- Location
- United States
- Workplace
- Remote
- Employment
- Full time
- Level
- Mid level
- Posted
- 21 October
About this role
ABOUT BASETEN
Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F, led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products.
THE ROLE
We are hiring a Senior IT Systems Engineer to own the identity, authentication, and automation layer of Baseten’s internal IT environment. You will design and maintain how employees access every system at the company, from the day they’re hired to the day they leave.
This is a senior individual contributor role focused on engineering, not frontline support. You will lead our Okta environment, build automated workflows that replace manual IT processes, and partner closely with Security to enforce access controls as we scale. You will also serve as a technical escalation point for the IT Support team on complex identity and systems issues.
This is a hybrid role based out of our San Francisco or New York office, following our standard policy of three days per week in person.
RESPONSIBILITIES
Own the architecture, configuration, and ongoing administration of Okta, including SSO, MFA, authentication policies, group structure, and application integrations
Lead the ongoing Okta migration and integration of new and existing applications via SAML, OIDC, and SCIM
Design and build automated joiner, mover, and leaver workflows across HRIS, Okta, Google Workspace, MDM, and SaaS applications
Develop automation using Okta Workflows, REST APIs, and scripting to eliminate manual IT processes
Implement and maintain role-based access control, least-privilege access models, and periodic access reviews in partnership with the Security team
Integrate identity with endpoint management to support device trust and compliance enforcement
Support compliance requirements such as SOC 2 through access controls, audit evidence, and documentation
Write and maintain technical documentation, runbooks, and architecture diagrams for identity and automation systems
Serve as an escalation point and technical resource for the IT Support team
REQUIREMENTS
6+ years of experience in IT systems engineering, identity engineering, or a related role
Deep hands-on experience administering Okta, including Okta Identity Engine, Okta Workflows, authentication policies, and lifecycle management
Strong working knowledge of SAML, OIDC, SCIM, and MFA implementations
Proficiency in at least one scripting language (Python, Bash, or PowerShell) and experience working with REST APIs
Experience administering Google Workspace and an MDM platform (e.g. Kandji or Jamf)
Track record of designing and delivering automation that measurably reduced manual IT work
Working knowledge of security and compliance frameworks such as SOC 2
Clear written and verbal communication, including the ability to document systems for both technical and non-technical audiences
NICE TO HAVE
Okta certifications (Certified Professional, Administrator, or Consultant)
Experience managing identity or SaaS configuration as code (e.g. Terraform)
Experience with AWS IAM or cloud identity
Experience at a high-growth startup
BENEFITS
Competitive compensation, including meaningful equity
(U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents
Flexible PTO policy including company wide Winter Break (our offices are closed from Christmas Eve to New Year's Day!)
Paid parental leave
Fertility and family-building stipend through Carrot
(U.S. only) Company-facilitated 401(k)
Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities.
Apply now to embark on a rewarding journey in shaping the future of AI! If you are a motivated individual with a passion for machine learning and a desire to be part of a collaborative and forward-thinking team, we would love to hear from you.
At Baseten, we are committed to fostering a diverse and inclusive workplace. We provide equal employment opportunities to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status.
We are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance, where applicable).
As published by Baseten. Applications are handled on their site.
Skills this posting mentions
About Baseten
Inference is everything. Baseten is an AI infrastructure platform giving you the tooling, expertise, and hardware needed to bring great AI products to market - fast. Our proprietary Inference Stack utilizes the cutting-edge of performance research combined with highly performant and reliable infrastructure to give you out-of-the-box global availability with 99.99% of uptime.
All 107 openings at BasetenOne click, then it is written
Apply to Baseten with a resume written for this role.
Queue IT Systems Engineer and I read the posting, rewrite your resume against it, draft the cover letter, and score the fit. Then you press send, or press one button and I fill in Baseten’s form for you.
01Drop your resume
A PDF or a LinkedIn URL. About a minute, once.
02I rank the openings
Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.
03Each one is written up
Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.
- 25 sent a week, free
- No card
- Nothing sent until you say so
More roles at Baseten
See all- 22 October
Technical Program Manager, Forward Deployed Engineering
San Francisco, CaliforniaHybrid
$165k - $330k/yrMid levelEngineering - 22 October
Product Platform: Product Engineer
San Francisco, CaliforniaHybrid
$165k - $330k/yrMid levelEngineering - 15 October
- 15 October
Engineering Manager Runtime - Storage
San Francisco, CaliforniaHybrid
$165k - $330k/yrManagerEngineering - 13 October
- 8 October
Similar roles elsewhere
See more- 22 October
Software Engineer II - Control Plane (Hosted Foundations / Applications)
ElasticUnited States
$111k - $211k/yrMid levelEngineering - 22 October
Staff Backend Engineer - Infrastructure Access - US
TeleportUnited States (Remote)Remote
$222k - $342k/yrStaffEngineering - 21 October
Senior Software Engineer - Platform Billing Experience
ElasticUnited States
$133k - $253k/yrSeniorEngineering - 21 October
Senior Software Engineer - Platform Billing Core
ElasticUnited States
$133k - $253k/yrSeniorEngineering
Put this to work
Paste your career in once. Every application after that is written for you.
Drop a resume or a LinkedIn URL. I rank the live openings against it, rewrite the resume and write a cover letter for the best of them, and fill in the employer's form when you press the button. You read, you decide what goes out.
01Drop your resume
A PDF or a LinkedIn URL. About a minute, once.
02I rank the openings
Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.
03Each one is written up
Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.
- New matches ranked and written before you are up.
- Every bullet stays inside what your history supports. Nothing invented.
- Queued, submitted, interviewing, offer: one screen, not a spreadsheet.
500 free credits on sign-up. No card. Nothing is sent until you say so.
Listed from the job board Baseten publishes. Refolk is not the employer and does not handle their hiring. Applications go to Baseten directly.