Why work at Higgsfield AI?
Higgsfield AI builds AI-powered video and image creation tools, with a $700M annual revenue run rate. Our platform serves more than 30 million users worldwide, delivers approximately 6 million generations daily, and powers visual production for 390 Fortune 500 companies.
We’re pushing the boundaries of AI-powered video creation and the next generation of creative tools. Join a team with direct impact on the future of AI-native experiences, in a company setting a new pace for the industry.
About the role
We’re looking for an IT Engineer to manage and improve the company’s internal IT systems: laptops, accounts and access, endpoint security, email, corporate SaaS, and the office network. A large part of our engineering and operations team is based in Almaty, and this role supports the internal systems and tools they rely on every day.
A substantial part of the role involves handling and resolving employee requests. We’re looking for someone who can work independently, identify recurring issues, and address their root causes. The core stack is already in place: you’ll keep it reliable and well maintained, and improve systems and processes where it makes a practical difference.
You’ll work alongside Security, Infrastructure, and People Ops, with the autonomy to make most decisions within your area of responsibility.
What you’ll work on
Manage the device fleet through a cross-platform MDM platform, with most devices running macOS. Administer Apple’s business enrollment and app distribution tools, maintain configuration and compliance policies, establish rollout standards, and keep the hardware inventory accurate.
Maintain endpoint security, including encryption, OS security baselines, agent health, and reporting on coverage. Participate in testing and rollout as we transition from our current endpoint agents to a new solution.
Administer cloud directories and configure SSO and provisioning for corporate SaaS applications. Work with SAML, OIDC, SCIM, and claim mapping, and troubleshoot differences in how vendors implement these standards.
Manage transactional email through a third-party provider: sending domains, DNS, DKIM and DMARC, bounce investigation, and appropriate sending policies.
Administer our ticketing platform and its Slack integration, resolve day-to-day requests, and maintain corporate tools. Handle onboarding and offboarding end to end, including hardware, accounts, and access.
Support office IT infrastructure, including the LAN, routing, and self-hosted storage.
Part of the role involves keeping global services accessible from Kazakhstan. You’ll investigate issues at the network level—for example, why a login page won’t load—and determine whether the cause lies in the local network, routing, or the service itself.
What we’re looking for
A few years of experience in IT engineering or systems administration, ideally in a smaller company where you independently owned and resolved technical issues.
Experience managing MDM at fleet scale, including writing and debugging policies beyond device enrollment.
Cloud directory administration experience and hands-on troubleshooting with SAML, OIDC, and SCIM.
Strong knowledge of DNS and email authentication, with confidence making changes in production.
Solid networking fundamentals and the ability to analyze packet captures when logs don’t explain the issue.
Scripting skills to automate repetitive tasks.
Sound judgment to make decisions independently and recognize which decisions require input or approval from others.
English proficiency sufficient for vendor support and collaboration in a multilingual team.
Nice to have
Experience migrating a live device fleet from one endpoint agent to another without disrupting day-to-day work.
Experience with self-hosted storage and backups.
Experience keeping global services working reliably from Kazakhstan.
Details
Full-time, on-site work in Almaty. You must be based in Kazakhstan and eligible to work here.
Competitive compensation in USD.
The opportunity to set the standard for the hardware and internal tools used across the company.
