IT Systems Engineer

Role overview

Own the identity, authentication, and automation systems that control employee access across an organization’s internal tools. This senior individual contributor role focuses on engineering and platform ownership: setting up reliable identity workflows, strengthening access controls with Security, and helping the support team resolve complex systems issues.

Responsibilities

- Architect and administer Okta, including single sign-on, multifactor authentication, authentication policies, groups, and application integrations. - Integrate applications through SAML, OIDC, and SCIM, and lead migration work across the identity environment. - Automate employee onboarding, role changes, and offboarding across HR, identity, collaboration, device management, and SaaS systems. - Build workflows and scripts using Okta Workflows, REST APIs, and a scripting language to reduce manual IT tasks. - Develop role-based and least-privilege access controls, regular access reviews, and device trust integrations in partnership with Security. - Support compliance evidence and maintain system documentation, runbooks, and architecture diagrams; advise support staff on escalated issues.

Requirements

- At least six years in IT systems engineering, identity engineering, or a related field. - Hands-on Okta administration, including Identity Engine, Workflows, authentication policies, and lifecycle management. - Working knowledge of SAML, OIDC, SCIM, and MFA. - Proficiency with Python, Bash, or PowerShell, plus experience using REST APIs. - Experience administering Google Workspace and a mobile device management platform. - A track record of delivering automation that reduces manual IT work, and familiarity with SOC 2 or similar compliance needs. - Strong written and verbal communication, including documentation for technical and nontechnical audiences.

Nice to have

- Okta certification, identity or SaaS configuration as code such as Terraform, AWS IAM or cloud identity experience, or work in a high-growth startup.

Benefits and work setup

- Hybrid schedule with three days per week in an office in San Francisco or New York. - Compensation includes equity. U.S. benefits include employee and dependent medical, dental, and vision coverage, flexible paid time off with a year-end office closure, parental leave, a family-building stipend, and a 401(k) plan.