baseten

IT Systems Engineer

Listed by employer · Checked

Posted within 60 days ·

  • remote
  • FullTime
  • EPD
  • Remote
Work arrangement
remote
Employment
FullTime
Stated compensation
USD 175,000–225,000 1 YEAR
Apply on company website ↗
01 / A QUICK CHECK BEFORE YOU APPLY

Does the location policy fit?

Choose where you would work from. We’ll compare it with the posting’s stated requirements.

Choose the country you will work from. You can change this anytime.

Country and sponsorship changes take effect when you click Check eligibility.

Applying from Christmas Island

Not enough information in this posting — confirm with the employer

Checked for applicants in Christmas Island; employer sponsorship is not needed. Based on the source posting · not a hiring or work-authorization guarantee.

The posting does not specify whether applicants from your country are accepted.

Why this result?

1 supporting signals

  • The role is described as remote; geographic restrictions still apply.

2 still unclear

  • The posting does not specify whether applicants from your country are accepted.
  • Visa sponsorship is not specified.
Source: ashbyChecked Original posting ↗

Requirements

2 with evidence7 unclear or unstated
Remote policy
remote
“Provider workplace type: remote”
From employer posting metadata
Minimum experience (years)
6
“6+ years of experience in IT systems engineering, identity engineering, or a related role”
See matched passage in original description ↓
Employment type
FullTime
Compensation
USD 175,000–225,000 1 YEAR
7 fields not stated in this posting
Employer sponsorship
Not specified
Geographic scope
Not specified
Degree requirement
Not specified
Security clearance
Not mentioned
Timezone / hours
Not specified
Citizenship requirement
Not mentioned
Work authorization
Not specified

These details were not stated in the tracked posting. Confirm with the employer.

READ IT IN THE EMPLOYER’S OWN WORDS

Original job description

Reading view uses normalized posting text so exact evidence excerpts can be highlighted.

ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F, led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products. THE ROLE
Read full descriptionShow less description
We are hiring an IT Systems Engineer to own the identity, authentication, and automation layer of Baseten’s internal IT environment. You will design and maintain how employees access every system at the company, from the day they’re hired to the day they leave. This is a senior individual contributor role focused on engineering, not frontline support. You will lead our Okta environment, build automated workflows that replace manual IT processes, and partner closely with Security to enforce access controls as we scale. You will also serve as a technical escalation point for the IT Support team on complex identity and systems issues. This is a hybrid role based out of our San Francisco or New York office, following our standard policy of three days per week in person. RESPONSIBILITIES Own the architecture, configuration, and ongoing administration of Okta, including SSO, MFA, authentication policies, group structure, and application integrations Lead the ongoing Okta migration and integration of new and existing applications via SAML, OIDC, and SCIM Design and build automated joiner, mover, and leaver workflows across HRIS, Okta, Google Workspace, MDM, and SaaS applications Develop automation using Okta Workflows, REST APIs, and scripting to eliminate manual IT processes Implement and maintain role-based access control, least-privilege access models, and periodic access reviews in partnership with the Security team Integrate identity with endpoint management to support device trust and compliance enforcement Support compliance requirements such as SOC 2 through access controls, audit evidence, and documentation Write and maintain technical documentation, runbooks, and architecture diagrams for identity and automation systems Serve as an escalation point and technical resource for the IT Support team REQUIREMENTS 6+ years of experience in IT systems engineering, identity engineering, or a related role Deep hands-on experience administering Okta, including Okta Identity Engine, Okta Workflows, authentication policies, and lifecycle management Strong working knowledge of SAML, OIDC, SCIM, and MFA implementations Proficiency in at least one scripting language (Python, Bash, or PowerShell) and experience working with REST APIs Experience administering Google Workspace and an MDM platform (e.g. Kandji or Jamf) Track record of designing and delivering automation that measurably reduced manual IT work Working knowledge of security and compliance frameworks such as SOC 2 Clear written and verbal communication, including the ability to document systems for both technical and non-technical audiences NICE TO HAVE Okta certifications (Certified Professional, Administrator, or Consultant) Experience managing identity or SaaS configuration as code (e.g. Terraform) Experience with AWS IAM or cloud identity Experience at a high-growth startup BENEFITS Competitive compensation, including meaningful equity (U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents Flexible PTO policy including company wide Winter Break (our offices are closed from Christmas Eve to New Year's Day!) Paid parental leave Fertility and family-building stipend through Carrot (U.S. only) Company-facilitated 401(k) Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities. Apply now to embark on a rewarding journey in shaping the future of AI! If you are a motivated individual with a passion for machine learning and a desire to be part of a collaborative and forward-thinking team, we would love to hear from you. At Baseten, we are committed to fostering a diverse and inclusive workplace. We provide equal employment opportunities to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. We are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance, where applicable).
Original formatting and links

ABOUT BASETEN

Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F, led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products.

THE ROLE

We are hiring an IT Systems Engineer to own the identity, authentication, and automation layer of Baseten’s internal IT environment. You will design and maintain how employees access every system at the company, from the day they’re hired to the day they leave.

This is a senior individual contributor role focused on engineering, not frontline support. You will lead our Okta environment, build automated workflows that replace manual IT processes, and partner closely with Security to enforce access controls as we scale. You will also serve as a technical escalation point for the IT Support team on complex identity and systems issues.

This is a hybrid role based out of our San Francisco or New York office, following our standard policy of three days per week in person.

RESPONSIBILITIES

  • Own the architecture, configuration, and ongoing administration of Okta, including SSO, MFA, authentication policies, group structure, and application integrations

  • Lead the ongoing Okta migration and integration of new and existing applications via SAML, OIDC, and SCIM

  • Design and build automated joiner, mover, and leaver workflows across HRIS, Okta, Google Workspace, MDM, and SaaS applications

  • Develop automation using Okta Workflows, REST APIs, and scripting to eliminate manual IT processes

  • Implement and maintain role-based access control, least-privilege access models, and periodic access reviews in partnership with the Security team

  • Integrate identity with endpoint management to support device trust and compliance enforcement

  • Support compliance requirements such as SOC 2 through access controls, audit evidence, and documentation

  • Write and maintain technical documentation, runbooks, and architecture diagrams for identity and automation systems

  • Serve as an escalation point and technical resource for the IT Support team

REQUIREMENTS

  • 6+ years of experience in IT systems engineering, identity engineering, or a related role

  • Deep hands-on experience administering Okta, including Okta Identity Engine, Okta Workflows, authentication policies, and lifecycle management

  • Strong working knowledge of SAML, OIDC, SCIM, and MFA implementations

  • Proficiency in at least one scripting language (Python, Bash, or PowerShell) and experience working with REST APIs

  • Experience administering Google Workspace and an MDM platform (e.g. Kandji or Jamf)

  • Track record of designing and delivering automation that measurably reduced manual IT work

  • Working knowledge of security and compliance frameworks such as SOC 2

  • Clear written and verbal communication, including the ability to document systems for both technical and non-technical audiences

NICE TO HAVE

  • Okta certifications (Certified Professional, Administrator, or Consultant)

  • Experience managing identity or SaaS configuration as code (e.g. Terraform)

  • Experience with AWS IAM or cloud identity

  • Experience at a high-growth startup

BENEFITS

  • Competitive compensation, including meaningful equity

  • (U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents

  • Flexible PTO policy including company wide Winter Break (our offices are closed from Christmas Eve to New Year's Day!)

  • Paid parental leave

  • Fertility and family-building stipend through Carrot

  • (U.S. only) Company-facilitated 401(k)

  • Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities.

Apply now to embark on a rewarding journey in shaping the future of AI! If you are a motivated individual with a passion for machine learning and a desire to be part of a collaborative and forward-thinking team, we would love to hear from you.

At Baseten, we are committed to fostering a diverse and inclusive workplace. We provide equal employment opportunities to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status.

We are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance, where applicable).

Matched by role category. Review each posting’s requirements before applying.

Explore stated remote geography

These collections reflect applicant location statements, not authorization or citizenship.

THE JOB ELIGIBILITY CHECKER

Check a job