<p>As we enter our next phase of growth and scale the Chaparral aircraft from flight testing into full-rate production, Elroy Air needs one person to own IT and security from the ground up. This is a true builder role: you'll be a team of one for the foreseeable future, operating as both the strategist setting direction and the hands-on operator keeping systems running day to day. You'll design and defend our network against real threats, and you'll build and maintain the CMMC compliance framework that lets us operate in export-controlled, government-adjacent environments, essentially standing up the function solo before it grows.</p><p>You'll work directly with engineering, security, legal, and leadership, with full ownership of decisions that in a larger company would be split across a team.</p><p>The Head of IT will build, lead, secure, scale, and create high-performing IT systems across the company. This role is responsible for architecting and operating our internal IT infrastructure, including corporate IT, identity and access management (physical and digital), endpoint systems, networking, and compliance frameworks required for export-controlled environments.</p><p>You will shape and build the systems that allow the company to mature and operate efficiently as we scale.</p><br><br><h3>Key Responsibilities</h3><ul><div> </div><li style="list-style-type:none;"> </li><li>Security &amp; network defense: architect and actively defend physical and cloud network infrastructure against intrusion; own logging, detection, and incident response.</li><div><li>CMMC / compliance framework — build and maintain CMMC (and related NIST 800-171/800-53) compliance from the ground up, and serve as the key stakeholder in audits and regulatory inspections</li><div><li>Identity &amp; access management — own IdP systems on least-privilege and just-in-time principles</li></div><div><li>Endpoint management — MDM/EDR deployment, fleet lifecycle, device-trust and conditional-access workflows</li></div><div><li>Day-to-day IT operations — corporate IT, SaaS management, employee onboarding/offboarding automation, web hosting/DNS support</li></div></div><li><p>Own end-to-end management of corporate IT infrastructure: physical networks, endpoint management, and SaaS management, maintaining successful compliance with strict security frameworks such as NIST SP 800-53</p></li><li><p>Develop and enforce IT policies and access control aligned with defense sector norms and requirements.</p></li><li><p>Architect and maintain secure physical network infrastructure across office, lab, and production environments</p></li><li>Partner with Engineering to support high-performance cloud computing, lab systems, and specialized environments.</li><li><p>Own and streamline IT elements of employee lifecycle, including automating critical aspects of onboarding / offboarding</p></li></ul><h3>You Will Be Successful in This Role If You</h3><ul><div><li>You're equally comfortable setting long-term security strategy and personally racking a switch or troubleshooting a laptop.</li><div><li>You take full ownership with no team to delegate to, make sound judgment calls in ambiguity, and treat security as a first principle and not a checkbox, while still enabling the business to move fast.</li><div><li>You're building something that doesn't exist yet, not maintaining something that does.</li></div></div></div><li><p>Have a security-first approach while still enabling rapid execution</p></li><li><p>Use strong judgment balancing speed, cost, and risk</p></li><li><p>Are a clear communicator with both technical and non-technical teams</p></li><li><p>Have a builder mentality: you aren’t afraid to roll up your sleeves and create new systems or integrations when legacy ones aren’t working</p></li></ul><h3>Requirements</h3><ul><div><li>8+ years in IT infrastructure, operations, or systems engineering, including solo or small-team ownership</li></div><li>Strong cloud experience (GCP and AWS)</li><li>Hands-on MDM and EDR implementation</li><li>Identity system automation (Okta, Azure AD) in regulated environments</li><div><li>Deep network security expertise — VPNs, firewalls, routing, segmentation, threat defense</li><div><li>Direct experience building or maintaining CMMC and/or NIST 800-171 compliance frameworks</li><div><li>Eligible to work in the US and to hold ITAR/EAR access</li><div><li>Comfortable being on-site regularly to support a small, fast-moving team</li></div></div></div></div><li><p>Proven track record of automation and user lifecycle improvements in enterprise IT systems in a fast-paced environment</p></li><li><p>This role is hybrid on-site and requires close collaboration with engineering and lab environments</p></li></ul><h3>Nice to Have</h3><ul><div><li>Prior ITAR/EAR or export-controlled environment experience</li><div><li>Aerospace, defense, energy, or deep-tech background</li><div><li>Experience supporting hardware labs or secure manufacturing facilities</li><div><li>History being the first IT hire at an early-stage company and scaling the function over time</li></div></div></div></div></ul><h3>What We Offer</h3><ul><div><li><p>Competitive salary</p></li><li><p>Equity ownership in a rapidly growing advanced aerospace company</p></li><li><p>Comprehensive medical benefits</p></li><li><p>401(k) with company contribution + Roth IRA</p></li><li><p>Free daily lunch provided onsite</p></li><li><p>Flexible time-off policy</p></li><li><p>3 months of paid parental leave</p></li><li><p>Employee assistance program with 24/7 support</p></li><li><p>High-impact startup environment with significant ownership and autonomy</p></li><li><p>Opportunities for rapid career growth and internal advancement</p></li><li><p>You’ll work with a motivated, kind, and highly skilled team</p></li><li><p>You'll help shape and define our company culture and values</p></li><li><p>You'll help build and scale a new category of aerospace / logistics technology</p></li></div></ul><br>

At Elroy Air their mission is to improve quality of life around the planet by expanding the reach of expedited logistics via air cargo - safely, efficiently and autonomously. Their air cargo system features rotor-based vertical takeoff and landing (VTOL) and transitions to wing-based cruise flight for long range. They have designed a holistic logistics system with integrated flight and ground operations that make their vehicles a safe, efficient way to transport cargo by air.

Head of IT

<p>As we enter our next phase of growth and scale the Chaparral aircraft from flight testing into full-rate production, Elroy Air needs one person to own IT and security from the ground up. This is a true builder role: you'll be a team of one for the foreseeable future, operating as both the strategist setting direction and the hands-on operator keeping systems running day to day. You'll design and defend our network against real threats, and you'll build and maintain the CMMC compliance framework that lets us operate in export-controlled, government-adjacent environments, essentially standing up the function solo before it grows.</p><p>You'll work directly with engineering, security, legal, and leadership, with full ownership of decisions that in a larger company would be split across a team.</p><p>The Head of IT will build, lead, secure, scale, and create high-performing IT systems across the company. This role is responsible for architecting and operating our internal IT infrastructure, including corporate IT, identity and access management (physical and digital), endpoint systems, networking, and compliance frameworks required for export-controlled environments.</p><p>You will shape and build the systems that allow the company to mature and operate efficiently as we scale.</p><br /><br /><h3>Key Responsibilities</h3><ul><div> </div><li> </li><li>Security &amp; network defense: architect and actively defend physical and cloud network infrastructure against intrusion; own logging, detection, and incident response.</li><div><li>CMMC / compliance framework — build and maintain CMMC (and related NIST 800-171/800-53) compliance from the ground up, and serve as the key stakeholder in audits and regulatory inspections</li><div><li>Identity &amp; access management — own IdP systems on least-privilege and just-in-time principles</li></div><div><li>Endpoint management — MDM/EDR deployment, fleet lifecycle, device-trust and conditional-access workflows</li></div><div><li>Day-to-day IT operations — corporate IT, SaaS management, employee onboarding/offboarding automation, web hosting/DNS support</li></div></div><li><p>Own end-to-end management of corporate IT infrastructure: physical networks, endpoint management, and SaaS management, maintaining successful compliance with strict security frameworks such as NIST SP 800-53</p></li><li><p>Develop and enforce IT policies and access control aligned with defense sector norms and requirements.</p></li><li><p>Architect and maintain secure physical network infrastructure across office, lab, and production environments</p></li><li>Partner with Engineering to support high-performance cloud computing, lab systems, and specialized environments.</li><li><p>Own and streamline IT elements of employee lifecycle, including automating critical aspects of onboarding / offboarding</p></li></ul><h3>You Will Be Successful in This Role If You</h3><ul><div><li>You're equally comfortable setting long-term security strategy and personally racking a switch or troubleshooting a laptop.</li><div><li>You take full ownership with no team to delegate to, make sound judgment calls in ambiguity, and treat security as a first principle and not a checkbox, while still enabling the business to move fast.</li><div><li>You're building something that doesn't exist yet, not maintaining something that does.</li></div></div></div><li><p>Have a security-first approach while still enabling rapid execution</p></li><li><p>Use strong judgment balancing speed, cost, and risk</p></li><li><p>Are a clear communicator with both technical and non-technical teams</p></li><li><p>Have a builder mentality: you aren’t afraid to roll up your sleeves and create new systems or integrations when legacy ones aren’t working</p></li></ul><h3>Requirements</h3><ul><div><li>8+ years in IT infrastructure, operations, or systems engineering, including solo or small-team ownership</li></div><li>Strong cloud experience (GCP and AWS)</li><li>Hands-on MDM and EDR implementation</li><li>Identity system automation (Okta, Azure AD) in regulated environments</li><div><li>Deep network security expertise — VPNs, firewalls, routing, segmentation, threat defense</li><div><li>Direct experience building or maintaining CMMC and/or NIST 800-171 compliance frameworks</li><div><li>Eligible to work in the US and to hold ITAR/EAR access</li><div><li>Comfortable being on-site regularly to support a small, fast-moving team</li></div></div></div></div><li><p>Proven track record of automation and user lifecycle improvements in enterprise IT systems in a fast-paced environment</p></li><li><p>This role is hybrid on-site and requires close collaboration with engineering and lab environments</p></li></ul><h3>Nice to Have</h3><ul><div><li>Prior ITAR/EAR or export-controlled environment experience</li><div><li>Aerospace, defense, energy, or deep-tech background</li><div><li>Experience supporting hardware labs or secure manufacturing facilities</li><div><li>History being the first IT hire at an early-stage company and scaling the function over time</li></div></div></div></div></ul><h3>What We Offer</h3><ul><div><li><p>Competitive salary</p></li><li><p>Equity ownership in a rapidly growing advanced aerospace company</p></li><li><p>Comprehensive medical benefits</p></li><li><p>401(k) with company contribution + Roth IRA</p></li><li><p>Free daily lunch provided onsite</p></li><li><p>Flexible time-off policy</p></li><li><p>3 months of paid parental leave</p></li><li><p>Employee assistance program with 24/7 support</p></li><li><p>High-impact startup environment with significant ownership and autonomy</p></li><li><p>Opportunities for rapid career growth and internal advancement</p></li><li><p>You’ll work with a motivated, kind, and highly skilled team</p></li><li><p>You'll help shape and define our company culture and values</p></li><li><p>You'll help build and scale a new category of aerospace / logistics technology</p></li></div></ul><br />

Head of IT

About the Job

About the Company

Elroy Air

Similar Jobs

IT Strategy Lead

IT Strategy Lead

Information Security Manager

Information Security Manager

Vice President & Chief Information Security Officer

Vice President & Chief Information Security Officer

VP of IT

VP of IT

Senior IT Engineer

Senior IT Engineer

Senior IT Manager

Senior IT Manager

Systems Administrator

Systems Administrator

IT Manager

IT Manager

Information Security Director

Information Security Director

IT Infrastructure & Security Lead

IT Infrastructure & Security Lead