Lead of Internal IT — Chillbase

ChillBase studio is an independent and innovative player in the gaming industry. We’re fueled by our passion for crafting outstanding products.

Our ongoing projects are in full swing, and we’re dedicated to delivering top-notch work without being tied down by a strict corporate structure.

We’re looking for a Lead of Internal IT to develop our internal IT infrastructure and services together with a team of 3–6 engineers. You’ll automate routine tasks, connect corporate systems, make employee support faster and more reliable, and build efficient processes.

This role involves plenty of hands-on work, technical decision-making, and the freedom to choose the right tools. Your goal will be to build a connected IT environment that meets the real needs of a game studio without adding unnecessary complexity.

Apply now Apply now Our tech stack:

Identity: Google Workspace, JumpCloud, Keycloak.

Device management: macOS (Jamf), Windows (Intune / Autopilot), high-performance workstations for development and rendering.

ITSM and automation: Jira Service Management, n8n / Make / Zapier, Python / Bash / PowerShell.

What we want to see:

• 7+ years of experience in Internal IT / System Administration, including at least 3 years as an IT Lead or in a similar role.
• Deep understanding of IAM: SSO (SAML 2.0, OIDC), SCIM provisioning, MFA and Conditional Access, RBAC, and the Joiner–Mover–Leaver (JML) lifecycle.
• Experience administering Google Workspace and at least one identity provider (IdP) or directory solution, such as JumpCloud, Keycloak, Okta, or Entra ID.
• Experience managing a mixed macOS and Windows device fleet through MDM: Jamf (configuration profiles, policies, ABM / zero-touch enrollment) and Intune / Autopilot, as well as patch management, disk encryption, and compliance policies.
• Experience configuring and automating Jira Service Management: request types, SLAs, workflows, automation rules, and Assets / CMDB.
• Hands-on experience building end-to-end integrations using REST APIs, webhooks, and automation platforms such as n8n, Make, or Zapier.
• Strong scripting skills in Python and Bash / PowerShell, including integrations, parsing, API usage, and IT task automation.
• Good knowledge of networking: VLANs, DHCP/DNS, VPNs (WireGuard / OpenVPN / IPsec), corporate Wi-Fi (802.1X, RADIUS), and firewalls.
• Experience leading a technical team: prioritizing work, assigning tasks, developing team members, and reviewing code and configurations.
• Practical experience using AI agents and LLM-based tools for tasks such as support automation, script generation, and knowledge base management.
• English at B2 level or above for documentation, communication with vendors, and collaboration with a distributed team.
• Russian language proficiency at C1 level.

Nice to have:

• Experience in game development, including build machines, GPU workstations, console devkits, and large file storage systems.
• Experience with Infrastructure as Code / GitOps (Terraform, Ansible, configuration management in Git).
• Experience implementing EDR and SIEM solutions, managing vulnerabilities, and participating in ISO 27001 / SOC 2 audits.
• Experience with SaaS management and software license management.
• Knowledge of physical access control systems and their integration with an IdP.

What you’ll do:

• Build end-to-end Internal IT automation by connecting Google Workspace, JumpCloud / Keycloak, Jamf / Intune, Jira Service Management, and the HR system through APIs, webhooks, n8n, and scripts.
• Fully automate employee onboarding and offboarding, including accounts, groups and access rights, device provisioning and enrollment, licenses, and physical access. The entire process should be triggered by a single event in the HR system.
• Develop centralized IAM by implementing SSO and SCIM across all key services, enforcing MFA, and establishing regular access reviews.
• Manage the macOS and Windows device fleet through Jamf and Intune, including zero-touch enrollment, baseline configurations, patching, encryption, and inventory management.
• Improve Jira Service Management by developing the service catalog, SLAs, automated request routing, Assets / CMDB, and an AI assistant for first-line support.
• Manage office infrastructure across multiple locations, including networks, Wi-Fi, VPNs and remote access, physical access control systems, meeting rooms, and equipment.
• Select and implement enterprise tools for a distributed company, assess total cost of ownership (TCO), and negotiate with vendors.
• Lead a team of 3–6 engineers by setting priorities, assigning tasks, monitoring results, and supporting professional development.
• Establish documentation practices, including runbooks and a knowledge base, and ensure knowledge sharing and team backup coverage.
• Ensure the reliability and security of Internal IT through monitoring, backups, incident management, and baseline security controls.

What we expect you to achieve in the first 6–12 months:

• Employee onboarding and offboarding are fully automated and take only minutes.
• All key services are integrated with SSO and mandatory MFA.
• 100% of devices are enrolled in MDM and comply with security and compliance policies.
• A clear IT service catalog with defined SLAs is in place, and some support requests are resolved automatically without engineer involvement.

Benefits

Growth and development

Our project is continuously growing, just like the teams behind it. We invest in the growth of team members, conduct regular performance reviews, and review salaries based on performance.

Care for employees

Paid sick days, the ability to take days off, support during difficult life situations, and a minimum of bureaucracy and processes for the sake of processes.

Relocation support

We support with relocation for this role.

We carefully review every application and will definitely reach out if your profile matches the role’s requirements. If you do not receive a response within 14 calendar days, it means we are not moving forward with your application at this stage. We’d be happy to reconnect in the future — please keep an eye on our openings.

Employment process

You apply for an open role via our careers portal. We carefully review your CV and any additional materials you provide.

If your experience matches our needs, we’ll invite you for an initial conversation with a recruiter. It’s a chance to get to know each other, talk about your motivation and expectations, and share more about the role and company.

A closing conversation with a hiring manager or team lead. We’ll discuss the outcomes of the previous stages, cover any remaining questions, and align on expectations.

If everything goes well — we’ll extend a job offer. Once the details are confirmed, we’ll guide you through the onboarding process and welcome you to the team.