IT工程师

About LiveKitLiveKit is building the infrastructure layer for the voice-driven era of computing. Our platform gives developers everything they need to build, test, deploy, scale, and observe agents in production. Founded in 2021, LiveKit powers voice AI applications for OpenAI, xAI, Salesforce, Coursera, Spotify, and thousands of others, collectively facilitating billions of calls each year.About YouThis is an engineering role with a support component, not the other way around. The bulk of the job is building and owning systems: the identity model in Okta, endpoint baselines in Workspace ONE, governance across Google Workspace and the wider SaaS estate, and the automation that determines how much manual work IT has to absorb in the first place. You'll also carry escalations and some direct support — at our size there's no clean wall between the two, and the person in this role needs to stay close enough to the queue to know which problems are worth engineering away.You'll work in an Okta, Workspace ONE, Google Workspace, and Slack stack, partnered closely with Security, Engineering, People, and Finance. Internal systems are in audit scope for SOC 2, ISO 27001, and PCI, so the controls you build have to hold up under an auditor's review, not just function day to day.You'll thrive as an IT Engineer if you:obsess with crafting code that is fast, reliable and practical for the problemare known as the go-to person for tackling tough technical problemswork hard and can build and ship fastcan clearly explain complex technical concepts to othersare a fast learner, frequently picking up new languages and toolsWhat You'll DoAs an IT Engineer at LiveKit, you will:Own identity and access engineering in Okta — group strategy, app assignments, SSO configuration, lifecycle automation, and access request patterns that are secure without being miserable to useRun endpoint engineering across a macOS-first fleet in Workspace ONE — provisioning, configuration baselines, patching, encryption posture, inventory hygiene, and compliance reportingAdminister Google Workspace and Slack at scale: user lifecycle, groups, shared drives, permissions, roles, and the governance patterns that keep them from driftingBring the SaaS estate under real governance — who owns each tool, who has access, what it costs, and what happens to all three when someone changes teams or leavesBuild the automation that keeps IT load from scaling with headcount — onboarding, deprovisioning, access reporting, device compliance, and whatever else you catch yourself doing twiceTranslate security, compliance, and engineering requirements into IT controls that generate their own audit evidence instead of a quarterly scrambleServe as the technical escalation point for complex issues across identity, access, endpoints, and internal infrastructure — and then engineer the class of problem out of existenceWho You Are4+ years in IT engineering, IT operations, systems administration, endpoint engineering, or identity engineering — ideally somewhere fast-moving and remote-firstYou've administered Okta or a comparable identity provider as the owner: SSO, groups, app assignments, lifecycle workflows, real access management decisionsHands-on with modern MDM — Workspace ONE or equivalent — including provisioning, configuration enforcement, patching, encryption, and inventoryStrong Google Workspace administration and genuine macOS endpoint depthYou've built or meaningfully improved operational workflows, automation, reporting, or internal controls — not just operated someone else'sAn excellent writer. You can explain a technical decision clearly, document a system so the next person doesn't have to reverse-engineer it, and keep stakeholders informed without burying themStrong ownership and judgment. You can prioritize under ambiguity and you build things that reduce future work rather than adding to itYou want to stay hands-on. This is an individual contributor role, and the work is building and operating systems, not managing people who doNice to HaveExperience supporting security and compliance work — SOC 2, ISO 27001, PCI, access reviews, audit evidence, or control implementationFluency with device security posture: EDR, disk encryption, patch compliance, vulnerability management, access hygieneScripting and automation with Bash, Python, Google Apps Script, Okta Workflows, or raw APIsExperience designing IT processes that work across time zones for a globally distributed team, including the particular joy of international hardware logisticsOur Commitment to YouAn opportunity to build something truly impactful to the worldWork alongside world-class engineers building in the openCompetitive salary and equity packageHealth, dental, and vision benefitsFlexible vacation policyRemote work environment with the equipment you needReady to Apply?If the idea of owning identity, endpoints, and automation end to end sounds like your kind of job, we'd love to hear from you.LiveKit is an equal opportunity employer and does not discriminate on the basis of any characteristic protected by applicable law. If you require a reasonable accommodation during the application or interview process, please contact recruiting@livekit.io.