IT Systems Engineer — Identity & Automation

Stuut • New York, NY

8d • $120,000 - $150,000

About The Position

Stuut is seeking a hands-on IT Systems Engineer focused on identity and automation to support the company’s growing employee technology needs. The role owns the employee lifecycle, ensuring employees receive working equipment and appropriate access when they start, get timely support, and have secure, predictable access changes when their roles change or they leave. It combines systems administration, integration troubleshooting, automation, and employee support as an individual contributor.

The engineer will connect people systems, identity services, business applications, and device management into reliable workflows. The role partners closely with People Operations, Security, Engineering, team managers, and vendors. It does not own production infrastructure or the entire compliance program, but it does operate day-to-day IT controls that support SOC 2 and the broader security and compliance program, maintaining current evidence and working with Security on requirements and priorities.

Requirements

• Typically 3–6 years of relevant experience in corporate IT, IT systems engineering, or SaaS administration, or equivalent hands-on experience; evidence of taking ownership of systems and improving how they operate.
• Hands-on SCIM and identity lifecycle experience, including implementing or repairing provisioning and deprovisioning integrations.
• Understanding of the distinctions between signing in, creating an account, and granting access.
• Experience with SSO and modern identity standards, including SAML and OAuth/OIDC, as well as group-based access, MFA, and authentication troubleshooting.
• Experience connecting HR systems, identity providers, collaboration suites, and business applications.
• Ability to read API documentation, investigate logs, and write or adapt scripts to solve operational problems.
• Practical endpoint management and laptop deployment experience, especially with macOS, alongside sound security and asset-management practices.
• Experience supporting SOC 2 or a comparable security compliance program, including operating IT controls, collecting audit evidence, completing access reviews, and resolving findings.
• Ability to turn policy requirements into repeatable, verifiable processes.
• Service-minded approach: respond with urgency, explain things without jargon, handle sensitive information carefully, and close the loop without repeated follow-up.
• Comfort working in a rapidly growing company, balancing immediate employee support with preventing future issues.

Nice To Haves

• Experience improving onboarding during rapid hiring or supporting employees across multiple offices.
• Experience with compliance automation platforms, automated evidence collection, and SaaS license management.
• Experience using AI-assisted tools and secure integrations to improve IT operations, with good judgment about permissions and employee data.
• Experience with Rippling and Google Workspace, or comparable systems.

Responsibilities

• Own onboarding, role changes, and offboarding end to end, coordinating equipment, accounts, group memberships, application access, and employee communication, and verifying that new hires can work.
• Build and maintain identity and application integrations, including SCIM provisioning, single sign-on, attribute mappings, and role-based access across HR, identity, and SaaS platforms.
• Identify and resolve provisioning failures, account mismatches, timing dependencies, expired integration credentials, and licensing blockers; create exception handling for last-minute hires and applications without automated provisioning.
• Automate repetitive IT work with native integrations, workflow tools, APIs, webhooks, and practical scripting, documenting and maintaining observable workflows.
• Provide responsive employee support for access, laptops, collaboration tools, and everyday office technology; follow issues through to resolution and address recurring causes.
• Manage the device lifecycle, including purchasing, enrollment, configuration, security updates, inventory, replacements, and returns, especially in a Mac-centric environment.
• Apply least-privilege access, support access reviews, and verify timely deprovisioning, session revocation, data ownership transfers, and equipment recovery with appropriate owners.
• Operate IT security and compliance controls, including device encryption, endpoint protection, patch compliance, MFA coverage, and appropriate administrative access; track gaps and exceptions through remediation with Security.
• Support SOC 2 audit readiness by maintaining accurate asset and access records, documenting onboarding and offboarding completion, conducting periodic access reviews, and providing evidence that controls operate consistently.
• Investigate failed compliance checks and resolve underlying issues rather than only clearing dashboard alerts.
• Help triage suspected phishing, lost devices, and compromised accounts; follow response procedures and escalate promptly.
• Partner with People Operations and Security on security training and policy acknowledgments.
• Maintain practical runbooks, self-service guidance, application ownership records, and support expectations; coordinate reliable handoffs with People Operations and work with vendors when integrations break.

Benefits

• Top-of-market salary and equity package.
• Medical, dental, and vision insurance coverage for U.S.-based full-time employees.
• 401(k) with match.
• Equity.
• Flexible PTO.
• Parental leave.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed