About REVEL

REVEL is an AI robotics company developing physical intelligence for general-purpose humanoid robots. We capture the force, dexterity and intent of human work with our Neural Gambit wearable, and use it to train RAI, the intelligence that powers our robots. Our R&D and engineering facilities are in Prague, Czech Republic. This role is on-site with our team in Prague.

The company was founded in 2025 and is building its founding team in the Czech Republic. The team is distributed across offices, a lab and a workshop, works with external contractors and partners, and handles customer and partner data that has to stay controlled.

The role

You will own the systems everyone logs into: Google Workspace, single sign-on and identity, company laptops and phones, and the SaaS applications the company runs on. You decide how accounts are created, what access they get, how devices are secured, and how a new person is productive on day one and fully removed on their last.

This is the first dedicated enterprise IT hire. The current setup is small, largely manual, and grew as the company did, so the first months are about taking it over, documenting it, tightening access, and automating the parts that are done by hand today. After that you set the direction: what the identity model looks like, which tools we standardise on, and what security baseline the company holds itself to as it grows and as customers, partners and investors start asking harder questions.

This role is paired with an IT Infrastructure Engineer who owns the network, servers, storage and compute. They own the physical and computational layer; you own the accounts, devices and applications on top of it. You will work closely together, and neither of you will be waiting on the other for the parts you own.

Responsibilities

Identity and access

Administer Google Workspace end to end: domains and aliases, mail routing, delivery and filtering, SPF, DKIM and DMARC, groups, shared drives, retention and eDiscovery.

Own single sign-on and the identity provider: SAML and OIDC application integrations, SCIM provisioning, multi-factor authentication including phishing-resistant keys, conditional access and session policy.

Design and run joiner, mover and leaver processes: automated provisioning on hire, access changes on role change, and complete, verifiable deprovisioning on exit, including contractors and interns.

Manage privileged and shared access: admin roles, break-glass accounts, service accounts, API keys and the company password manager.

Devices

Run mobile device management across macOS, Windows and Linux endpoints and company phones: enrolment, configuration profiles, disk encryption, patching, application deployment and compliance reporting.

Maintain the endpoint security baseline: screen lock, encryption, endpoint protection, browser and extension policy, and remote wipe.

Own the end-user hardware lifecycle: specification, procurement, asset inventory, warranty, repair and disposal.

SaaS and licenses

Own the SaaS stack: application inventory, admin consoles, integrations, and the onboarding of new tools including security and data review before they are adopted.

Manage licences, renewals and spend, reclaim unused seats, and give the leadership team a clear picture of what IT costs and why.

Find and bring in shadow IT rather than leaving it unmanaged.

Security and compliance

Run periodic access reviews across Workspace, the identity provider and the main SaaS applications, and keep the evidence.

Define and maintain security policies and baselines, and the runbooks for incidents such as account compromise, lost device and phishing.

Prepare the company for ISO 27001 or SOC 2 style scrutiny and answer customer, partner and investor security questionnaires, working with the engineering and legal side on anything that touches product or contracts.

Track applicable Czech and EU obligations, including the Czech Cybersecurity Act (Act No. 264/2025 Coll., the NIS2 transposition) and GDPR, and advise the leadership team on what applies to us as we grow.