Staff IT Systems Engineer (Cybersecurity)

Location: Palo Alto, California, United States. US-based employment; legal authorization to work in the United States is required.

Base salary: $203,000–$224,000 USD per year, plus equity and potential incentive compensation.

Company

hirify.global is a SaaS cybersecurity company providing a security platform for protecting enterprise applications, identities, integrations, and sensitive data.

What you will do

• Own Okta as the primary identity provider, including Universal Directory, SSO, MFA, conditional access, Device Access, and identity governance.
• Design HR-driven joiner, mover, and leaver workflows with same-hour offboarding and maintain the sanctioned SSO application catalog.
• Manage Okta, Jamf, GitHub, Google Workspace, and Google Cloud configuration as version-controlled code using Terraform, OpenTofu, and GitHub-based workflows.
• Develop AI-assisted IT support and self-service automation for access, provisioning, licensing, observability, and drift investigation.
• Manage and harden the device fleet through MDM, device trust, patching, application allowlisting, zero-trust access, and secrets-management controls.
• Set IT technical standards, document scalable practices, mentor teammates, and partner with Security, DevOps, HR, Finance, and go-to-market functions.

Requirements

• 8+ years of experience building and operating IT systems, identity platforms, or production infrastructure with clear ownership.
• Deep hands-on Okta experience across SSO, MFA, Universal Directory, Lifecycle Management, and conditional access; end-to-end tenant ownership is expected.
• Production Jamf Pro expertise managing Mac fleets, including profiles, policies, smart groups, and patch workflows; equivalent fleet-scale Jamf or Intune MDM experience is required.
• Production infrastructure-as-code experience with Terraform or OpenTofu delivered through pull-request-based GitOps workflows such as GitHub Actions.
• Daily use of AI coding tools, scripting ability in Python, PowerShell, or a comparable language, and experience automating SaaS and platform APIs.
• Must have legal authorization to work in the United States.

Nice to have

• Experience with identity-governance orchestration, HRIS-driven provisioning, Google Workspace administration, and GAM7.
• Knowledge of Vault, Doppler, Secret Manager, Workato, agent platforms, or MCP-style tooling.
• Experience with zero-trust network access, enterprise browser deployments, SOC 2, ISO 27001/27701, or Drata.
• Google Cloud Platform experience and a background in B2B SaaS or cybersecurity.

Culture & Benefits

• Security-first IT organization operating in an AI-forward company.
• Competitive compensation with equity and 401(k).
• Healthcare coverage including dental and vision.
• Flexible paid time off, paid holidays, and 12 weeks of new parent or family leave.
• Personal and professional development resources.