Baseten logo

IT Systems Engineer

Baseten
Remote, USARemoteSoftware EngineeringSenior-Level$175,000 - $225,000Posted: today

About the role

IT Systems Engineer

Location

Remote

Employment Type

Full time

Location Type

Remote

Department

EPD

Security

IT

Compensation

$175K – $225K • Offers Equity

Overview

Application

ABOUT BASETEN

Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F, led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products.

THE ROLE

We are hiring a Senior IT Systems Engineer to own the identity, authentication, and automation layer of Baseten’s internal IT environment. You will design and maintain how employees access every system at the company, from the day they’re hired to the day they leave.

This is a senior individual contributor role focused on engineering, not frontline support. You will lead our Okta environment, build automated workflows that replace manual IT processes, and partner closely with Security to enforce access controls as we scale. You will also serve as a technical escalation point for the IT Support team on complex identity and systems issues.

This is a hybrid role based out of our San Francisco or New York office, following our standard policy of three days per week in person.

RESPONSIBILITIES

Own the architecture, configuration, and ongoing administration of Okta, including SSO, MFA, authentication policies, group structure, and application integrations

Lead the ongoing Okta migration and integration of new and existing applications via SAML, OIDC, and SCIM

Design and build automated joiner, mover, and leaver workflows across HRIS, Okta, Google Workspace, MDM, and SaaS applications

Develop automation using Okta Workflows, REST APIs, and scripting to eliminate manual IT processes

Implement and maintain role-based access control, least-privilege access models, and periodic access reviews in partnership with the Security team

Integrate identity with endpoint management to support device trust and compliance enforcement

Support compliance requirements such as SOC 2 through access controls, audit evidence, and documentation

Write and maintain technical documentation, runbooks, and architecture diagrams for identity and automation systems

Serve as an escalation point and technical resource for the IT Support team

REQUIREMENTS

6+ years of experience in IT systems engineering, identity engineering, or a related role

Deep hands-on experience administering Okta, including Okta Identity Engine, Okta Workflows, authentication policies, and lifecycle management

Strong working knowledge of SAML, OIDC, SCIM, and MFA implementations

Proficiency in at least one scripting language (Python, Bash, or PowerShell) and experience working with REST APIs

Experience administering Google Workspace and an MDM platform (e.g. Kandji or Jamf)

Track record of designing and delivering automation that measurably reduced manual IT work

Working knowledge of security and compliance frameworks such as SOC 2

Clear written and verbal communication, including the ability to document systems for both technical and non-technical audiences

NICE TO HAVE

Okta certifications (Certified Professional, Administrator, or Consultant)

Experience managing identity or SaaS configuration as code (e.g. Terraform)

Experience with AWS IAM or cloud identity

Experience at a high-growth startup

BENEFITS

Competitive compensation, including meaningful equity

(U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents

Flexible PTO policy including company wide Winter Break (our offices are closed from Christmas Eve to New Year's Day!)

Paid parental leave

Fertility and family-building stipend through Carrot

(U.S. only) Company-facilitated 401(k)

Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities.

Minimum requirements

  • 6+ years in IT systems or identity engineering with deep Okta administration experience
  • Proficiency in SAML, OIDC, SCIM, MFA, scripting (Python, Bash, PowerShell), and REST APIs
  • Experience managing Google Workspace, MDM platforms, automation, and SOC 2 compliance knowledge

This listing was parsed by AI and may not be complete. Check the official posting on Baseten's site for the most accurate information.

Ready to apply?
Applications are handled on Baseten's own careers site.
Apply Now