About H:
H exists to push the boundaries of superintelligence with agentic AI. By automating complex, multi-step tasks typically performed by humans, AI agents will help unlock full human potential.
H is hiring the world’s best AI talent, seeking those who are dedicated as much to building safely and responsibly as to advancing disruptive agentic capabilities. We promote a mindset of openness, learning, and collaboration, where everyone has something to contribute.
Our role:
Key Responsibilities:
Manage the company’s internal IT operations, including identity and access management, Google Workspace administration, SaaS tools, endpoint management, and AWS access governance.
Contribute to secure user lifecycle processes, access reviews, device compliance, and support SOC 2 audit readiness. The role also includes managing SaaS vendors, renewals, license usage, and improving IT processes through documentation and automation.
Requirements
Identity & Access Management
Proven experience administering Google Workspace at scale (user lifecycle, groups, organizational units, security settings, DLP)
Strong understanding of SCIM provisioning and SSO/SAML integrations across SaaS applications
Hands-on experience performing user access management, including joiner/mover/leaver workflows
Experience conducting periodic access reviews and least-privilege audits
Cloud & Infrastructure Access
Experience managing AWS access (IAM users, roles, groups, policies, SSO via IAM Identity Center) — infrastructure management not required, but comfort navigating the console and understanding permission boundaries is essential
Device & Endpoint Management
Experience with Apple device management via Iru (formerly Kandji) or a comparable MDM
Working knowledge of Apple Business Manager (ABM), including DEP enrollment, VPP, and Managed Apple IDs
Familiarity with managing Google Meet hardware / conference room devices (Logitech, Poly, or similar)
Compliance & Security
Practical experience supporting SOC 2 (Type I or II) audits, including evidence collection and control ownership
Familiarity with additional frameworks (ISO 27001, HIPAA, or similar) is a plus
Understanding of common IT controls: access reviews, change management, MFA enforcement, endpoint compliance
Vendor Management
Experience owning the SaaS vendor lifecycle: intake, security review, procurement, renewal, and offboarding
Proven track record negotiating contracts and renewals (pricing, terms, true-ups, multi-year commitments)
Ability to track license utilization and right-size seats to control spend
Comfort partnering with Legal, Finance, and Security on MSAs, DPAs, and vendor risk assessments
Maintains an up-to-date vendor inventory and renewal calendar
Automation & Scripting
Comfortable with at least one scripting language (Python, Bash, or PowerShell) to automate provisioning, reporting, and routine IT tasks
Experience integrating systems via APIs or no-code/low-code tools (Okta Workflows, Tines, Zapier) is a plus
Nice to Have
Experience with Linear for IT ticketing and intake workflows
Familiarity with Vanta for continuous compliance monitoring and evidence automation
Prior experience at a startup or fast-growing company where IT scope spans helpdesk, security, and compliance
Soft Skills
Strong documentation habits — runbooks, SOPs, and onboarding guides
Ability to translate technical controls into clear language for non-technical stakeholders
Comfort owning end-to-end projects with minimal oversight
Location:
Paris
This role is hybrid, and you are expected to be in the office 3 days a week on average.
What We Offer:
Join the exciting journey of shaping the future of AI, and be part of the early days of one of the hottest AI startups.
Collaborate with a fun, dynamic, and multicultural team, working alongside world-class AI talent in a highly collaborative environment.
Enjoy a competitive salary.
Unlock opportunities for professional growth, continuous learning, and career development.
If you want to change the status quo in AI, join us.
Skills Required
- Proven experience administering Google Workspace at scale, including user lifecycle, groups, organizational units, security settings, and DLP
- Strong understanding of SCIM provisioning and SSO/SAML integrations across SaaS applications
- Hands-on experience managing joiner, mover, and leaver access workflows
- Experience conducting periodic access reviews and least-privilege audits
- Experience managing AWS access, including IAM users, roles, groups, policies, and IAM Identity Center SSO
- Experience with Apple device management using Kandji or a comparable MDM
- Working knowledge of Apple Business Manager, including DEP enrollment, VPP, and Managed Apple IDs
- Familiarity with Google Meet hardware and conference room devices
- Practical experience supporting SOC 2 Type I or Type II audits, including evidence collection and control ownership
- Understanding of IT controls including access reviews, change management, MFA enforcement, and endpoint compliance
- Experience owning the SaaS vendor lifecycle, including intake, security review, procurement, renewal, and offboarding
- Proven experience negotiating vendor contracts and renewals
- Ability to track license utilization and optimize software seats and spending
- Experience partnering with Legal, Finance, and Security on MSAs, DPAs, and vendor risk assessments
- Ability to maintain vendor inventories and renewal calendars
- Comfort with at least one scripting language: Python, Bash, or PowerShell
- Strong documentation skills for runbooks, SOPs, and onboarding guides
- Ability to explain technical controls clearly to nontechnical stakeholders
- Ability to own end-to-end projects with minimal oversight
- Familiarity with ISO 27001, HIPAA, or similar compliance frameworks
- Experience integrating systems through APIs or no-code/low-code tools such as Okta Workflows, Tines, or Zapier
- Experience with Linear for IT ticketing and intake workflows
- Familiarity with Vanta for continuous compliance monitoring and evidence automation
- Prior experience at a startup or fast-growing company with broad IT, security, and compliance responsibilities
What We Do
Building Superintelligence & Putting AI to work for you. H is trailblazing the agentic AI era, starting with Runner H — our flagship agent. Now in private beta for developers.
