IT Systems Engineer
通过结合应用人工智能研究，灵活的基础设施和无开发工具，我们使在人工智能的边界运营的公司能够生产最先进的模型。我们正在迅速发展，最近提高了我们的1.5B 美元系列 F https://www.baseten.co/blog/announcing-our-series-f/,由 Altimeter Capital,Conviction Partners 和 Spark Capital 领导。加入我们并帮助建设平台工程师转向船舶产品。我们正在聘请一名高级 IT 系统工程师，负责拥有 Basen 的内部 IT 环境的身份，认证和自动化层。你将设计和维护员工从被雇佣到离开之日起公司每个系统中的访问方式。这是一个专注于工程而不是前线支持的高级个人贡献者角色。你将领导我们的 Octa 环境，建立替代手动 IT 流程的自动化工作流程，并与安全密切合作，以执行扩展过程中访问控制。你还将作为 IT 支持团队在复杂的身份和系统问题上技术升级点。这是一个基于旧金山或纽约办事处的混合角色，遵循我们每周三天的人身标准政策。责任 - 拥有 Octa 的架构，配置和持续管理，包括 SSO,MFA,身份验证策略，组结构和应用程序集成 - 领导正在进行的 Octa 迁移和通过 SAML,OIDC 和 SCIM 实现新的和现有应用程序的集成 - 在 HRIS,Okta,Google 工作空间，MDM 和 SaaS 应用中设计和建造自动连接器，搬运器和离开机的工作流程 - 使用 Octa 工作流程，RESTAPI 和脚本开发自动化来消除 IT 手工过程 - 与安全团队合作实施和维护基于角色的访问控制，最小特权的访问模式以及定期访问审查 - 整合身份与终端点管理以支持设备信任和遵守执法 - 通过访问控制，审计证据和文档来支持 SOC 2等符合要求 - 编写并维护身份和自动化系统技术文件，跑本和架构图表 - 为 IT 支持团队提供升级点和技术资源
查看英文原文
ABOUT BASETEN
Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F https://www.baseten.co/blog/announcing-our-series-f/, led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products.
THE ROLE
We are hiring a Senior IT Systems Engineer to own the identity, authentication, and automation layer of Baseten’s internal IT environment. You will design and maintain how employees access every system at the company, from the day they’re hired to the day they leave.
This is a senior individual contributor role focused on engineering, not frontline support. You will lead our Okta environment, build automated workflows that replace manual IT processes, and partner closely with Security to enforce access controls as we scale. You will also serve as a technical escalation point for the IT Support team on complex identity and systems issues.
This is a hybrid role based out of our San Francisco or New York office, following our standard policy of three days per week in person.
RESPONSIBILITIES
- Own the architecture, configuration, and ongoing administration of Okta, including SSO, MFA, authentication policies, group structure, and application integrations
- Lead the ongoing Okta migration and integration of new and existing applications via SAML, OIDC, and SCIM
- Design and build automated joiner, mover, and leaver workflows across HRIS, Okta, Google Workspace, MDM, and SaaS applications
- Develop automation using Okta Workflows, REST APIs, and scripting to eliminate manual IT processes
- Implement and maintain role-based access control, least-privilege access models, and periodic access reviews in partnership with the Security team
- Integrate identity with endpoint management to support device trust and compliance enforcement
- Support compliance requirements such as SOC 2 through access controls, audit evidence, and documentation
- Write and maintain technical documentation, runbooks, and architecture diagrams for identity and automation systems
- Serve as an escalation point and technical resource for the IT Support team
REQUIREMENTS
- 6+ years of experience in IT systems engineering, identity engineering, or a related role
- Deep hands-on experience administering Okta, including Okta Identity Engine, Okta Workflows, authentication policies, and lifecycle management
- Strong working knowledge of SAML, OIDC, SCIM, and MFA implementations
- Proficiency in at least one scripting language (Python, Bash, or PowerShell) and experience working with REST APIs
- Experience administering Google Workspace and an MDM platform (e.g. Kandji or Jamf)
- Track record of designing and delivering automation that measurably reduced manual IT work
- Working knowledge of security and compliance frameworks such as SOC 2
- Clear written and verbal communication, including the ability to document systems for both technical and non-technical audiences
NICE TO HAVE
- Okta certifications (Certified Professional, Administrator, or Consultant)
- Experience managing identity or SaaS configuration as code (e.g. Terraform)
- Experience with AWS IAM or cloud identity
- Experience at a high-growth startup
BENEFITS
- Competitive compensation, including meaningful equity
- (U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents
- Flexible PTO policy including company wide Winter Break (our offices are closed from Christmas Eve to New Year's Day!)
- Paid parental leave
- Fertility and family-building stipend through Carrot
- (U.S. only) Company-facilitated 401(k)
- Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities.
Apply now to embark on a rewarding journey in shaping the future of AI! If you are a motivated individual with a passion for machine learning and a desire to be part of a collaborative and forward-thinking team, we would love to hear from you.
At Baseten, we are committed to fostering a diverse and inclusive workplace. We provide equal employment opportunities to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status.
We are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance, where applicable).