Corporate IT Engineer (Web3)

TL;DR

Corporate IT Engineer (Web3): Building and automating corporate IT infrastructure for a layer-1 blockchain focused on payments with an accent on identity lifecycle, device management, and endpoint security. Focus on implementing infrastructure-as-code for IT tooling, ensuring SOC 2 readiness, and securing high-value crypto assets.

Location: Hybrid (NYC Office)

Company

A layer-1 blockchain purpose-built for stablecoins and real-world payments, born from Stripe and Paradigm.

What you will do

• Architect and automate the full identity lifecycle from HRIS to Okta and SaaS apps to eliminate manual provisioning gaps.
• Manage and maintain SSO/SCIM integrations across the entire SaaS stack.
• Own Jamf Pro end-to-end, including PreStage enrollment, configuration profiles, and software updates.
• Deploy and tune endpoint security using SentinelOne and expand SIEM coverage using a detection-as-code approach.
• Build infrastructure-as-code management for all IT tooling using Terraform and GitHub Actions.
• Drive SOC 2 readiness by establishing unified audit trails across identity, device, and security systems.

Requirements

• 4+ years of experience in IT engineering roles.
• Hands-on Okta administration (SSO, SCIM, SAML/OIDC) and experience with HRIS-as-source-of-truth.
• Production Jamf Pro experience with a macOS-first approach.
• Experience deploying and operating an EDR platform like SentinelOne.
• Strong scripting skills in Python, Bash, or Go, with comfort using REST APIs, webhooks, and JSON.
• Proficiency with Git-based config management, CI/CD pipelines, and Terraform.

Nice to have

• Exposure to blockchain security, including multisig/hardware-wallet workflows (e.g., Fireblocks).
• Experience with detection-as-code (e.g., Panther Python models, Sigma).
• Deep knowledge of Apple platform MDM protocol internals and macOS security frameworks.
• Experience mapping controls to SOC 2, ISO 27001, NIST CSF, or CIS.
• Experience building Slack-driven workflows or internal self-service tooling.