Senior IT Systems Engineer

M1 Finance has created a personal wealth-building platform made for the modern era, uniting personal perspective and automated ease. We seamlessly combine free investing and low cost borrowing all in one intuitive, automated Finance Super App, and we’re driven by a mission to empower personal financial well-being. We believe that financial well-being is fundamental to overall well-being, and we strive to deliver products that are simpler, smarter, and stronger than those created by our boring, entrenched, and slow-moving competitors in the personal finance industry.

Our clients have already trusted us with over $12 billion of assets, we’re currently helping hundreds of thousands of people grow and manage their wealth with our industry-leading automation and tools, and we’re adding thousands of new clients every day.

We’re looking for passionate people who want to improve and build on what we’ve created and take responsibility to help others build something meaningful and sustainable for their futures.

We mean it when we say, “M1 is yours to build.”

If this sounds interesting to you, read on!

M1 is hiring a senior IT systems engineer to operate, secure, and continuously improve the IT environment our employees depend on every day, including but not limited to identity and access systems, endpoint management, office infrastructure in Chicago, and the org's SaaS productivity stack. M1 is a fintech firm operating in a heavily regulated industry as a self-clearing broker-dealer, so this environment operates under continuous regulatory security and audit obligations.

You'll join M1's IT and Security team, own the engineering and security behind this environment, and partner across Compliance, Engineering, and the wider business.

We're looking for people energized by solving real problems and having impact, not just by working with interesting technology. You bring real engineering discipline to your work: version control, testing, documentation, and following through until the work is fully done. You automate the toil worth automating rather than than brute-force the same problem twice. You reach for the right tool for the job, and are comfortable dabbling across the stack: in scripts, APIs, and config-as-code.

You embrace and use AI judiciously to learn and to move quickly, and exercise good judgment on outputs.

• Lead identity and access engineering in Okta, our primary IdP: designing SSO, MFA, provisioning and deprovisioning, groups, and access policies around least privilege and separation of duties.
• Continuously reduce toil across the environment: automating repetitive provisioning, configuration, and reporting, integrating tools so the same work is never done twice by hand, and maintaining the documentation and runbooks that spread knowledge across the team and cut down common support requests.
• Own the security of the IT environment, including but not limited to vulnerability and patch management, endpoint hardening, and a hands‑on role in detecting and responding to issues.
• Own the engineering behind workforce enablement: configure and run the SaaS platforms employees depend on and the vendor relationships behind them, manage endpoints (macOS and Windows), and automate onboarding and offboarding so the employee experience scales without adding headcount.
• Keep the control environment healthy and provable: run access reviews, maintain configuration standards, asset inventory, and logging, produce the evidence internal and external auditors rely on, and be ready to show how a control actually works.
• Serve as escalation path for employee IT support and the Chicago office: fix root causes instead of reworking tickets, and keep the office network, meeting room AV, and physical security…