At MassMutual Ventures, we are fortunate to have been early and long-term partners to our portfolio of category-defining businesses that are located across the globe. Learn more about their available opportunities below.
IT · Full-time
Boston Metropolitan Area, USA
USD 90k-115k / year
IT System Administrator
RapidWorks · Full-time · Boston, MA (hybrid) · Engineering
AT A GLANCE
Title: IT System Administrator
Team: Engineering
Reports to: VP of Engineering
Location: Boston, MA headquarters — hybrid, with regular in-office days for hands-on work
Type: Full-time, salaried (exempt)
Experience: 3–5 years in internal IT or systems administration
Base salary: $90,000 – $115,000, based on experience
ABOUT RAPIDWORKS
RapidWorks builds job management, dispatching, and quote-to-cash software for heavy-equipment and site-service companies — the businesses that pump concrete, rent cranes, run hydrovac and roll-off fleets, and keep job sites supplied and safe. Our products, including the RapidWorks Platform, CRO Software, Visual Dispatch, and Rapid Fleet, take a job from quote to schedule to dispatch to invoice, so operators can keep their equipment busy and get paid faster.
More than 700 customers across 10+ industries use RapidWorks to manage over 11 million jobs and $2.2 billion in invoicing each year. We're headquartered in Boston, serve customers in the US, UK, and Australia, and are backed by Wavecrest Growth Partners and MassMutual Ventures. We're built by operators, for operators, and we work by four values: Growth, Ambition, Teamwork, and Trust.
THE ROLE
We're a growing company of roughly a hundred people, and our internal technology needs a dedicated owner. You'll be that person: the one who makes sure every new hire is productive on day one, every departure is closed out the same day, every laptop is managed and patched, and every access grant can be explained to an auditor.
You'll run the day-to-day with a lot of autonomy, and you'll do it by automating the repetitive work rather than clicking through it. There's clear room to grow — into broader security and compliance ownership as the company scales.
This is an internal-IT role, not a DevOps role. Our engineering team owns product and cloud infrastructure; you'll partner with them where our work meets — identity for engineering tools, shared automation, and infrastructure-as-code practices — and they'll back you up there.
WHAT YOU'LL DO
• Identity & access: Own the full joiner–mover–leaver lifecycle in our identity provider: SSO, MFA, conditional access, group-based permissions, and automated provisioning to the business and engineering tools we run on.
• Devices: Administer our device-management platform across Windows and macOS: zero-touch enrollment, security baselines, encryption, patching, app deployment, and remote wipe and return when someone leaves.
• Support & onboarding: Be the go-to for internal IT support. Run onboarding so new hires are fully set up on day one, and offboarding so access is removed the same day.
• Network & security: Administer firewalls, VPN and remote access, switches, and wifi; monitor network health and apply patches and hardening; keep the Boston office connected, including printers and meeting rooms.
• SOC 2 controls: Run the IT controls in our SOC 2 program — access reviews, offboarding timelines, device compliance — and keep the evidence current, working with engineering and the compliance lead during audits.
• Automation & documentation: Script routine work in Python or PowerShell, manage identity and SaaS configuration as version-controlled code, and keep runbooks and asset and application inventories current. We expect you to use AI coding assistants to move faster.
WHAT SUCCESS LOOKS LIKE
• First 30 days: You know the environment: every device, account, and application is inventoried, and you've found the gaps that matter most.
• First 60 days: Every company laptop is enrolled and compliant, and onboarding and offboarding run from a documented, repeatable checklist.
• First 90 days: Offboarding is automated and on time, with audit evidence captured along the way, and you've run a full quarterly access review.
• Beyond: More of the environment is managed as code, support requests keep shrinking, and you're taking on a bigger share of security and compliance.
WHAT YOU BRING
Required:
• 3–5 years in corporate or internal IT, or systems administration
• Hands-on administration of an enterprise MDM platform (for example Intune, Jamf, or Kandji)
• Identity provider administration (for example Entra ID, Okta, or Google Workspace), including SSO and user provisioning
• Experience working inside a SOC 2 or similar compliance framework: access reviews, offboarding timelines, evidence
• Network administration: configuring and maintaining firewalls, VPNs, switches, and wifi, and solid troubleshooting across endpoints, systems, and connectivity
• Strong documentation habits and process discipline
Nice to have:
• Scripting in Python or PowerShell, and fluency with AI coding assistants
• Infrastructure as code (for example Terraform or Pulumi), especially for identity or SaaS configuration
• SCIM provisioning and conditional-access depth
• A compliance automation platform such as Vanta, Drata, or Secureframe
• Security+, Network+, or equivalent, and an interest in growing into security and compliance
WHAT WE OFFER
Compensation: $90,000 – $115,000 base salary, set by experience and depth, especially in identity and compliance work
Benefits: Health, dental, and vision coverage; a generous 401(k) match; unlimited PTO; and pre-tax commuter benefits
Ownership: A role you own end to end, with the autonomy to set standards and the backing to automate
Growth: A clear path into security and compliance ownership as the company grows
Modern tools: Current identity, device-management, and infrastructure-as-code tooling, plus AI assistants, used as intended
EQUAL OPPORTUNITY
RapidWorks is an equal opportunity employer. We welcome applicants of every background and do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by law. If you need an accommodation during the hiring process, let us know.