Senior IT Systems Engineer

About the role

As our Senior IT Systems Engineer, you will own the corporate technology layer end‑to‑end—including identity and access management, SaaS tooling, device security, and the employee‑facing systems that keep a fast‑growing company running safely. This high‑ownership role sits at the intersection of IT engineering and corporate security: you will drive identity, access, device, and SaaS execution, contribute to SOC 2 and Zero Trust programs, and act as the first line of support for day‑to‑day team needs.

You will work closely with Security, HR, and Engineering to build the operational foundation that enables Brain Co. to scale without compromising security or employee experience.

• Own the Okta environment and consolidate SSO: migrations, provisioning, lifecycle automation, and federation across all departments.
• Implement and improve a three‑tier access entitlement model: auto‑grant for Tier 1, manager approval for Tier 2, manager plus security approval for Tier 3.
• Build and operationalize HRIS‑triggered provisioning and offboarding automation across the identity and SaaS stack.

• Support access review programs and contribute to SOC 2 compliance efforts—maintaining audit trails, approval chains, and provisioning logs.
• Contribute to Zero Trust and endpoint security initiatives: device trust, EDR integration, MDM, and least‑privilege access across corporate and BYOD devices.
• Drive SaaS hygiene: shadow‑IT discovery, configuration hardening, and data classification in partnership with the security team.

• Build integrations and automation that eliminate manual IT work—connecting identity, HRIS, and SaaS tooling into scalable provisioning workflows.
• Own the access request process end‑to‑end and maintain runbooks, documentation, and self‑service resources that keep the team unblocked.

• Partner on IT support for a 70+ person team—triaging and resolving hardware and software issues with pragmatism and good judgment.
• Own device lifecycle and on‑boarding end‑to‑end, ensuring a seamless Day 1 experience.

• Have 4+ years of experience in IT engineering, corporate security, or a combined IT/Sec Ops role with hands‑on ownership of identity and SaaS environments.
• Have deep, practical experience with Okta—SSO configuration, lifecycle management, MFA policies, and group‑based provisioning.
• Have built or managed HRIS/IT integrations and understand how provisioning pipelines work across HR, identity, and downstream SaaS tools.
• Have run access reviews and understand what SOC 2 access control evidence looks like—logs, approval chains, audit trails.
• Are comfortable in the command line and can write scripts (Terraform, Python, Bash, or similar) to automate repetitive IT work.
• Have supported end users at a fast‑moving company and know how to balance velocity with security without being a blocker.
• Think in terms of systems and workflows, not just tickets—you look for root causes and build durable fixes.
• Thrive in ambiguous, high‑agency environments and want to own a function, not just execute tasks.
• Bonus points for:
  • Hands‑on experience with Rippling or a similar HRIS platform.
  • Familiarity with MDM platforms (Jamf, Kandji, or Intune) for Mac and Windows fleets.
  • Experience with Google Workspace administration and security hardening.
  • Prior work at a startup where you wore both IT and security hats simultaneously.

• Drive corporate IT at a company deploying AI to governments, hospitals, and critical industries—real stakes.
• Build systems from scratch with a clear roadmap, real ownership, and direct impact on company scaling.
• Work alongside senior engineers from top organizations.
• Ship meaningful automation and IT platform infrastructure—beyond keeping the lights on.
• Earn competitive compensation and meaningful equity in a high‑growth company.

• Competitive salary plus equity
• Daily lunches
• Commuter benefits
• 401(k)
• Medical, Dental, and Vision
• Unlimited PTO