Internal IT Lead

About the role

ChillBase studio, an independent gaming company, is looking for a Lead of Internal IT to build its internal IT infrastructure and services with a team of 3-6 engineers. The role is hands-on and technical, with the aim of creating a connected IT environment that fits the needs of a game studio without unnecessary complexity.

Key responsibilities

• Build end-to-end Internal IT automation by connecting Google Workspace, JumpCloud / Keycloak, Jamf / Intune, Jira Service Management and the HR system through APIs, webhooks, n8n and scripts.
• Automate employee onboarding and offboarding, including accounts, groups, access rights, device provisioning, licenses and physical access, triggered by a single HR event.
• Develop centralized IAM with SSO and SCIM, enforce MFA and set up regular access reviews.
• Manage the macOS and Windows device fleet through Jamf and Intune, including zero-touch enrollment, patching, encryption and inventory.
• Improve Jira Service Management with a service catalog, SLAs, automated routing, Assets / CMDB and an AI assistant for first-line support.
• Manage office infrastructure across several locations, including networks, Wi-Fi, VPNs, physical access control and meeting rooms.
• Select and implement enterprise tools, assess TCO and negotiate with vendors.
• Lead a team of 3-6 engineers, set priorities, assign tasks and support professional development.
• Set up documentation, runbooks and a knowledge base, and ensure monitoring, backups, incident management and security controls.

Required profile

• 7+ years in Internal IT / System Administration, including at least 3 years as an IT Lead or similar.
• Experience leading a technical team and managing a mixed macOS and Windows fleet through MDM.
• English at B2 level or above; Russian at C1 level.
• Nice to have: game development experience, IaC / GitOps, EDR / SIEM, ISO 27001 / SOC 2 audits, SaaS and license management, and physical access control.

Required skills

• IAM: SSO (SAML 2.0, OIDC), SCIM, MFA, Conditional Access, RBAC, JML lifecycle
• Google Workspace and an identity provider such as JumpCloud, Keycloak, Okta or Entra ID
• Jamf and Intune / Autopilot, patch management and compliance policies
• Jira Service Management, n8n / Make / Zapier, Python, Bash / PowerShell
• Networking: VLANs, DHCP/DNS, WireGuard / OpenVPN / IPsec, 802.1X, RADIUS, firewalls

What we offer

• Regular performance reviews and salary adjustments based on performance
• Paid sick days, days off and support during difficult life situations
• Relocation support for this role