About Freshpaint:
Healthcare is a $4+ trillion industry in the U.S. alone, and it’s undergoing a rapid digital transformation.
Hospitals, digital health companies, and life sciences organizations rely on analytics and advertising tools to reach patients, measure performance, and grow. But those tools weren’t built for regulated healthcare data. That creates real compliance risk and forces teams to choose between growth and privacy.
Freshpaint eliminates that trade-off.
We’re a privacy-first data platform that helps healthcare organizations use modern marketing and analytics tools without exposing protected health information (PHI). Freshpaint sits between a company’s website or app and the third-party tools they use, automatically detecting and controlling sensitive data before it’s shared.
In short: we let healthcare teams move fast, safely.
Backed by Top Investors
Freshpaint is backed by some of the most respected names in technology, including:
Y Combinator (OpenAI, Stripe, Airbnb, Coinbase, DoorDash)
Intel Capital (Broadcom, Astera Labs, VMware, RedHat, MongoDB)
We’ve raised tens of millions of dollars in funding to build the privacy infrastructure layer for healthcare’s digital future.
Who we’re looking for
We’re looking for an organized, service-oriented IT operations professional who enjoys helping employees stay productive while keeping core IT processes running smoothly behind the scenes. This person should be detail-oriented, comfortable following and improving repeatable processes, and capable of handling device setup, access administration, troubleshooting, and compliance support with good judgment and strong follow-through.
What you’ll be doing
In this role, you’ll support the day-to-day IT operations that help Freshpaint scale, including onboarding and offboarding employees, maintaining secure and compliant laptops and accounts, resolving employee IT issues, and supporting access management and compliance-related operational work. You’ll work closely with engineering and security leadership to execute priorities, keep documentation and operational processes current, and identify opportunities to turn repeat issues into better runbooks, workflows, and support practices. Success in this role requires strong troubleshooting judgment, attention to detail, and the ability to know when to resolve independently versus escalate.
Primary responsibilities
Execute employee onboarding and offboarding accurately, securely, and on time
Provision, maintain, and troubleshoot company laptops and employee endpoints
Support employees with hardware, software, access, and account issues while delivering a fast, dependable support experience
Handle employee access requests and changes with appropriate approvals and attention to least privilege, while supporting RBAC rollouts, access reviews, and cleanup work
Support security questionnaires, audit evidence collection, and compliance-related operational processes
Turn repeat issues into better documentation, runbooks, and lightweight process improvements.
Desired skills & experience
Experience in IT support, IT operations, helpdesk, or a similar internal-facing technical support role
Experience onboarding and offboarding employees across devices, accounts, and SaaS tools
Familiarity with endpoint management, device provisioning, software installation, patching, and basic security hygiene
Experience administering common internal tools such as identity, password management, collaboration, or device management systems
Strong troubleshooting skills across laptops, employee software, access, and account issues
Strong judgment when handling access changes, troubleshooting issues, and deciding when to follow a defined process versus escalate to the right partner.
Clear written and verbal communication skills with a strong service mindset
Strong organizational skills and the ability to manage recurring operational work with accuracy and follow-through
Familiarity with common workplace IT and compliance tools such as Google Workspace, device management platforms, and access or compliance systems
Experience with Mac administration or supporting primarily Mac-based employee environments
Nice to haves
Experience supporting security or compliance-related operational work such as SOC 2, HITRUST, audit evidence gathering, or customer security questionnaires
Experience working in a startup or high-growth SaaS environment
Familiarity with tools such as Drata, Iru, Google Workspace, identity providers, or similar IT, endpoint, and compliance platforms
Experience improving internal documentation, runbooks, or lightweight operational processes
Experience with scripting or automation using tools or languages such as Python, JavaScript, or Go
Familiarity with cloud platforms such as AWS, GCP, or Azure, and infrastructure tooling such as Terraform
Perks & Benefits
We take care of our team—here’s a peek at what you get when you join:
Competitive pay + generous equity (10-year exercise window)
Half-day Fridays, every Friday
16 weeks fully paid parental leave (eligible after 6 months; commission-based roles receive 100% base salary during leave)
Flexible PTO with a required 2-week minimum
Top-tier health, dental & vision (100% covered for you, 80% for dependents)
Intentional & engaging company offsites (past trips: Arizona, Jackson Hole, Nashville, New Orleans & more)
And more! Check out our careers page for the full list.