← All roles

Systems Engineer, Corporate Security

Ramp· Security
Apply on company site
Hybrid (New York, NY (HQ))$144k - $199kFull-timePosted 1mo ago

About the role

Corporate Security at Ramp owns the security of our internal environment. We are hiring a Systems Engineer to build and operate the controls across device fleet, identity and access, and AI tooling, focusing on automation and integration of security controls.

Responsibilities

  • Maintain update policies for both OS and software, and monitor the fleet so that newly introduced applications are brought into the patching cadence
  • Build automation for endpoint security agent remediation across EDR, DLP, VPN, and similar tooling — detecting missing, stale, or unhealthy agents and bringing devices back into compliance
  • Maintain device configuration baselines as code, including drift detection and hardening standards
  • Configure authentication and authenticator policies in Okta: SSO, MFA and authenticator enrollment, device trust, and conditional access
  • Remediate identity posture gaps surfaced by ISPM tooling: stale accounts, orphaned service principals, over-scoped OAuth grants, MFA gaps, and excess privileges
  • Implement and operate controls for enterprise AI usage, including identity-aware access, logging and retention, DLP where appropriate, and enforcement
  • Automate across these platforms using their APIs, build reporting on control coverage, and document how the controls you build are operated

Qualifications

  • 3–5 years of experience in Client Platform Engineer/Endpoint Engineering, Identity Access & Management, or Corporate Security
  • Hands-on macOS management at scale: MDM (Jamf, Fleet, Kandji, or equivalent) and macOS update mechanisms
  • Working knowledge of an identity provider (Okta or similar): SSO, authentication and authenticator policies, SCIM provisioning, and conditional access
  • Scripting ability in Python, Go, or Bash, and experience automating against platform APIs
  • Experience with EDR and endpoint vulnerability management (CrowdStrike or similar)
  • Ability to evaluate tradeoffs between technical enforcement, policy, and user friction, and to explain those tradeoffs clearly

Skills

Required:OS patch managementEndpoint security automationInfrastructure as code (config as code)Okta administrationIdentity and access managementAI security controls

Benefits

  • Flexible PTO
  • Centralized home-office equipment ordering
  • Health and wellness stipend
  • Budget for intra-office travel
  • Weekly coffee stipend
  • 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents (United States)
  • One Medical annual membership (US)
  • 401(k), including employer match (US)
  • Fertility HRA (US)
  • Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay (US)
  • Parental leave and related benefits (Canada/UK variants described in listing)
  • Relocation expense coverage to NYC or SF (if needed)
Last updated Oct 22, 2026. Interested? Apply on the company site.
Ramp logo

About Ramp

ai-agents-and-applicationsfinopsfintechpaymentsproductivitysetter-30setter-30-2026-q1wing-list-2026
Company profileWebsite

More open roles at Ramp