← All roles

Senior Systems Engineer - IAM

Crusoe· IT, Compliance, and Security
Apply on company site
San Francisco, CA - US$165k - $200k + bonusFull-timePosted 6mo ago

About the role

Senior Systems Engineer focusing on identity and access management, automation, and system integrations to build and secure Crusoe’s global technology infrastructure. On-site, hands-on role collaborating with global IT to ensure reliable, secure, and scalable systems.

Responsibilities

  • Managing advanced Okta functionality, including Device Trust, Okta Expression Language, and complex identity lifecycle management
  • Implementing and maintaining RBAC best practices and adaptive security policies to ensure global consistency in access governance
  • Building automated workflows using Workato, Okta Workflows, and Lumos to eliminate manual processes and improve operational efficiency
  • Planning and executing application integrations (SAML, OIDC, OAuth) and system changes with minimal disruption to business operations
  • Partnering with IAM leadership and integration engineers to connect business systems and support feature adoption across the IT ecosystem
  • Acting as a Tier 2 escalation point for complex access issues, supporting the Service Desk and broader infrastructure needs
  • Mentoring and training Service Desk team members, developing documentation and SOPs to enable independent execution of common IAM tasks
  • Participating in global team collaboration, including occasional off-hours syncs to support distributed operations

Qualifications

  • 5+ years of experience in Systems Engineering or Identity & Access Management, with strong expertise in Okta administration and identity lifecycle management
  • Deep knowledge of Okta’s security capabilities; Okta Administrator or Consultant certifications are strongly preferred
  • Experience with Lumos or similar identity governance platforms
  • Proven ability to build automation workflows using tools such as Workato or Okta Workflows
  • Strong troubleshooting skills, including diagnosing authentication issues, API failures, and access-related incidents. Must be fluent in interacting with REST APIs and using scripting languages (Python, PowerShell, or similar) to troubleshoot failures or perform bulk operations.
  • Solid understanding of RBAC, identity governance, PAM rollout and strategy, and zero-trust security principles
  • Strong communication skills with the ability to translate technical concepts into clear documentation and processes
  • Familiarity with Google Workspace Enterprise (organizational units, policies, and security configurations)
  • Bachelor’s or Master’s degree in Computer Science, Engineering, or equivalent professional experience

Skills

Required:Okta administration and identity lifecycle managementRBAC and zero-trust securityAutomation tooling (Workato, Okta Workflows, Lumos)Application integrations (SAML, OIDC, OAuth)REST APIs and scripting
Nice to have:Google Workspace familiarity

Benefits

  • Competitive compensation and equity packages
  • Restricted Stock Units
  • Paid time off, paid holidays & leave of absence programs
  • Comprehensive health, dental & vision insurance
  • Employer contributions to HSA account
  • Paid parental leave
  • Paid life insurance, short-term and long-term disability
  • Professional development & tuition reimbursement
  • Mental health & wellness support
  • Commuter benefits (parking & transit)
  • Cell phone stipend
  • 401(k) Retirement plan with company match up to 4% of salary
  • Volunteer time off
  • Global travel insurance & emergency assistance
  • Daily meals allowance
  • Additional perks & programs specific to location
Last updated Jul 15, 2026. Interested? Apply on the company site.

About Crusoe

The AI factory company | Renewable-powered AI infrastructure

Crusoe provides next-gen AI infrastructure and cloud compute using an energy-first approach. Deploy AI workloads at scale with reliable performance and 24/7 support.

AI infrastructureData centersEdge computingGPU computingRenewable energycloud computeenergy-first approachsetter-30

More open roles at Crusoe