IT Engineer

About You

This is an engineering role with a support component, not the other way around. The bulk of the job is building and owning systems: the identity model in Okta, endpoint baselines in Workspace ONE, governance across Google Workspace and the wider SaaS estate, and the automation that determines how much manual work IT has to absorb in the first place. You'll also carry escalations and some direct support — at our size there's no clean wall between the two, and the person in this role needs to stay close enough to the queue to know which problems are worth engineering away.

You'll work in an Okta, Workspace ONE, Google Workspace, and Slack stack, partnered closely with Security, Engineering, People, and Finance. Internal systems are in audit scope for SOC 2, ISO 27001, and PCI, so the controls you build have to hold up under an auditor's review, not just function day to day.

You'll thrive as an IT Engineer if you:

• obsess with crafting code that is fast, reliable and practical for the problem
• are known as the go-to person for tackling tough technical problems
• work hard and can build and ship fast
• can clearly explain complex technical concepts to others
• are a fast learner, frequently picking up new languages and tools

What You'll Do

As an IT Engineer at LiveKit, you will:

• Own identity and access engineering in Okta — group strategy, app assignments, SSO configuration, lifecycle automation, and access request patterns that are secure without being miserable to use
• Run endpoint engineering across a macOS-first fleet in Workspace ONE — provisioning, configuration baselines, patching, encryption posture, inventory hygiene, and compliance reporting
• Administer Google Workspace and Slack at scale: user lifecycle, groups, shared drives, permissions, roles, and the governance patterns that keep them from drifting
• Bring the SaaS estate under real governance — who owns each tool, who has access, what it costs, and what happens to all three when someone changes teams or leaves
• Build the automation that keeps IT load from scaling with headcount — onboarding, deprovisioning, access reporting, device compliance, and whatever else you catch yourself doing twice
• Translate security, compliance, and engineering requirements into IT controls that generate their own audit evidence instead of a quarterly scramble
• Serve as the technical escalation point for complex issues across identity, access, endpoints, and internal infrastructure — and then engineer the class of problem out of existence

Who You Are

• 4+ years in IT engineering, IT operations, systems administration, endpoint engineering, or identity engineering — ideally somewhere fast-moving and remote-first
• You've administered Okta or a comparable identity provider as the owner: SSO, groups, app assignments, lifecycle workflows, real access management decisions
• Hands-on with modern MDM — Workspace ONE or equivalent — including provisioning, configuration enforcement, patching, encryption, and inventory
• Strong Google Workspace administration and genuine macOS endpoint depth
• You've built or meaningfully improved operational workflows, automation, reporting, or internal controls — not just operated someone else's
• An excellent writer. You can explain a technical decision clearly, document a system so the next person doesn't have to reverse-engineer it, and keep stakeholders informed without burying them
• Strong ownership and judgment. You can prioritize under ambiguity and you build things that reduce future work rather than adding to it
• You want to stay hands-on. This is an individual contributor role, and the work is building and operating systems, not managing people who do

Nice to Have

• Experience supporting security and compliance work — SOC 2, ISO 27001, PCI, access reviews, audit evidence, or control implementation
• Fluency with device security posture: EDR, disk encryption, patch compliance, vulnerability management, access hygiene
• Scripting and automation with Bash, Python, Google Apps Script, Okta Workflows, or raw APIs
• Experience designing IT processes that work across time zones for a globally distributed team, including the particular joy of international hardware logistics