IT解决方案工程师
IT Solutions Engineer
关于团队
IT系统运维作为连接安全、工程和员工技术平台的操作控制层。该团队确保面向员工的系统、身份工作流和企业应用在组织扩展时能够以可预测、受控且持续可靠的方式运行。
除了实施，该团队还建立结构化的运营模式，确保平台变更、访问模型、集成和生命周期工作流在企业环境中安全且一致地演进。
关于职位
该职位负责身份连接的企业SaaS平台和系统变更控制，支持OpenAI的合规要求。工程师将负责确保生产配置、访问模型和平台变更通过定义的控制保持合规、可审计，并持续运行。您将负责在身份平台、SaaS应用、协作工具和企业基础设施上进行受控系统和工作流变更的运维。
您将与安全、平台工程和IT支持运维紧密合作，以：
- 确保身份和访问工作流在各系统中保持一致
- 为企业应用实施结构化的发布和配置实践
- 提升影响员工工作流的系统变更的可见性和可追溯性
- 将操作需求转化为持久的自动化和符合策略的实现
在此职位上取得成功不仅需要强大的工程能力，还需要良好的运维判断力、严谨的文档习惯以及有效的跨职能协作。
在此职位上，您将：
企业SaaS与身份平台管理
- 负责企业SaaS和身份连接平台的管理和运维，确保配置完整性、访问治理，并符合定义的控制要求。
- 负责与标准化授权模型对齐的入职、访问修改和离职工作流。
- 确保生命周期事件在下游系统中可靠传播，并保持准确、可审计的访问状态。
- 维护一致的平台配置，并减少关键业务系统中的未管理差异。
- 与安全和IT支持运维合作，实施最小权限访问模型和持久的所有权边界。
- 实施受控的变更管理流程，确保所有系统变更经过审批、记录并符合合规要求。
- 协助制定和维护系统变更的审计追踪机制，确保可追溯性。
- 参与设计和优化身份和访问管理的自动化流程，提升效率和安全性。
查看英文原文
About the Team
IT Systems Operations serves as the operational control layer connecting Security, Engineering, and Employee Technology platforms. The team ensures employee-facing systems, identity workflows, and enterprise applications operate in a predictable, governed, and continuously reliable manner as the organization scales.
Beyond implementation, the team establishes structured operating patterns that ensure platform changes, access models, integrations, and lifecycle workflows evolve safely and consistently across the enterprise environment.
About the Role
This role acts as an operational owner for identity-connected enterprise SaaS platforms and system change controls supporting OpenAI’s compliance requirements. The engineer will be responsible for ensuring that production configuration, access models, and platform changes remain compliant, auditable, and consistently operated through defined controls. You will own and operationalize controlled system and workflow changes across identity platforms, SaaS applications, collaboration tooling, and enterprise infrastructure.
You will partner closely with Security, Platform Engineering, and IT Support Operations to:
- Ensure identity and access workflows behave consistently across systems
- Implement structured rollout and configuration practices for enterprise applications
- Improve visibility and traceability of system changes impacting employee workflows
- Translate operational requirements into durable automation and policy-aligned implementations
Success in this role requires not only strong engineering capability, but also sound operational judgment, disciplined documentation practices, and effective cross-functional collaboration.
In this role, you will:
Enterprise SaaS & Identity Platform Ownership
- Own administration and operational stewardship of enterprise SaaS and identity-connected platforms, ensuring configuration integrity, access governance, and compliance with defined control requirements.
- Own onboarding, access modification, and offboarding workflows aligned to standardized entitlement models.
- Ensure lifecycle events propagate reliably across downstream systems and maintain accurate, auditable access state.
- Maintain consistent platform configuration and reduce unmanaged variance across business-critical systems.
- Partner with Security and IT Support Operations to enforce least-privilege access models and durable ownership boundaries.
Controlled Change, Automation & Operational Reliability
- Design and operationalize structured rollout patterns for enterprise system configuration and workflow changes.
- Replace manual administrative actions with governed automation incorporating validation, logging, and rollback-aware deployment patterns.
- Translate operational and compliance requirements into durable system implementations that improve reliability and auditability.
- Build automated operational workflows using APIs, infrastructure-as-code, scripting, and low-code automation platforms.
Integration & Platform Engineering
- Execute and maintain integrations across identity providers, SaaS platforms, ITSM systems, and internal tooling to ensure consistent system behavior.
- Standardize integration and deployment approaches across environments to support scalable platform adoption.
- Translate ambiguous operational requirements into structured workflows and dependable system implementations.
- Partner cross-functionally to convert recurring incidents and operational friction into durable system improvements.
We’re looking for someone with:
- Experience owning enterprise SaaS and identity platforms end-to-end.
- Experience with implementing and operating SOX, SOC 2, and related controls in these platforms.
- Experience automating platforms and audits.
- Excellent communication and collaboration skills.
About OpenAI
OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity.
We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic.
For additional information, please see OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement https://cdn.openai.com/policies/eeo-policy-statement.pdf.
Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations.
To notify OpenAI that you believe this job posting is non-compliant, please submit a report through this form https://form.asana.com/?d=57018692298241&k=5MqR40fZd7jlxVUh5J-UeA. No response will be provided to inquiries unrelated to job posting compliance.
We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this link https://form.asana.com/?k=bQ7w9h3iexRlicUdWRiwvg&d=57018692298241.
OpenAI Global Applicant Privacy Policy https://cdn.openai.com/policies/global-employee-and-contractor-privacy-policy.pdf
At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.