IT Systems Engineer

We’re hiring an IT Systems Engineer to help build, secure, and improve the systems our employees rely on every day, with a particular focus on identity and access management (IAM) and mobile device management (MDM).

You’ll share ownership with our IT and Security engineers to improve how we manage identities, application access, and devices. This is a hands-on role that combines technical configuration, security judgment, and automation. We’re looking for someone who uses AI effectively to troubleshoot, build, and improve IT workflows. Experience managing IT systems as code using Terraform is a strong plus.

This role requires in-office anchor days on Monday, Tuesday, and Friday from one of our offices (SF, NY, or ATX). For location-specific details, please connect with our recruiting team.

• Configure and improve Okta, including application integrations, single sign-on (SSO), multi-factor authentication (MFA), groups, access policies, and automated provisioning.
• Build reliable onboarding, role-change, and offboarding workflows that keep employee access appropriate and up to date.
• Configure and maintain MDM solutions, including device enrollment, configuration profiles, software deployment, patching, encryption, and compliance controls.
• Partner with Security to define and implement least-privilege access, device security standards, access reviews, and device-based access policies.
• Design and maintain scripts, API integrations, and automation across Okta, MDM, Google Workspace, Slack, and IT service management systems.
• Help expand management of IT systems through code, including opportunities to use Terraform for Okta configuration and other supported resources.
• Use AI tools to accelerate troubleshooting, scripting, documentation, and workflow improvements while validating outputs and protecting company data.
• Serve as an escalation point for complex identity, device, and systems issues; address root causes and prevent recurring problems.
• Support AWS identity and access configurations as part of the broader IT environment.
• Maintain clear documentation for configurations, access policies, integrations, and operational procedures.
• Identify opportunities to simplify the IT environment, reduce technical debt, and improve SaaS lifecycle processes.

• Strong hands-on IT systems engineering experience, with deep expertise in either IAM or MDM and solid working knowledge of the other.
• Experience administering Okta and integrating applications using technologies such as SAML, OIDC, and SCIM.
• Experience configuring and operating an MDM platform such as Jamf, Kandji/Iru, Intune, or an equivalent.
• Strong understanding of security principles, including least privilege, authentication and authorization, endpoint hardening, and secure handling of credentials and company data.
• Proficiency with scripting languages such as Python or Bash, APIs, and workflow automation tools.
• Demonstrated experience using AI to solve technical problems and improve IT operations, with the judgment to review generated code and validate proposed changes.
• Strong troubleshooting skills and the ability to follow problems across identity, devices, applications, and integrations.
• Comfortable sharing ownership, collaborating with Security and other teams, and explaining technical decisions clearly.
• Able to take projects from identifying a problem through implementation, documentation, and ongoing maintenance.

• Experience using Terraform to manage Okta or other IT systems as code, including version-controlled configurations, code review, repeatable deployments, and configuration drift management.

• More reliable identity lifecycle workflows, with timely provisioning, access changes, and deprovisioning.
• Better device enrollment, patching, and compliance through consistent MDM configurations and automation.
• Clearer access policies and repeatable access reviews developed in partnership with Security.
• Less manual work through maintainable automation and effective use of AI.
• More consistent, reviewable system configurations through expanded use of code where appropriate.
• Fewer recurring identity and device issues through root-cause fixes.
• Reliable documentation that helps the team operate, troubleshoot, and improve shared systems.

• Competitive salary and meaningful equity
• Comprehensive health, dental, and vision coverage
• Generous paid time off and parental leave
• Professional development stipend
• Daily lunch and commuter benefits (SF office)

• Competitive compensation package, including equity.
• Inclusive Healthcare Package.
• Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
• Flexible Time Off.
• We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.

The San Francisco, CA base pay range for this role is $180,000.00 - $288,000.00. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process.