IT Systems Engineer
Designs, operates, and automates secure IT infrastructure across identity, endpoint management, and SaaS systems for a regulated public-sector environment. Requires 5+ years of IT systems or infrastructure experience, IAM expertise, scripting skills, and familiarity with federal security frameworks.
About the job
Responsibilities
- Administer IT platforms including Okta, GCC High, Opal, Slack, Jamf, and Jira.
- Provide escalated assistance to the IT Services and Support team.
- Partner with Security and Compliance on audit artifacts, including SSP updates, POA&Ms, and control mappings to NIST 800-53/171 and CMMC 2.0.
- Create and maintain technology documentation for internal IT teams and employees.
- Design and maintain zero-trust controls, including device posture, network segmentation, and Conditional Access, across GCC High/Azure Government and Okta.
- Build Okta Workflows and lightweight services using webhooks and queues to automate joiner-mover-leaver events, access reviews, and deprovisioning.
- Own change management for IT systems in regulated environments, including CAB records, rollback plans, and validation evidence.
Requirements
- 5+ years of IT systems, infrastructure, and/or engineering experience.
- Experience integrating SaaS APIs and SDKs.
- Experience with Okta or similar identity management systems and authentication/provisioning methods such as SAML, OIDC, and SCIM.
- Scripting experience with Python, PowerShell, and/or Bash.
- Experience working within SCIFs.
- Familiarity with IL6, FedRAMP High, and CMMC 2.0 control families and translating them into concrete IT configurations.
Nice-to-haves
- IT security and compliance-focused mindset.
- Familiarity with infrastructure as code for identity and MDM configurations, including Terraform providers for Okta, Jamf, or Azure.
- Active Secret or TS/SCI clearance.
Compensation and Benefits
- Base salary range: $148,800–$186,000 USD.
- Eligible roles may include equity compensation.
- Benefits include health, dental, and vision coverage; retirement benefits; learning and development stipend; generous paid time off; and, where eligible, a commuter stipend.
Skills
Okta, Gcc High, Azure Government, Opal, Slack, Jamf, Jira, Zero Trust, SAML, OIDC, SCIM, Python, PowerShell, Bash, Terraform
Similar jobs
IT Support jobs
Vanta
Remote
Owns Workday design, configuration, administration, and continuous improvement across People, Payroll, Finance, IT, and Legal. Requires 5+ years of HRIS or People Systems experience, deep expertise in Payroll, Benefits, or Absence, and strong Workday security and business-process knowledge.
Juicebox
San Francisco, CA
Builds and manages Juicebox’s internal IT foundation, including identity and access management, provisioning, device management, compliance support, and employee troubleshooting. The role requires at least two years of IT or systems administration experience and hands-on Okta or similar platform expertise.
Figma
United States
Build the shared hosting, model-routing, observability, security, and cost infrastructure that enables employees to deploy governed internal AI applications. The role requires at least five years of software engineering experience, strong platform or backend expertise, and hands-on LLM operations experience.
Alembic
San Francisco, CA
Own end-to-end Corporate IT for a fast-growing Causal AI startup: manage employee lifecycle, identity/device stack, internal support, and automation initiatives.
Mercor
San Francisco, CAOwns IT operations, incident response, identity, endpoint, and infrastructure reliability for technical teams. The role requires 5–7 years of IT operations or technical support experience, strong root-cause analysis, and expertise with Apple, MDM, Google Workspace, and Okta environments.