Senior IT – Corporate Engineering

This is a fully remote position, open to applicants in United States.

📋 Description

• Take full ownership of IT and corporate engineering from start to finish, encompassing the roadmap, budget, vendor relationships, and results.

• Report directly to the Chief Technology Officer (CTO).

• Oversee the external IT partner, define scope, establish SLAs, ensure delivery, and manage escalations.

• Design processes for joiners, movers, and leavers, along with the entitlement model.

• Administer and enhance Okta, Google Workspace, and the broader SaaS ecosystem, including SSO, SCIM, groups, and roles.

• Manage device standards, access-request workflows, SaaS onboarding, procurement reviews, and operational policies.

• Develop automation for provisioning, access reviews, asset and license reconciliation, and internal tools.

• Implement endpoint and MDM programs across a distributed and increasingly international organization.

• Oversee the corporate security posture, including conditional access, MFA, session and device regulations, privileged access, endpoint posture, and reviews of third-party OAuth and Workspace grants.

• Create and deliver security awareness and training programs.

• Collaborate with security engineers responsible for product and infrastructure security.

• Work closely with People, Finance, and Legal teams on onboarding, offboarding, expenditures, and audit documentation.

• Act as an internal service by promoting ownership, addressing requests, and proactively minimizing friction.

⛳️ Requirements

• Approximately 6+ years of substantial hands-on experience in IT or corporate engineering within a growing organization.

• Experience as the leading individual executing IT or corporate engineering tasks.

• Extensive hands-on experience with an identity provider such as Okta, Entra, JumpCloud, or a similar platform.

• Familiarity with SSO, SCIM, SAML, as well as group and entitlement modeling.

• Practical experience managing Google Workspace or Microsoft 365 as a platform.

• Direct MDM and endpoint experience with macOS, and ideally Windows, in a remote or hybrid work environment.

• Proficiency in automation using Python, Go, TypeScript, or similar languages.

• Comfort with APIs and identity plumbing.

• Experience in designing access models and conducting access reviews.

• Knowledge of setting MFA or conditional access policies, enhancing privileged access, or reviewing third-party application grants.

• Proven track record in managing an outsourced IT provider or managed service provider (MSP).

• Strong written communication skills for asynchronous and cross-team collaboration.

• Ability to function independently as the sole contributor in this role, while also being a hands-on senior individual contributor.

• Strongly preferred: experience in SOC 2, PCI, or banking partnership environments.

• Strongly preferred: experience supporting employees and contractors across multiple countries.

• Strongly preferred: experience in introducing and governing AI tools internally.

🏝️ Benefits

• Meaningful equity.

• Full-time employment.

• Fully remote work within the USA.

• Vendor capacity and managed IT partner support.

• Equal opportunity employer.

• Accommodation support during the hiring process.