Security & IT Operations Engineer

About Prefect

Prefect builds automation for an unpredictable world. The last decade of automation was about protecting workflows from unpredictability; in the agentic era, unpredictability is the point. Our mission is to give people confidence in automated work, whether that work is a mission-critical data pipeline or a fleet of AI agents.

In August 2026, Prefect and Dagster, competitors for eight years, joined forces to build the next generation of automation infrastructure. Today, our ecosystem includes Dagster, the data platform;
Prefect, the agent platform; and FastMCP, the leading open-source developer framework for the MCP ecosystem. Together, our open-source and commercial products are trusted by Fortune 500 companies, data innovators, and high-growth technology companies around the world.

We think of our culture as the operating system of the company. We’ve carefully created a supportive, high-performance environment that empowers our team to do the best work of their careers, have meaningful impact, and continue growing personally and professionally. We’re a remote-first team that values high standards, ownership, and thoughtful collaboration.

In August, Dagster and Prefect became one company. Behind the scenes, that left us with two of nearly everything: two SOC 2 programs, two ways of managing laptops, overlapping tools and accounts, and a long list of tools that each need one clear owner. We're hiring a Security & IT Operations Engineer to turn all of it into one setup that runs well and gets easier to run every quarter.

You’ll own the day-to-day of our security compliance program and our corporate IT. You’ll report to our Security & Systems Lead as the first hire on this new team.

Our customers are enterprise data, infrastructure, ML and AI teams, and our products run code inside their data infrastructure. AI has made attacks cheap and fast, so customers look hard at how we protect them, and a well-run security and compliance program is a big part of our answer. You won’t be pushing security uphill here. More engineers volunteered for our new Security Guild than its first sprint had room for.

Building on both companies’ existing security work, the guild is implementing shared product security tools and consistent vulnerability management and incident response processes across Prefect and Dagster. That commitment is helping us stay ahead of AI-accelerated attacks.

You’ll enjoy this role if you like a mix of hands-on work and longer-term improvements, and want a meaningful say in how our IT and compliance programs run.

• Run day-to-day compliance. Keep SOC 2 controls, evidence collection, access reviews, policy acknowledgments and training on track. Work directly with auditors and control owners, and follow findings through to resolution.

• Help consolidate our compliance programs. With our team lead and consultant, choose a GRC platform and set up both programs. Help adapt control descriptions across environments and design activities that minimize manual work.

• Own corporate IT. Run Google Workspace and our SaaS apps, handle onboarding and offboarding with People Operations, and manage our Mac fleet in Rippling. Help employees with laptop and access issues, and improve the setup as you learn where people get stuck.

• Improve access management. Work with our identity partner on how access is requested, approved, granted and removed. Own the daily processes and keep them documented.

• Protect corporate systems. Manage macOS and application updates, investigate endpoint alerts, and track vulnerabilities through remediation. Verify fixes and participate in phishing and other corporate incident response with our team lead.

• Automate repetitive work. Use scripts, APIs,…