First Due provides a cloud-based SaaS platform for fire and EMS agencies consolidating pre-incident planning, mobile response, ePCR, NEMSIS-compliant reporting, scheduling, inspections, asset management, analytics, and community engagement.
<div class="content-intro"><p><strong>About First Due</strong></p> <p>First Due’s mission is to prevent first responder injury or death by providing fire and EMS agencies with transformative, end-to-end software solutions that empower them to run safer, smarter, and more effective operations.</p></div><h3><strong>Job Title: IT Systems Engineer</strong></h3> <p><strong>Location</strong>: Remote - US Only<br><strong>Country</strong>: United States<br><strong>Department</strong>: Corporate IT<br><strong>Reports To</strong>: Director of Corporate IT<br><strong>Position Type</strong>: Full-Time<br><strong>Salary</strong>: $100,000</p> <hr> <h3><strong>Job Summary:</strong></h3> <p><span data-contrast="auto">First Due is looking for a hands-on IT Systems Engineer to join our small but growing IT team. In this individual contributor role, you’ll own the day-to-day administration of our Microsoft 365 environment and core identity infrastructure. You’ll be an active contributor to the helpdesk team — owning a meaningful share of the incoming IT ticket queue alongside your teammates, while also serving as the senior technical resource who handles the most complex escalations and helps raise the team’s overall capability.</span><span data-ccp-props="{"335559739":120}"> </span></p> <p><span data-contrast="auto">You’ll work closely with the Director of Corporate IT on strategic initiatives including SSO and SaaS application governance, identity and access management, endpoint security, and compliance readiness. A near-term priority for this role is systematically onboarding our SaaS portfolio to SSO via Entra ID and building the automation that makes access provisioning reliable and auditable. This is a high-ownership role with real visibility across the organization.</span><span data-ccp-props="{"335559739":120}"> </span></p> <hr> <h3><strong>Key Responsibilities:</strong></h3> <p><strong><span data-contrast="auto">Automation, Scripting & SaaS Governance</span></strong><span data-ccp-props="{"335559739":120}"> </span></p> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Build and maintain PowerShell and Graph API scripts to automate onboarding, offboarding, and access provisioning workflows.</span></li> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Identify manual IT processes and reduce toil through scripting and workflow tooling (e.g., Power Automate).</li> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Own and systematically expand our SSO integration program — evaluate existing SaaS applications, prioritize SAML/OIDC integrations via Entra ID, and build automated provisioning/deprovisioning workflows (SCIM where supported).</li> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Maintain a SaaS application catalog — tracking ownership, license counts, renewal dates, and SSO/MFA status across the organization’s tool portfolio.</li> </ul> <p><strong><span data-contrast="auto">Identity & Access Management</span></strong><span data-ccp-props="{"335559739":120}"> </span></p> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="5" data-aria-level="1"><span data-contrast="auto">Serve as a senior technical lead for Entra ID (Azure AD) — partnering with the team to manage user lifecycle, group management, Conditional Access policies, and MFA enforcement.</span></li> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="5" data-aria-level="1">Drive SSO integration across SaaS applications using SAML/OIDC via Entra ID.</li> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="5" data-aria-level="1">Implement and maintain least-privilege access principles across the tenant; support ongoing access reviews.</li> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="5" data-aria-level="1">Contribute to Zero Trust architecture initiatives in partnership with the IT Director.<span data-ccp-props="{"335559739":60}"> </span></li> </ul> <p><strong><span data-contrast="auto">Endpoint & Device Management</span></strong><span data-ccp-props="{"335559739":120}"> </span></p> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="9" data-aria-level="1"><span data-contrast="auto">Administer and mature our MDM platform (Intune) for Windows devices, ensuring