# Sr. IT Systems Engineer

**Company:** [Betterment](https://hotfix.jobs/companies/betterment)
**Location:** New York, NY
**Role:** DevOps / SRE
**Salary:** $121k – $143k/yr
**Experience:** 6+ years
**Skills:** Okta, Google Workspace, Jamf, macOS, Python, Bash, SAML, OIDC, SCIM, RBAC, Terraform, Workato, Boomi, Slack, Zoom
**Posted:** 2026-03-06

> Designs, scales, and operates IT infrastructure including identity management, SaaS platforms, and macOS endpoints. Requires 6+ years experience, Okta expertise, scripting skills, and bachelor's degree or equivalent.

## Job Description

## What You’ll Do

### IT Systems & Infrastructure Engineering
- Design, implement, and maintain identity and access management architecture across the enterprise.
- Own end-to-end employee lifecycle automation, integrating HRIS, identity, and downstream SaaS systems.
- Administer and optimize core SaaS platforms including Google Workspace, Okta, Slack, Zoom, Lumos, Jamf and other business-critical tools.
- Experience administering business system/enterprise apps such as HRIS (ADP, etc.), Finance (Netsuite, Salesforce, ZipHq), Access review/ Spend control (Lumos).
- Establish and maintain standards for system configuration, access models, and operational ownership.

### Automation & Platform Enablement
- Automate repetitive IT workflows using scripting and infrastructure-as-code approaches.
- Build scalable, self-service processes that reduce support burden and improve employee experience.
- Standardize and codify IT infrastructure and workflows wherever possible to ensure consistency and reliability.
- Experience with low-code automation platforms: Boomi, Workato, Okta Workflows, Zapier.

### Device & Endpoint Management
- Manage and scale macOS endpoint fleets, including configuration, patching, security controls, and policy enforcement.
- Own MDM tooling, OS upgrade strategies, and endpoint security posture in partnership with Security.
- Support Windows endpoints where required, particularly for Finance and other specialized functions.

### Security & Compliance Partnership
- Implement and enforce IT security best practices across systems and endpoints.
- Partner with Security Engineering and Risk to strengthen MFA, SSO, RBAC, and device trust controls.
- Proactively identify, troubleshoot, and remediate IT-related security gaps and operational risks.
- Support audit and compliance efforts by ensuring systems are well-documented, controlled, and auditable.
- Security-first/minded approach.

### Employee Experience & Support
- Act as a senior escalation point for IT Support, ensuring predictable availability and high-quality service.
- Document IT standards, policies, and troubleshooting guides to promote clarity and consistency.
- Improve onboarding, offboarding, and day-to-day employee experiences through reliable systems and automation.

## What You Bring
- Bachelor’s degree or equivalent practical experience in Information Systems, Technology, or a related field.
- 6+ years of experience in IT systems engineering, SaaS administration, or enterprise technology operations.
- Deep expertise in macOS administration and endpoint management at scale.
- Strong experience with Okta and modern identity standards including SAML, OIDC, SCIM, and RBAC.
- Proficiency in scripting and automation using tools such as Python, Bash, or similar.
- Demonstrated ability to design, document, and operate scalable IT Systems in a cloud-first environment.
- Strong debugging, problem-solving, and systems-thinking skills.
- Customer-service mindset with a reliable, detail-oriented, and collaborative approach.

## Nice to Have
- Experience with infrastructure-as-code tools such as Terraform.
- Familiarity with IT security controls in regulated environments (SOC 2, ISO 27001, SOX).
- Experience supporting high-growth organizations through scale or operational maturity transitions.
- Strong documentation and process-design discipline.

## Similar roles

- [Senior Network Engineer](https://hotfix.jobs/jobs/b80a174e-4942-4fa2-bd35-ad0184ece888) - CommandLink - Remote - $120k – $160k/yr
- [Financial Systems Administrator](https://hotfix.jobs/jobs/10d9e43b-7079-4dca-b60a-69b6d6d3ae73) - Metropolis - New York, NY - $120k – $130k/yr
- [Senior Engineer, Software Engineering Tools (R4913)](https://hotfix.jobs/jobs/06ff6c1e-853f-4bd7-a741-7865d8b9c5c0) - Shield AI - Dallas, TX - $120k – $190k/yr
- [Senior Infrastructure Engineer](https://hotfix.jobs/jobs/c8f2b95b-8d32-4d8e-8ba2-0a29dfc5158a) - Bland AI - San Francisco, CA - $120k – $200k/yr
- [Senior Infrastructure Engineer](https://hotfix.jobs/jobs/d3847fd2-6f31-4a9c-bd48-e35523ad26a1) - LiveKit - Remote - $120k – $250k/yr

**Apply:** https://hotfix.jobs/jobs/a45169bf-acd8-441c-abaa-4ca073a891ad
**Canonical:** https://hotfix.jobs/jobs/a45169bf-acd8-441c-abaa-4ca073a891ad