IT Administrator

REVEL captures the skill of experienced workers, turns it into robot intelligence, and deploys that capability where work is hard to staff. Neural Gambit captures the force, motion and intent behind expert work. RAI learns from that data. Genesis robots perform the resulting tasks on site.

The company was founded in 2025 and is building its founding team in the Czech Republic. The team is distributed across offices, a lab and a workshop, works with external contractors and partners, and handles customer and partner data that has to stay controlled.

You will own the systems everyone logs into: Google Workspace, single sign-on and identity, company laptops and phones, and the SaaS applications the company runs on. You decide how accounts are created, what access they get, how devices are secured, and how a new person is productive on day one and fully removed on their last.

This is the first dedicated enterprise IT hire. The current setup is small, largely manual, and grew as the company did, so the first months are about taking it over, documenting it, tightening access, and automating the parts that are done by hand today. After that you set the direction: what the identity model looks like, which tools we standardise on, and what security baseline the company holds itself to as it grows and as customers, partners and investors start asking harder questions.

This role is paired with an IT Infrastructure Engineer who owns the network, servers, storage and compute. They own the physical and computational layer; you own the accounts, devices and applications on top of it. You will work closely together, and neither of you will be waiting on the other for the parts you own.

Administer Google Workspace end to end: domains and aliases, mail routing, delivery and filtering, SPF, DKIM and DMARC, groups, shared drives, retention and eDiscovery.

Own single sign-on and the identity provider: SAML and OIDC application integrations, SCIM provisioning, multi-factor authentication including phishing-resistant keys, conditional access and session policy.

Design and run joiner, mover and leaver processes: automated provisioning on hire, access changes on role change, and complete, verifiable deprovisioning on exit, including contractors and interns.

Manage privileged and shared access: admin roles, break-glass accounts, service accounts, API keys and the company password manager.

Run mobile device management across macOS, Windows and Linux endpoints and company phones: enrolment, configuration profiles, disk encryption, patching, application deployment and compliance reporting.

Maintain the endpoint security baseline: screen lock, encryption, endpoint protection, browser and extension policy, and remote wipe.

Own the end-user hardware lifecycle: specification, procurement, asset inventory, warranty, repair and disposal.

Own the SaaS stack: application inventory, admin consoles, integrations, and the onboarding of new tools including security and data review before they are adopted.

Manage licences, renewals and spend, reclaim unused seats, and give the leadership team a clear picture of what IT costs and why.

Find and bring in shadow IT rather than leaving it unmanaged.

Run periodic access reviews across Workspace, the identity provider and the main SaaS applications, and keep the evidence.

Define and maintain security policies and baselines, and the runbooks for incidents such as account compromise, lost device and phishing.

Prepare the company for ISO 27001 or SOC 2 style scrutiny and answer customer, partner and investor security questionnaires, working with the engineering and legal side on anything that touches product or contracts.

Track applicable Czech and EU obligations, including the Czech Cybersecurity Act (Act No. 264/2025 Coll., the NIS2 transposition) and GDPR, and advise the leadership team on what applies to us as we grow.

Be the first line for IT problems: run a lightweight ticketing system, set expectations for response, and keep a record of what breaks and why.

Run new-hire setup and first-day onboarding, and offboarding on the other end.

Write documentation and short internal guides so common problems can be handled without you, and train the team on the security practices you introduce.

Automate the repetitive parts of all of the above with scripts and workflow tooling.

Hands-on administration of an enterprise productivity suite, ideally Google Workspace, including mail flow and DNS records for email authentication.

Practical experience with single sign-on and an identity provider (Okta, Entra ID, Google as IdP, JumpCloud or similar): SAML, OIDC, SCIM provisioning and MFA.

Mobile device management experience on at least macOS or Windows (Jamf, Kandji, Mosyle, Intune or similar), including enrolment, policy and patching.

Understanding of access control in practice: least privilege, role-based access, joiner, mover and leaver workflows, and why access reviews matter.

Scripting for automation: Python, Google Apps Script, PowerShell, bash or equivalent, and comfort working against vendor APIs.

Working knowledge of networking fundamentals (DNS, DHCP, VPN, Wi-Fi authentication), enough to tell an account problem from a network problem and hand the latter over cleanly.

Communication skills, patience, and genuine willingness to work on other people’s problems, including explaining causes and fixes to non-specialists.

Working Czech and English. Much of the team and most of our documentation is in English; vendors, landlords and authorities are often not.

Experience taking over an undocumented environment and getting it under control.

ISO 27001, SOC 2 or NIS2 readiness work, or having answered enterprise security questionnaires.

Linux endpoint management, or supporting engineering and machine learning teams who run Linux workstations.

Identity governance and lifecycle automation beyond the basics, including workflow tools such as Okta Workflows, Torq or n8n.

Experience with ticketing and ITSM systems, and asset and procurement platforms.

Working in a lab, workshop or manufacturing environment where not everyone sits at a desk.

Full ownership of the enterprise IT layer, including which systems we run and what the security baseline is.

A small company where the decisions you make are visible within days rather than filtered through several layers of process.

Work That Ships: We capture how skilled humans work, their force, touch and judgment, and our robots do the work. You put robots on a paying customer's floor, not in a demo loop

The Team: Colleagues from NVIDIA, SpaceX and Neura Robotics, and founders you work with directly. No layers, no process between you and the decisions

Equity for Key Roles: For select positions, meaningful stock options mean you're not just working here, you own a piece of the outcome

Salary and Quarterly Bonus: Strong base pay plus a quarterly bonus, in a city where it goes further

Unlimited Paid Time Off: Real flexibility to take time away when you need it. We trust our people to own their work, their time and their results

Your Own Hardware: A top-spec GPU workstation, cluster access, and hands-on time with the robots you're building. Not a software sandbox

Keep Learning: Conference budget for select roles (GTC, CoRL, ICRA), and room to publish and contribute to open source where our IP allows

Prague, On-Site: Robots need hands, so we work together in our Prague lab. Moving here? We sponsor your work visa and cover relocation

Health and Fitness: Multisport card (from December 2026), extra paid sick days, and an employer pension contribution

Lunch, On Us: Complimentary lunch every working day, plus coffee, snacks and drinks whenever you need a boost

Apply through the link on this posting. Include a short description of an environment you administered or took over: its size, what you changed about how access or devices were managed, and what you would do differently now.