IT Support Engineer (Junior-to-Intermediate)
littlefish
Marketing & Communications, IT, Customer Service
Sterling, VA, USA · Remote
Posted on May 11, 2026
About littlefish
littlefish is a Unified Commerce Platform for small and medium businesses across Africa, distributed through Financial Institution partners — banks, telcos, and insurers. We are live with 3 of the 5 major South African banks and onboarding 10–12 FI clients across the continent. The platform gives SMEs access to payments, invoicing, stock management, and expense management — tools previously only available to large corporations.
We are an AI-native engineering team. Every engineer operates as an Intent Architect: directing AI with precision, owning every decision about correctness, security, and quality, and building software that impacts real businesses across Africa. We are not vibe coders. The AI accelerates execution. The engineering judgment is yours.
Role Summary
The IT Support Engineer owns the internal technology environment that lets the littlefish team do its best work — laptops, accounts, identity, MDM, SaaS tooling, and the day-to-day support that keeps the team unblocked. This is the role the company depends on without thinking about it; when it's done well, no one notices.
We apply the same Intent Architect discipline to internal IT that we apply to the platform. The AI accelerates execution — onboarding scripts, MDM automation, ticket triage, runbook generation — but the judgment is yours. You own correctness, security, and the quality of every change you make to a system that touches every person at the company.
This role spans junior to intermediate (0–5 years). The expectations scale with experience: junior hires arrive hungry to grow into the role under guidance; intermediate hires arrive with their own opinions and own broader scope from day one.
Key Responsibilities
User Support and Onboarding
Own end-to-end onboarding and offboarding for staff — hardware provisioning, account creation, access grants, and clean removal when people leave.
Provide responsive, well-documented support to the team — first-line response on laptops, accounts, SaaS access, and connectivity.
Maintain ticketing discipline — every issue captured, triaged, and closed with a clear resolution that adds to the knowledge base.
Build the relationships that make support work — people should feel heard, not processed.
Endpoint and Identity Management
Manage the MDM estate (macOS, Windows, mobile devices) — enrolment, configuration profiles, compliance baselines, and remote actions.
Own identity and access across the SaaS estate — SSO, group-based access, MFA enforcement, lifecycle automation.
Maintain hardware inventory and lifecycle — procurement, allocation, refresh, decommissioning, and asset tracking.
Apply security baselines and OS patching policy across the fleet.
Automation and Toil Reduction
Use AI tooling actively — directing it with intent, reviewing its output critically, and being able to explain every change you ship, regardless of who or what generated it.
Automate repetitive operational work — if you do something twice, the third time should be a script. Onboarding, offboarding, group sync, audit reports.
Build small, reliable scripts (Bash, PowerShell, Python) that compound team leverage and reduce manual toil over time.
Maintain runbooks for everything that touches identity, access, or the endpoint fleet — written so that any teammate can execute them safely.
Security and Compliance Hygiene
Enforce baseline security across the endpoint estate — disk encryption, MDM compliance, OS patching, MFA enforcement.
Maintain access reviews, audit trails, and the documentation FI vendor risk packages will eventually ask for.
Develop awareness of the regulatory and security context of fintech — why secrets handling, access control, and tenant isolation are non-negotiable, even on internal systems.
Escalate suspicious activity or policy gaps to the SRE / security function quickly and clearly.
SaaS and Office Technology
Administer the SaaS estate — Google Workspace or Microsoft 365, Slack, Notion, Atlassian, identity provider, and the broader stack.
Own connectivity, conferencing, and shared office tech in the Johannesburg / Cape Town spaces.
Evaluate new tools when they're proposed — cost, security, integration, lifecycle — and document the decision.
Collaboration and Delivery
Work alongside the SRE, People & Culture, and Operations — IT support sits at the seam between people processes and technology.
Partner with hiring managers on smooth onboarding — the first-day experience is partly your work.
Contribute to internal documentation and the IT knowledge base — what you learn solving a problem once should help everyone next time.
Ask questions about the business, the team, and the FI / SME context — curiosity about what littlefish does is part of the job from day one.
Skills and Qualifications
Experience
0–5 years of professional IT support, helpdesk, sysadmin, or related experience — we will calibrate scope and ownership to where you are.
Hands-on experience supporting macOS and Windows endpoints in a professional environment.
Working familiarity with at least one MDM platform (Jamf, Intune, Kandji, Mosyle, Workspace ONE, or similar) — ideally administering, but exposure as a power user is acceptable for junior hires.
Working understanding of identity providers and SSO (Google Workspace, Microsoft 365 / Entra ID, Okta, or similar) — users, groups, app integrations.
Working scripting ability — Bash, PowerShell, or Python — enough to automate small workflows end-to-end. More for intermediate hires.
Comfortable with ticketing systems and ITIL-style support disciplines — incident, request, problem, change.
Hands-on experience using AI tools (Claude, Copilot, or similar) and able to articulate what you have learned about using them well in real work.
Fintech, regulated industry, or security-conscious environment exposure is a plus, not required.
Technical Skills
Endpoints: macOS, Windows. Linux desktop awareness is a plus.
MDM: at least one platform at admin or strong power-user level.
Identity & SSO: Google Workspace or Microsoft 365 / Entra ID at admin level; SSO and group-based access concepts.
SaaS administration: Slack, Notion, Atlassian, and the broader productivity stack — user lifecycle, access, billing hygiene.
Scripting: Bash, PowerShell, or Python for automation. Junior hires should have working fluency in at least one; intermediate hires should be productive across more than one.
Networking fundamentals: DNS, DHCP, VPN, Wi-Fi troubleshooting, basic firewall concepts.
Security baselines: disk encryption, MFA, password manager hygiene, OS patching, secure offboarding.
Ticketing: Freshdesk, Jira Service Management, Zendesk, or similar.
AI tooling: practical familiarity with AI-assisted work, and self-awareness about its limits — you can describe a time it produced something that looked right but was wrong, and what you did about it.
Disposition and Behaviours
Curious — about the system, the issue, and the person on the other end of the ticket.
Accountable — you own everything you ship, including what AI generated. You can explain every change you make.
Coachable — you take feedback as input, apply it, come back better.
Calm under pressure — outages and laptop disasters are not the time to panic.
Honest about uncertainty — you say "I don't know yet," then go find out. In IT, guessing on production accounts is dangerous.
People-first instinct — every ticket is a person trying to do their job. You make them feel supported, not processed.
Aware of the weight of the work — IT touches every person at the company, and security gaps on internal systems can become incidents on the platform.
Bias for finishing and documenting — you close tickets cleanly, leave runbooks behind, and make next time easier for everyone.
To apply, please send your CV and a short note on why littlefish to hiring@littlefishapp.com. We do not require cover letters, but we do want to know what draws you to this role specifically — curiosity about the problem is part of what we are hiring for.
