IT Systems Engineer
Baseten · Remote
About this role
## About Baseten Baseten powers mission-critical inference for the world’s most dynamic AI companies (e.g., Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer). By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we help frontier AI companies bring cutting-edge models into production. We’re growing quickly and recently raised our **$1.5B Series F**. Join us and help build the platform engineers turn to ship AI products. --- ## The Role Baseten is hiring a **Senior IT Systems Engineer** to own the **identity, authentication, and automation** layer of Baseten’s internal IT environment. You’ll design and maintain how employees access every system at the company—from their first day to their last—leading **Okta** and building automated workflows that replace manual IT processes. You’ll partner closely with **Security** to enforce access controls as we scale, and serve as a technical escalation point for complex identity and systems issues. **Location:** Hybrid — **San Francisco or New York** (standard policy: **3 days/week in person**) --- ## Responsibilities - Own the architecture, configuration, and ongoing administration of **Okta** (SSO, MFA, authentication policies, group structure, and application integrations) - Lead ongoing **Okta migration** and integration of new/existing applications via **SAML, OIDC, and SCIM** - Design and build automated **joiner, mover, and leaver** workflows across **HRIS, Okta, Google Workspace, MDM, and SaaS** - Develop automation using **Okta Workflows, REST APIs, and scripting** to eliminate manual IT processes - Implement and maintain **role-based access control**, **least-privilege** access models, and **periodic access reviews** with Security - Integrate identity with **endpoint management** to support device trust and compliance enforcement - Support compliance requirements such as **SOC 2** (access controls, audit evidence, documentation) - Write and maintain technical documentation, runbooks, and architecture diagrams for identity and automation systems - Serve as an escalation point and technical resource for the **IT Support** team --- ## Requirements - **6+ years** of experience in IT systems engineering, identity engineering, or related work - Deep hands-on experience administering **Okta** (including **Okta Identity Engine**, **Okta Workflows**, authentication policies, and lifecycle management) - Strong working knowledge of **SAML, OIDC, SCIM, and MFA** implementations - Proficiency in at least one scripting language (**Python, Bash, or PowerShell**) and experience working with **REST APIs** - Experience administering **Google Workspace** and an **MDM** platform (e.g., **Kandji** or **Jamf**) - Track record of designing and delivering automation that measurably reduced manual IT work - Working knowledge of security/compliance frameworks such as **SOC 2** - Clear written and verbal communication, including the ability to document for both technical and non-technical audiences --- ## Nice to Have - **Okta certifications** (Certified Professional, Administrator, or Consultant) - Experience managing identity/SaaS configuration as code (e.g., **Terraform**) - Experience with **AWS IAM** or cloud identity - Experience at a high-growth startup --- ## Benefits - Competitive compensation, including meaningful equity - **(U.S. only)** 100% coverage of medical, dental, and vision insurance for employees and dependents - Flexible PTO, includin
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.