IT Systems Engineer

Aalyria

3h•$115,000 - $145,000•Hybrid

About The Position

We’re looking for a hands-on IT Systems Engineer to join our team and own the day-to-day operation and continuous improvement of our corporate IT stack. This is a generalist IC role spanning endpoint management, identity and access management, cloud infrastructure, automation and compliance. You’ll work across a modern, security-first environment and have a direct impact on how the company operates and scales.

Requirements

3+ years of experience in a corporate IT, IT engineering, or sysadmin role
Hands-on experience with at least one major MDM platform (Jamf Pro, Intune, or equivalent)
Proficiency with a cloud IdP such as Okta, Azure AD, or JumpCloud
Familiarity with at least one public cloud platform (GCP, AWS, or Azure)
Comfort writing scripts or lightweight automation in Python, Bash, or PowerShell
Strong documentation habits and a process-oriented mindset

Nice To Haves

Experience supporting compliance frameworks such as SOC 2, FedRAMP, or CMMC
Terraform or other IaC experience for managing cloud resources
Experience with scripting languages such as Python, Shell, and Golang
Exposure to HRIS-driven provisioning integrations (Rippling, Workday, BambooHR, etc.)
Background in a security-conscious or regulated industry (defense, gov-tech, fintech)
Relevant certifications: Google Professional Cloud Engineer, Jamf 200/300, Okta Certified Administrator, CompTIA Security+
Experience with PAM tooling (Teleport, CyberArk, or similar)
Working knowledge of zero trust networking (Tailscale, Cloudflare Access, etc.)
Contributions to open-source tooling or personal homelab/infrastructure projects

Responsibilities

Administer macOS and Windows endpoints using MDM platforms (Jamf Pro, Intune)
Manage device enrollment, configuration profiles, OS patching, and compliance policies
Own the device lifecycle from provisioning through offboarding and retrieval
Administer Okta (or equivalent IdP) including SSO, MFA, lifecycle automation, and group policies
Manage provisioning and deprovisioning workflows integrated with HRIS and downstream SaaS apps
Enforce least-privilege access controls across the environment
Support GCP (or AWS/Azure) infrastructure for corporate IT workloads
Manage VPN, network segmentation, and secure remote access tooling
Write and maintain infrastructure-as-code using Terraform or equivalent
Support SOC 2, FedRAMP, or CMMC compliance initiatives in partnership with Security
Maintain evidence, controls, and documentation in compliance platforms (e.g. Vanta)
Respond to audit requests and implement remediation for identified gaps
Build and maintain automation for IT workflows using Python, Cloud Functions, or workflow tools
Utilize agentic AI for common tasks
Write clear SOPs and runbooks to enable consistent, repeatable operations
Collaborate with Engineering, Security, and HR on cross-functional IT initiatives