IT Systems Engineer
About The Position
Baseten is hiring a Senior IT Systems Engineer to own the identity, authentication, and automation layer of its internal IT environment. This senior individual contributor role focuses on engineering rather than frontline support. The engineer will design and maintain employee access to company systems throughout the employee lifecycle, lead the Okta environment, automate manual IT processes, and partner with Security to enforce access controls as the company scales. The role is also a technical escalation point for the IT Support team on complex identity and systems issues. This is a hybrid role based in the San Francisco or New York office, with three days per week in person.
Requirements
- 6+ years of experience in IT systems engineering, identity engineering, or a related role.
- Deep hands-on experience administering Okta, including Okta Identity Engine, Okta Workflows, authentication policies, and lifecycle management.
- Strong working knowledge of SAML, OIDC, SCIM, and MFA implementations.
- Proficiency in at least one scripting language (Python, Bash, or PowerShell) and experience working with REST APIs.
- Experience administering Google Workspace and an MDM platform such as Kandji or Jamf.
- Track record of designing and delivering automation that measurably reduced manual IT work.
- Working knowledge of security and compliance frameworks such as SOC 2.
- Clear written and verbal communication, including the ability to document systems for technical and non-technical audiences.
Nice To Haves
- Okta certifications (Certified Professional, Administrator, or Consultant).
- Experience managing identity or SaaS configuration as code, such as Terraform.
- Experience with AWS IAM or cloud identity.
- Experience at a high-growth startup.
Responsibilities
- Own the architecture, configuration, and ongoing administration of Okta, including SSO, MFA, authentication policies, group structure, and application integrations.
- Lead the ongoing Okta migration and integrate new and existing applications via SAML, OIDC, and SCIM.
- Design and build automated joiner, mover, and leaver workflows across HRIS, Okta, Google Workspace, MDM, and SaaS applications.
- Develop automation using Okta Workflows, REST APIs, and scripting to eliminate manual IT processes.
- Implement and maintain role-based access control, least-privilege access models, and periodic access reviews in partnership with the Security team.
- Integrate identity with endpoint management to support device trust and compliance enforcement.
- Support compliance requirements such as SOC 2 through access controls, audit evidence, and documentation.
- Write and maintain technical documentation, runbooks, and architecture diagrams for identity and automation systems.
- Serve as an escalation point and technical resource for the IT Support team.
Benefits
- Competitive compensation, including meaningful equity.
- For U.S. employees: 100% coverage of medical, dental, and vision insurance for employees and dependents.
- Flexible PTO policy, including company-wide Winter Break; offices are closed from Christmas Eve to New Year's Day.
- Paid parental leave.
- Fertility and family-building stipend through Carrot.
- For U.S. employees: company-facilitated 401(k).
- Exposure to a variety of ML startups, offering learning and networking opportunities.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
