IT Operations Engineer

Description

The company builds software that helps teams create and use computer vision models. More than 1M developers use its open source and hosted tools, including developers at half of the Fortune 100.

Investors include Y Combinator and Google Ventures, and the company has raised over $63 million.

Large enterprise customers such as Rivian, Pella, Chobani and BNSF depend on smooth, secure IT, which the company treats as a shared priority.

The team has about 100 people. You would work directly with the Engineering Lead, the Security & Automation Engineer, and product, infrastructure and security engineers.

The interview process takes about 4 hours. It starts with a recruiting call and a conversation with the hiring manager, who is on the IT team. The team interview phase includes a 60m technical interview on identity and SSO, macOS fleet management, office and SaaS operations, and automation, plus a 75m operations exercise with a peer using sample records. The final stage is a 45m meeting with the Security lead and a cross-functional partner on delegated security work, evidence quality, escalation, and handoffs with People and Operations. You can ask to meet anyone else you like.

Responsibilities

• Own corporate IT from end to end: identity, devices, SaaS, and the employee lifecycle from a person's first day to their last.
• Make sure people are set up quickly, stay productive, and are offboarded cleanly.
• You are the second person in the IT and security function, which sits in the Infrastructure organization. The Security & Automation Engineer owns the security program and audits. You run the daily controls and collect the evidence.
• Administer Okta or the SSO provider: app integrations, groups, provisioning and deprovisioning, and MFA policy.
• Run access requests and periodic access reviews across Google Workspace, Slack, GitHub, GCP, and other SaaS tools.
• Own the macOS fleet through MDM: enrollment, configuration profiles, OS and app patching, and encryption.
• Handle laptop procurement, shipping, inventory, and recovery for a team spread across the US and Europe.
• Own onboarding and offboarding, so new hires are productive on day one and departures are fully closed out the same day.
• Be the go-to person for hardware, software, and account problems. Turn recurring questions into docs or self-serve fixes.
• Support office IT (Wi-Fi, conference rooms, printers) at the New York and San Francisco hubs.
• Script and automate repetitive IT work, such as onboarding, provisioning, and device compliance checks, using Python, shell scripts, Okta Workflows, or HRIS integrations.
• Keep IT procedures, runbooks, and the asset inventory up to date.
• Manage the SaaS stack: licenses, renewals, spend, and removing unused seats.
• Evaluate new tools and vendors together with the Security & Automation Engineer.
• Keep IT controls healthy day to day: device compliance, access reviews, and offboarding checks. Follow up on exceptions.
• Collect and organize audit evidence for SOC 2 Type 2, HIPAA, and future frameworks.
• Help roll out security awareness training and phishing simulations.

Requirements

• 3-5 years in IT operations or systems administration, including at least 1-2 years at a startup or small, fast-moving team.
• Hands-on admin experience with Okta or a similar SSO provider such as Microsoft Entra ID, OneLogin, or JumpCloud.
• Proven macOS fleet management with an MDM such as Kandji, Mosyle, Jamf, Intune, or similar.
• Google Workspace administration.
• Scripting ability in Python, Bash, or similar, and a habit of automating repeated tasks.
• Clear written communication. You document as you go.
• Experience supporting a SOC 2, HIPAA, or ISO 27001 audit, or using a compliance platform such as Secureframe, Vanta, or Drata.
• Okta Workflows or other no-code automation tools.
• Linux familiarity and basic GCP or AWS IAM knowledge.
• Experience supporting a remote team across time zones.
• You enjoy building things with capable colleagues, want to own outcomes rather than just tasks, and like taking on work of any size.
• This suits someone who has run IT at a startup, likes automating repetitive work, and wants real ownership instead of a ticket queue.
• This role is not Windows administration. The company runs macOS and Linux.
• This role is not traditional enterprise networking. The company is cloud-first, with minimal on-prem infrastructure beyond its office hubs.

Conditions

Most work happens during US daytime hours, with some synchronous meetings each week. Otherwise the schedule is flexible, with collaboration and asynchronous work both supported.

The team is distributed across the US and Europe. Hubs are in New York City and San Francisco, with more planned. You can work from a hub, from home, from a co-working space, or elsewhere.

Salary is set using market and data-driven sources and reviewed every six months.

The company is an equal opportunity employer and welcomes people from all backgrounds.

Benefits

• $4000/yr travel stipend to visit and work alongside other team members, plus access to team on-sites in different cities.
• $350/mo productivity stipend for things like home internet or co-working space.
• $350/mo AI tools stipend.
• $150/mo team lunch stipend.
• $500 one-time home office stipend.
• Relocation bonus for working from a hub.
• Coverage of up to 100% of health insurance costs for you and your partner or family.
• Equity in the company.