IT Engineer

Role overview This role blends systems engineering with hands-on IT support for a fast-growing technology organization. The majority of the work centers on building and owning the core internal platform: identity, endpoints, SaaS governance, and the automation that ties them together, with a smaller share dedicated to escalated support. The environment is built on Okta, Workspace ONE, Google Workspace, and Slack, and the systems in scope must satisfy SOC 2, ISO 27001, and PCI audit standards.

Responsibilities - Design and operate the identity layer in Okta, including group strategy, SSO configuration, lifecycle automation, and access request workflows that balance security with usability. - Manage endpoint engineering across a macOS-first fleet in Workspace ONE, covering provisioning, configuration baselines, patching, encryption, inventory accuracy, and compliance reporting. - Administer Google Workspace and Slack at scale, handling user lifecycle, groups, shared drives, roles, and the governance guardrails that prevent drift. - Establish real ownership over the broader SaaS ecosystem, tracking accountability, access, cost, and lifecycle changes for every tool. - Build automation that decouples IT effort from headcount, covering onboarding, deprovisioning, access reviews, device compliance checks, and any recurring task that is ripe for scripting. - Convert security, compliance, and engineering requirements into IT controls that produce audit-ready evidence continuously, not just at audit time. - Serve as the senior escalation point for complex issues across identity, access, endpoints, and internal infrastructure, then engineer the underlying class of problem out of the queue.

Requirements - At least four years of experience in IT engineering, IT operations, systems administration, or a closely related discipline at a scaling company. - Demonstrated ability to write code that is fast, reliable, and practical, with examples of automating operations work. - Strong troubleshooting instincts and a track record of being the person others route hard technical problems to. - Comfort working across time zones and partnering with Security, Engineering, People, and Finance functions. - Sound judgment under ambiguity, with a bias toward building solutions that reduce future manual work. - Desire to stay hands-on as an individual contributor rather than moving into people management.

Nice to have - Prior involvement with security and compliance programs such as SOC 2, ISO 27001, PCI, access reviews, or audit evidence collection. - Familiarity with device security posture tooling, including EDR, disk encryption, patch compliance, and vulnerability management. - Scripting experience with Bash, Python, Google Apps Script, Okta Workflows, or direct API integrations. - Experience designing IT processes for globally distributed teams, including international hardware logistics.

Benefits and work setup - Competitive salary and equity package. - Health, dental, and vision benefits. - Flexible vacation policy. - Fully remote work environment with provided equipment.