Чётко очерченная senior-роль с высокой ответственностью в быстрорастущей AI-компании и сильным пакетом льгот; обязательные три дня в офисе ограничивают гибкость по месту работы.
Кликните для подробной информации
Выше рынкаПонятная зона ответственностиАктуальная сфераСильный соцпакетОбязательное присутствие
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior IT Systems Engineer (Okta/Identity Automation): Designing and operating Baseten’s internal identity, authentication, and automation layer across Okta, HRIS, Google Workspace, MDM, and SaaS applications with an accent on access control, lifecycle management, and security compliance. Focus on building joiner-mover-leaver workflows, integrating SAML/OIDC/SCIM systems, enforcing least-privilege access, and eliminating manual IT processes through scripting and APIs.
Location: Hybrid, based in the San Francisco or New York office; three days per week in person.
Salary: $175,000–$225,000 per year, plus equity.
Company
Baseten provides inference infrastructure, applied AI research, and developer tooling that help AI companies bring machine-learning models into production.
What you will do
Own the architecture, configuration, and administration of Okta, including SSO, MFA, authentication policies, groups, and application integrations.
Lead the Okta migration and integrate applications through SAML, OIDC, and SCIM.
Design and build automated joiner, mover, and leaver workflows across HRIS, Okta, Google Workspace, MDM, and SaaS applications.
Develop automation with Okta Workflows, REST APIs, and scripting to reduce manual IT processes.
Implement role-based and least-privilege access controls, periodic access reviews, device trust, and compliance enforcement with the Security team.
Maintain documentation, runbooks, and architecture diagrams, support SOC 2 evidence requirements, and act as a technical escalation point for IT Support.
Requirements
6+ years of experience in IT systems engineering, identity engineering, or a related role.
Deep hands-on experience administering Okta, including Okta Identity Engine, Okta Workflows, authentication policies, and lifecycle management.
Strong working knowledge of SAML, OIDC, SCIM, and MFA implementations.
Proficiency in at least one of Python, Bash, or PowerShell, plus experience with REST APIs.
Experience administering Google Workspace and an MDM platform such as Kandji or Jamf.
Demonstrated experience designing and delivering automation that measurably reduced manual IT work.
Working knowledge of security and compliance frameworks such as SOC 2.
Clear written and verbal communication, including the ability to document systems for technical and non-technical audiences.
Nice to have
Okta Certified Professional, Administrator, or Consultant certification.
Experience managing identity or SaaS configuration as code, such as Terraform.
Experience with AWS IAM or cloud identity.
Experience at a high-growth startup.
Culture & Benefits
Competitive compensation with meaningful equity.
For U.S. employees, 100% coverage of medical, dental, and vision insurance for employees and dependents.
Flexible PTO and a company-wide Winter Break from Christmas Eve through New Year's Day.
Paid parental leave and a fertility and family-building stipend through Carrot.
For U.S. employees, a company-facilitated 401(k).
Exposure to ML startups and opportunities for learning and networking.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →