Senior IT Engineer

Range • McLean, VA

6d • $120,000 - $190,000 • Onsite

About The Position

At Range, we're building towards a world where anyone can live the financial life they imagine for themselves. We're building AI-powered wealth management. Investments, taxes, retirement, estate planning, all in one platform instead of scattered across different advisors and apps. We're backed by Google's Gradient Ventures, Cathay Innovation, Scale Venture Partners, and more. We're growing fast while still small enough that everyone's work is visible and impactful.

About the role
Range runs IT the way we run engineering: in code, with AI, and with security built in. Our identity, groups, and DNS live in GitHub and ship through CI/CD. We're looking for a Senior IT Engineer to own that system end to end.

We add new Rangers every month across three offices. Your job is to make their first day work, their last day smooth, and everything in between fast and secure. As a registered investment adviser, we hold ourselves to a high bar on access control and auditability. You'll build IT that clears that bar without slowing anyone down.

You'll work closely with our security and infrastructure team and partner with People, Finance, and every department lead.

This role is based at Range's headquarters in McLean, VA, in office Monday–Friday, and supports our New York and Seattle offices with occasional travel.

Requirements

• 5+ years in IT systems administration or corporate engineering
• Deep Google Workspace administration experience
• macOS fleet management with a modern MDM (Jamf, Kandji, Mosyle, or similar) and Apple Business Manager
• Hands-on SSO and identity experience: SAML, OIDC, SCIM, MFA, and RBAC
• Scripting in TypeScript, Python, or Bash, and comfort working in Git with pull requests.
• A track record of automating onboarding, offboarding, and access management
• Strong security fundamentals: least privilege, encryption, endpoint protection, and incident response
• Clear written communication, from runbooks to company-wide announcements

Nice To Haves

• Infrastructure-as-code in Pulumi or Terraform, applied to identity and SaaS.
• Building IT automations or AI agents (Okta Workflows, Tines, Zapier, or custom)
• SOC 2 or regulated financial services experience (RIA, broker-dealer, bank)
• Networking and VPN experience (Wi-Fi, firewalls, Tailscale/WireGuard, OpenVPN)
• AWS IAM Identity Center or Okta administration
• Supporting multiple offices at a startup

Responsibilities

• Employee lifecycle. Onboarding, role changes, and offboarding (planned and same-day) across Google Workspace, SSO-connected apps, VPN, password manager, Slack, and GitHub. Where there are checklists and hand-offs, you will turn them into automated, auditable workflows.
• Identity and access. Run Google Workspace as our identity provider, with SAML/OIDC SSO and SCIM provisioning. Design role- and department-based access, enforce least privilege and time-bound admin rights, and run regular access reviews.
• Apple fleet. Own our macOS fleet through MDM and Apple Business Manager. Manage procurement, inventory, and recovery of hardware across all three offices.
• SaaS management. Run app intake and security review, manage licenses and seats, track spend, and cut sprawl. Know which tools we pay for, who uses them, and what they can access.
• IT as code. Manage Workspace configuration, groups, DNS, and through infrastructure-as-code (Pulumi) in GitHub, with pull-request review and CI.
• Support that scales. Own the IT support channel and escalations. Write self-service docs, and build AI agents and automations that resolve common requests (password resets, access requests, app installs) without a human in the loop.
• Security and compliance. Partner with security on SOC 2 controls, endpoint incident response, and the evidence regulators and auditors ask for.
• Office technology. Keep Wi-Fi, networking, conference rooms, and peripherals working in McLean, New York, and Seattle.

Benefits

• Health & Wellness: 100% employer-covered medical insurance for employees (75% for dependents), plus dental and vision coverage
• 401(k): Retirement savings program to support your future
• Paid Time Off: time to reset and recharge + most federal holidays
• Parental Leave: Comprehensive leave policy for growing families
• Meals: Select meals covered throughout the week
• Fitness: Monthly movement stipend
• Equity & Career Growth: Early exercise eligibility and a strong focus on professional development
• Annual Compensation Reviews: Salary and equity refreshes based on performance
• Boomerang Program: After two years at Range, you can take time away to start your own company. We'll hold your spot for 6 months - and pause your equity vesting, which resumes if you return

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed