IT Systems Engineer
Senior individual contributor owning Baseten's internal IT identity layer: administering Okta (SSO, MFA, lifecycle), leading an Okta migration, and building automated joiner/mover/leaver workflows using Okta Workflows, REST APIs, and scripting, while partnering with Security on access controls and SOC 2. Hybrid role based in San Francisco or New York.
- Compensation
- $175K–$225K / yr
- Location
- Remote
- Work setup
- Remote
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Software engineering
- Posted
Skills
Must have
- 6+ years of experience in IT systems engineering, identity engineering, or a related role
- Deep hands-on experience administering Okta, including Okta Identity Engine, Okta Workflows, authentication policies, and lifecycle management
- Strong working knowledge of SAML, OIDC, SCIM, and MFA implementations
- Proficiency in at least one scripting language (Python, Bash, or PowerShell) and experience working with REST APIs
- Experience administering Google Workspace and an MDM platform (e.g. Kandji or Jamf)
- Track record of designing and delivering automation that measurably reduced manual IT work
- Working knowledge of security and compliance frameworks such as SOC 2
- Clear written and verbal communication, including documenting systems for technical and non-technical audiences
Nice to have
- Okta certifications (Certified Professional, Administrator, or Consultant)
- Experience managing identity or SaaS configuration as code (e.g. Terraform)
- Experience with AWS IAM or cloud identity
- Experience at a high-growth startup
Full description
ABOUT BASETEN
Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F, led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products.
THE ROLE
We’re looking for an IT Engineer to design the systems behind how people at Baseten get access, stay secure, and move through their time here. This role builds the controls and automation that our IT Operations team runs every day across identity, client platforms, SaaS, and cloud access.
The goal is a corporate environment that’s secure by default and easy to use: access that’s right from day one, removed when it should be, and provable at any time.
RESPONSIBILITIES
- Strengthen our identity platform with strong authentication, clean access models, and least privilege as the default.
- Automate the workforce lifecycle so that joining, changing roles, and leaving Baseten are fast, consistent, and need little manual work.
- Build reliable pipelines for OS updates, patching, and software deployment that keep the fleet current without disrupting people’s work.
- Connect device health to access decisions, so a compliant device is what earns access to sensitive systems.
- Recommend identity and security standards for our SaaS and AI tools, and make the secure configuration the easy path for teams adopting new ones.
- Bring governance to non-human identities (service accounts, API keys, AI agents) and replace long-lived credentials with better options wherever possible.
- Manage configuration as code across identity and endpoints to reduce drift, so audit readiness comes from the systems themselves instead of a separate workstream.
- Give IT Operations well-designed tools and guardrails, so they can handle more requests on their own, safely.
REQUIREMENTS
- 5+ years in IT engineering or corporate security engineering, ideally at a cloud-native company.
- Strong grounding in identity: SSO, MFA, provisioning, and the protocols behind them.
- Hands-on experience engineering macOS fleets at scale: MDM, configuration profiles, app packaging and deployment, and endpoint visibility and EDR tooling.
- Experience automating real workflows in code (Python, Bash, or similar), and comfort with infrastructure-as-code.