Infrastructure Engineer

About the Company

Lemonaid Health is a leading telehealth and mail-order pharmacy platform providing convenient, affordable care and prescription fulfillment for patients nationwide. From online consultation to doorstep delivery, Lemonaid’s mission is to make healthcare refreshingly simple.

About the Role

We are hiring an early-career Infrastructure Engineer to keep Lemonaid’s corporate and pharmacy environments secure, reliable, and user-friendly. You’ll work onsite in St. Louis and split time across user support, desktop engineering, identity/endpoint management, SSO and MDM administration, and IT infrastructure operations.

Responsibilities

• Provide hands-on user support (walk-ups and tickets): account access, MFA resets, software installs, printer/Wi-Fi/AV troubleshooting, new-hire setups.
• Operate the Jira Service Management queue: intake, triage, prioritization, SLA adherence, escalation, and thorough documentation.
• Desktop Engineering using Rippling MDM: manage macOS/Windows endpoints, deploy software, enforce disk encryption and hardening baselines, manage OS patch cycles.
• Administer identity and access via Rippling SSO & Rippling MDM, including SAML/OIDC app integrations, SCIM provisioning, MFA enforcement, device compliance, and conditional-access controls.
• Configure and monitor Cloudflare Zero Trust/Access, DNS, and WAF rules under senior guidance; assist with posture checks and ZTNA policies.
• Perform joiner/mover/leaver workflows: hardware provisioning, application entitlements, asset assignment, and secure deprovisioning.
• Maintain accurate asset inventory and lifecycle management, coordinate repairs, replacements, and spares.
• Support basic network tasks (VLANs, DHCP/DNS fundamentals, corporate Wi-Fi), certificate renewals, and endpoint security tooling.
• Assist with quarterly access reviews, vulnerability remediation, and audit documentation for HIPAA/SOC2.
• Create and maintain runbooks, diagrams, and end-user guides in Confluence; contribute to incident postmortems and continuous improvement.
• Provision and manage infrastructure automation using Terraform for reproducible, secure, and scalable IT environments.
• Use GitHub for source control, collaboration, and code review for infrastructure scripts and runbooks.

Qualifications

• 1–3 years of experience in IT infrastructure, desktop engineering, or service desk.
• Proficiency supporting macOS and Windows endpoints, productivity suites, and AV/peripheral troubleshooting.
• Experience with SSO and MDM platforms. Familiarity with SSO concepts (SAML/OIDC), SCIM provisioning, MFA policy design, and device compliance frameworks.
• Strong technical troubleshooting, customer service, and documentation skills.
• Ability to prioritize and meet SLAs in a fast-paced environment.

Required Skills

• Hands-on experience integrating SaaS apps with SSO (SAML/OIDC) and SCIM; scripting (Bash, PowerShell, Python) for light automation.
• Exposure to HIPAA or SOC2 environments; basic networking understanding (DNS/HTTP/TLS/VPN).
• Experience with Cloudflare Zero Trust policies, device posture, DNS updates, and WAF adjustments.
• Experience authoring, maintaining, and troubleshooting Terraform scripts and modules as part of infrastructure automation.
• Experience using GitHub for managing infrastructure as code, version control, and collaboration.

Pay range and compensation package

Bonus: Eligibility up to ~10%

Benefits: Medical, dental, vision, 401(k) with match, PTO, wellness days, and paid holidays

Notes: Upper range applies to candidates with strong Rippling ecosystem experience, automation skills, and/or Cloudflare Zero Trust expertise.

Equal Opportunity Statement

Lemonaid Health is committed to diversity and inclusivity in the workplace.

Work Arrangement

Onsite Required: This role is based onsite full time in St. Louis, MO.

Occasional after-hours support/on-call once trained; limited travel for projects or audits.