# Staff Systems Administrator

**Company:** [Earnin](https://hotfix.jobs/companies/earnin)
**Location:** Mountain View, CA
**Role:** IT Support
**Salary:** $222k – $271k/yr
**Experience:** 7+ years
**Skills:** Okta, Workday, Terraform, Python, SAML, Oauth2, OIDC, SCIM, Aws Iam, Databricks
**Posted:** 2026-05-27

> Own enterprise identity architecture end-to-end and lead AI-enabled automation replacing manual IT workflows. Architect IAM programs with Okta/Workday, Terraform-based infrastructure, and agentic AI workflows at a fintech company.

## Job Description

## Responsibilities
- Design and evolve EarnIn's enterprise identity model with Workday as the authoritative HRIS source and Okta as the central control plane
- Drive zero-touch joiner/mover/leaver provisioning and own the program's First-Pass Automation Yield (FPAY) metric
- Architect privileged access management at scale: just-in-time elevation, time-bound exceptions, managed-device enforcement, and policy-driven entitlement reviews
- Build and maintain the IAM Roles Catalog with expiring exceptions and clear ownership for every entitlement
- Lead federation strategy across AWS, Databricks, and the SaaS estate
- Standardize entitlements via Identity-as-Code (Terraform) so every change is reviewable, diffable, and reversible
- Design a Continuous Access Evaluation pipeline for audit readiness
- Lead the design and rollout of agentic AI workflows that replace ticket-driven, human-in-the-loop IT processes
- Build reusable AI patterns, guardrails, and components that other teams can adopt
- Set architectural direction for the IT team including tool selection, identity protocols, automation patterns, observability, and build-vs-buy decisions
- Mentor IT engineers through code review, ADRs, runbooks, and design docs

## Requirements
- Bachelor's degree (or higher) in Computer Science, Information Systems, or a related technical field
- 7+ years in IT Engineering or Identity & Access roles, including experience setting technical direction for a program
- Demonstrated experience architecting and implementing an enterprise IAM program end-to-end at meaningful scale
- Significant hands-on expertise in Okta (Workflows, Identity Governance, sign-on policies, group rules) and at least one HRIS-driven lifecycle integration (Workday preferred)
- Fluency in SAML, OAuth2, OIDC, SCIM, federation, JIT provisioning, and PAM patterns
- Experience codifying identity infrastructure (Terraform, GitOps, or equivalent) and shipping changes through code review
- Proficient in Python
- Track record of systematically replacing manual processes with automation
- Demonstrated experience designing, shipping, or championing AI-enabled workflows in a production environment
- Uses AI-assisted development tools (e.g., Copilot, Cursor, Claude Code) to accelerate own work
- Clear written and verbal communication skills

## Nice-to-Haves
- Experience in a fintech or regulated environment (SOC 2, PCI) with audit-grade evidence pipelines
- Hands-on work with Databricks federation or AWS IAM Identity Center
- Certifications such as Okta Certified Consultant/Administrator or CISSP

## Similar roles

- [Senior Staff IT Controls, Enterprise Applications](https://hotfix.jobs/jobs/a9450204-c76d-43df-b449-432e5bb2b6ad) - Gusto - San Francisco, CA - $205k – $225k/yr
- [Senior Staff Enterprise Technology Architect, People Technology](https://hotfix.jobs/jobs/21f808f3-9bf7-4c27-9a77-6d36964fac50) - Crusoe - San Francisco, CA - $190k – $220k/yr
- [Business Systems Engineer](https://hotfix.jobs/jobs/bf511193-b6bc-4cd8-8ec8-bb283f79b5de) - Applied Intuition - Sunnyvale, CA - $150k – $185k/yr
- [Member of Technical Staff, IT](https://hotfix.jobs/jobs/678f4f8f-6292-4ddc-b7aa-1d7839bfe309) - Basis - New York, NY - $150k – $250k/yr
- [Sr Staff Information Systems Engineer](https://hotfix.jobs/jobs/1ab8a00a-49ae-42cc-9d0b-33073dfb6cf1) - Cribl - Remote - $136k – $213k/yr

**Apply:** https://hotfix.jobs/jobs/f09d5b89-2dc0-4da0-a36c-afae0399c0e8
**Canonical:** https://hotfix.jobs/jobs/f09d5b89-2dc0-4da0-a36c-afae0399c0e8