IT Systems Engineer

About the role

We are looking for an IT Systems Engineer to build and secure the identity and access management (IAM) and mobile device management (MDM) systems for employees who build agents and internal tools every day. You will design access and device policies that let them ship quickly without exposing company data, and automate the work with scripts, API integrations, and AI tooling alongside our IT and Security engineers. This is a hybrid role based in San Francisco, New York City, or Austin, with three days a week in the office.

What you’ll do

• Configure Okta, including application integrations, single sign-on (SSO), multi-factor authentication (MFA), groups, access policies, and automated provisioning
• Build onboarding, role-change, and offboarding automation that keeps employee access current
• Configure and maintain MDM for device enrollment, software deployment, patching, encryption, and compliance controls
• Build scripts, API integrations, and automation across Okta, MDM, Google Workspace, Slack, and IT service management systems, using AI to write and troubleshoot code and reviewing its output before it ships
• Partner with Security on least-privilege access that lets employees connect agents and internal tools to company systems safely, along with device security standards and access reviews, and serve as the escalation point for complex identity and device issues

What you need

• 7+ years of hands-on IT systems engineering experience, with deep expertise in either IAM or MDM and working knowledge of the other
• Administered Okta and integrated applications using Security Assertion Markup Language (SAML), OpenID Connect (OIDC), and System for Cross-domain Identity Management (SCIM)
• Configured and operated an MDM platform such as Jamf, Kandji/Iru, or Intune
• Wrote automation in Python or Bash against APIs, and used AI to build and troubleshoot it, reviewing generated code before deploying

Bonus if you

• Managed Okta or other IT systems as code with Terraform, including version-controlled configurations, code review, and configuration drift management
• Supported AWS identity and access configurations
• Built or hosted a project on Vercel

Benefits

• Competitive salary and meaningful equity
• Comprehensive health, dental, and vision coverage
• Generous paid time off and parental leave
• Professional development stipend
• Daily lunch and commuter benefits (SF office)
• Flexible Time Off.

The San Francisco, CA base pay range for this role is $180,000.00 - $288,000.00. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process.