Fractional IT Administrator

About OpenEd

At OpenEd, we're opening the world to every learner. With over 100,000 students served and growing rapidly, families trust us as a partner in the most precious thing in their lives - their children. Our vision: a future where education is no longer constrained by geography, rigid models, or outdated systems. Our mission: to give every student customized, world-class education and resources, empowering families and opening millions of doors for learners across the country.

Our Culture (The Foundation of Everything We Do)

Culture at OpenEd is intentional. It's defined by what we promote - and what we tolerate. Our values aren't just words; they are non-negotiable principles that guide every decision:

Customer First - Obsessed with delivering value; we fight tirelessly for our learners and families.

Hard Choices, Easy Life - Face challenges directly, swiftly, and transparently.

I Did > We Should - Action over theory; bring experiments, not just opinions.

Learn Out Loud - Share your growth openly; feedback is a gift, ego is the enemy.

Prioritize Ruthlessly - Excellence in the few critical areas over mediocrity everywhere.

Fast AND World Class - Speed doesn't compromise quality.

Strong Opinions, Weakly Held - Advocate passionately, adjust readily.

Make Others Famous - Elevate your colleagues, partners, and community.

About the Role

The Fractional IT Administrator is a new function at OpenEd - and a necessary one. We're a 130+ person, fully remote team operating on a 100% BYOD, SaaS-first stack with no on-prem infrastructure and no VPN. We've reached the point where consistent access management, reliable onboarding and offboarding, and a real IT support function aren't optional anymore.

This role sits within Operations and reports to the Senior Director of Operations, working closely with our CTO on security posture and technical decisions. Day-to-day, you're the person the team comes to when something isn't working - and the person building the systems that prevent those calls in the first place.

Your Immediate Impact (First 90 Days)

In the first 90 days, you'll map what we have, close the obvious gaps, and establish the foundation for a clean, scalable IT practice.

Inventory our full tool stack - every SaaS product with a login needs an owner and an audit.

Audit Google Workspace and 1Password - user access, group structure, vault design, and security configuration.

Document our onboarding and offboarding process and identify what's missing or inconsistent.

Identify quick wins: stale accounts, orphaned credentials, over-provisioned access, and tools with no admin owner.

Deliver a prioritized IT roadmap covering access hygiene, team support workflows, and security posture improvements.

What You'll Do

Team Support and Help Desk

Be the first point of contact for IT issues across the team - login problems, access requests, account lockouts, and tool troubleshooting.

Resolve issues quickly and clearly; this team shouldn't have to submit a formal ticket for a two-minute fix.

Build self-service documentation so common issues can be resolved without always needing to reach out.

Onboarding and Offboarding

Own IT provisioning for every new hire - accounts, tool access, and day-one readiness.

Own offboarding - full access revocation within 24 hours of departure, every time, with a clean audit trail.

Maintain onboarding checklists by role and update them as the tool stack evolves.

Access and Identity Management

Administer Google Workspace and 1Password - user lifecycle, permissions, vault structure, and security settings.

Maintain admin ownership across the broader tool stack; anything with a login has a responsible owner.

Conduct periodic access audits to catch stale accounts, excess permissions, and tools flying under the radar.

Security Posture and Compliance

Work with the CTO to maintain a zero trust security posture appropriate for a no-VPN, BYOD environment.

Document and enforce practical security policies that protect the team without creating unnecessary friction.

Flag risks proactively - don't wait for something to break before raising a concern.

Why This Role Matters

We've built a 130+ person organization without a dedicated IT function. That's a credit to the team's adaptability - but it's also created real gaps. Access is inconsistent. Offboarding has blind spots. New hires sometimes wait too long for what they need to do their job.

This role closes those gaps and builds the infrastructure that lets the rest of the team stay focused on the mission. It's foundational work, and it matters.

Success Metrics

Success in this role looks like a team that barely notices IT - because everything just works.

Onboarding: Every new hire is fully provisioned and tool-ready on their start date.

Offboarding: Access fully revoked within 24 hours of departure, with a clean audit trail.

Access Hygiene: No stale accounts, orphaned credentials, or unowned tool logins.

Help Desk: Issues acknowledged and resolved quickly, without friction or escalation loops.

Security Posture: Clean access audits, current documentation, and no surprises.

Who You Are

Experienced managing access and identity in a SaaS-heavy, remote-first environment.

Google Workspace admin with real depth - group structure, security settings, shared drive governance, and audit logs.

1Password or equivalent - vault design, access policy, and secure credential sharing.

Comfortable with zero trust security in a no-VPN, BYOD environment.

Responsive and clear communicator - the team comes to you when something is broken and needs to trust you to fix it.

Self-directed and organized; you build the checklist and work it without being micromanaged.

Comfortable with ambiguity - this is a net-new function and you'll be building the playbook as you go.

Tailscale or similar zero trust network access experience is a plus.

This Role Will Excite You If:

You want to build something from scratch, not inherit a finished system.

You find satisfaction in making a team's day easier - from a smooth hire's first day to a clean offboarding.

You care about doing security right in a modern, lightweight environment - not recreating enterprise IT at a growing startup.

You're energized by ownership, not waiting to be told what needs fixing.

You want a fractional engagement with a real path to grow as the company scales.

Reporting Line

This role reports to the Senior Director of Operations and works in close coordination with the CTO on security posture and technical decisions.

EEO Statement

OpenEd is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. 

OpenEd participates in E-Verify.