IT Engineer

Mission: Keep AIM’s Infrastructure as reliable as our machines

Location: Greater Seattle Area (on-site)

Employment Type: Full-Time | Contract-to-Hire

Reports to: Head of Software

The Mission

Everything humanity depends on is mined, dug, or grown. At AIM, we are building the autonomous linchpin of civilization. We transform heavy machinery—bulldozers, loaders, excavators—into AI-powered fleets that operate continuously, safely, and at peak performance in the world’s harshest environments.

AIM runs production mines, large scale infrastructure builds, and defense operations as a TRL9 hardened system, not a science experiment.

Built by engineers from mining, construction, Waymo, SpaceX, Google and Tesla, AIM enables scalable earthmoving, turbocharging the global economy’s physical foundation. AIM is backed by some of the most sophisticated capital in the world, including General Catalyst, Khosla Ventures, Elad Gil, Human Capital, Ironspring Ventures, Mantis, DCVC.

AIM is on the cutting edge of Physical AI, automating the earthmoving industry — safely, reliably, and at speed — enabling a transformation in an industry that has been largely unchanged for over 100 years. AIM is scaling rapidly across deployments, partnerships, and technical capability. Our autonomy platform operates in mining, construction, military, and extreme-condition environments across the globe. The machines are real. The deployments are live. The proof exists — and now the world needs to see it. Learn more about AIM here.

The Role

AIM is seeking an IT Engineer to be our on-site technology partner as we scale. This is not a break-fix ticket queue. You will own the systems, devices, and identity infrastructure that keep our engineers, operators, and business team running securely at speed.

You will execute day-to-day end-user support while simultaneously leading foundational IT projects that set AIM up to scale securely: a full Okta identity rollout, Windows device/endpoint management, Mac device management via SimpleMDM, Google Workspace cleanup and automation, and assisting with security compliance readiness. You will work closely with Operations, Engineering, and Leadership to make sure our infrastructure never becomes the bottleneck.

Key Responsibilities:

Be the On-Site IT Anchor

• Serve as the first line of support for all hardware, software, printer, Wi-Fi, and general device issues
• Manage VPN access and remote connectivity for distributed team members
• Support conference room AV equipment, meeting room displays, and Joan room-scheduling devices
• Manage onsite networking hardware and infrastructure (Wi-Fi Access Points, Switches, Firewalls)
• Bring in outside vendors or specialists to solve in-house networking issues.

Own Device & Identity Management

• Deploy and Administer Okta as AIM’s primary identity provider: user lifecycle, SSO integrations, and app assignments
• Own and manage company device management through SimpleMDM and Intune and/or similar, including managing device policies and automatic provisioning when applicable
• Execute and continuously improve onboarding and offboarding workflows from account provisioning to device setup to access revocation
• Enforce device compliance baselines that protect company IP and meet security requirements

Administer Google Workspace & Software Licensing

• Manage Google Workspace: group structure, OU administration, permissions, and admin settings
• Own software subscriptions and licenses — assign seats, reclaim unused licenses, and control costs
• Maintain SSO integrations and automate provisioning/deprovisioning across the SaaS stack

Manage Network, Facilities & Physical Access

• Troubleshoot on-site Wi-Fi performance and network issues; oversee expansion of internal network infrastructure (additional Ethernet drops, etc.)
• Design and maintain guest Wi-Fi segmentation so visitor access is simple and secure
• Administer visitor check-in workflows, badge issuance, and access photo processes

Support Security & Compliance

• Maintain spam filtering, phishing protection, and cybersecurity hygiene baselines
• Support audits and compliance reviews as AIM’s operational footprint grows

Year 1 Foundational Projects

In addition to ongoing support, you will lead a set of high-priority projects that build AIM’s IT foundation:

• Okta deployment and full rollout as AIM’s primary IdP, replacing Google Workspace in that role
• Deploy Windows device management rollout via Intune (or similar) and finalize SimpleMDM policy alignment for Macs
• Google Workspace redesign: rationalize OU vs. group structure, define role-based access, and establish scalable email group architecture
• Guest Wi-Fi redesign and network segmentation
• Visitor check-in and badging workflow: initial design and rollout
• Security compliance readiness: implement IT controls, close identified gaps, and build documentation that scales

What We're Looking For

• 3 years of IT support or systems administration experience in a professional environment
• Hands-on experience with Google Workspace administration, Microsoft Intune, and Okta (or comparable IdP)
• Proficiency supporting both Windows and macOS devices; experience with MDM platforms (Intune, SimpleMDM, Jamf, or equivalent)
• Working knowledge of networking fundamentals: VLANs, Wi-Fi, VPN, DNS/DHCP
• Comfort managing networking hardware (switches, firewalls) in the Juniper ecosystem
• Ability to manage competing priorities and communicate clearly with non-technical teammates
• Hands-on approach — equally comfortable owning a strategic rollout and untangling a conference room cable

Nice to Have

• Familiarity with CMMC, NIST SP 800-171, Cloud Security Alliance or other compliance frameworks
• Experience designing or improving automated provisioning/deprovisioning workflows
• Scripting or automation skills
• A/V setup and event support experience
• CompTIA A , Network , Security , or similar certifications

Location & Work Model

This role is hybrid, based in or around Seattle, WA, but due to the nature of the work in-office visits will likely be regular.

What Success Looks Like

• In your first 30 days, you will have met every key stakeholder, audited the current state of devices, identity, and network infrastructure, and delivered a prioritized plan for the Year 1 foundational projects.
• By 60 days, onboarding and offboarding workflows will be tightened, the Okta rollout will be underway, and day-to-day support will run without friction.
• By 90 days, AIM’s device management, identity infrastructure, and compliance posture will be materially stronger and you will have built the foundation for them to scale with the company.

Why AIM?

• Impact: You are building the autonomous infrastructure that powers the global economy, one of the most consequential applications of autonomy in the physical world.
• Real World Impact: The proof of the product exists, your job is to make the world see it
• Pedigree: Work alongside serial business builders, pioneers from Google, Waymo, SpaceX, Tesla, heavy ecosystem. You will have direct ownership of a marketing function with real organizational influence.
• Maturity: Join a TRL9 company with real-world production systems and global revenue. You are joining at the moment AIM is scaling, this role shapes the company's public identity from the ground up
• Equity and Headroom: Meaningful equity participation in a company solving a 100-trillion-dollar problem