stakeholders.

- Must be comfortable participating in incident response, root-cause analysis, and on-call support as needed.

- Success requires a hands-on engineering mindset, strong ownership, attention to detail, and the ability to make systems compliant without creating unnecessary operational friction.

- Relevant certifications such as CISA, CRISC, Security+, Azure Administrator, Azure Security Engineer, or Identity and Access Administrator are helpful but not required.

Employee Value Proposition (EVP)

-Join a fast-growing, mission-driven healthcare technology company whose work supports better patient outcomes and strengthens independent primary care.

- Own meaningful compliance engineering work that directly improves the security, reliability, and audit readiness of Aledade’s technology environment.

- Work at the intersection of IT Operations, Security, identity, cloud infrastructure, automation, and AI rather than serving in a documentation-only compliance role.

- Gain hands-on exposure to Azure, Microsoft Entra ID, Active Directory, PowerShell, Python, Datadog, Wiz, CI/CD, and modern AI-assisted engineering workflows.

- Help build sustainable technical controls and automated processes instead of repeatedly preparing for audits through manual effort.

- Partner with stakeholders across IT Operations, Security, Engineering, and IAM on highly visible initiatives.

- Operate with meaningful autonomy and the ability to improve systems, reduce operational toil, and influence how compliance is embedded into day-to-day technology operations.

- Fully remote opportunity with a collaborative team and exposure to a broad portfolio of modernization initiatives.

- Aledade has a strong history of considering high-performing contractors for full-time conversion, creating potential for longer-term growth based on performance and available headcount.

Work Environment

- Fully remote position supporting a distributed, U.S.-based team.

- Reports to Manager of IT Operations, within the IT organization.

- Collaborative environment partnering regularly with IT Operations, Security, IAM, Engineering, HR, auditors, and system owners.

- Fast-paced and evolving organization managing multiple infrastructure, identity, compliance, automation, and modernization initiatives simultaneously.

- Standard business hours with flexibility required to support project deadlines, incidents, audit requests, and changing priorities.

- On-call availability may be required as necessary; overtime is not currently authorized without prior Aledade approval.

- Culture emphasizes ownership, transparency, continuous improvement, technical problem-solving, documentation, and proactive communication.

- The engineer must be comfortable working independently, identifying compliance gaps, and driving remediation without requiring significant oversight.

- Work is hands-on and operational rather than limited to audit coordination or policy documentation.

Business Drivers/Customer Impact

Rapid growth and evolving compliance requirements are increasing the burden on its IT Operations team to ensure infrastructure, identity, systems, and operational processes remain secure and audit-ready. Compliance responsibilities, including SOC 1, SOC 2 Type II, ITGC, SOX, and NIST, are currently embedded across multiple technical workstreams without a dedicated engineer focused on translating control requirements into sustainable system configurations, processes, evidence, and remediation.

Need a hands-on IT Operations engineer who can assess control gaps, implement compliant technical processes, automate repeatable controls, maintain audit readiness, and partner across IT Operations and Security. Without this dedicated ownership, The client risks reactive audit preparation, inconsistent controls, excessive manual work, delayed remediation, and additional strain on engineers responsible for core operational delivery.

Job Type & Location

This is a Contract to Hire position based out of Dallas, TX.

The pay range for this position is $48.00 - $74.00/hr.

Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: • Medical, dental & vision • Critical Illness, Accident, and Hospital • 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available • Life Insurance (Voluntary Life & AD&D for the employee and dependents) • Short and long-term disability • Health Spending Account (HSA) • Transportation benefits • Employee Assistance Program • Time Off/Leave (PTO, Vacation or Sick Leave)

This is a fully remote position.

This position is anticipated to close on Jul 31, 2026.

About TEKsystems

We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

About TEKsystems and TEKsystems Global Services

We’re a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We’re a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We’re strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. We’re building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.