← All roles

IT Systems Engineer

Thatch· IT / Security
Apply on company site
Austin, TX$145k - $158kFull-timePosted 1w ago

About the role

IT Ops/Systems Engineer responsible for ownership of company-wide identity, access infrastructure, endpoint compliance, and PAM workflows in a Mac-first environment, with automation and scale in mind.

Responsibilities

  • Own our technology stack including Okta, Iru, Mac, iOS, Android, Rippling MDM/SSO, 1Password, Google Workspace, Microsoft Office, Slack, Zoom, Linear, and Notion
  • Drive endpoint fleet compliance to 100% coverage across MDM, EDR, and DLP, and own remediation when devices fall out of compliance
  • Administer conditional access policies (device trust, managed browser enforcement) and own the exception and escalation process when legitimate access gets blocked
  • Own the Privileged Access Management (PAM) workflow, including replacing manual quarterly access reviews with automated request, approval, and time-bound removal
  • Run trusted device and MFA enrollment, and lead remediation campaigns for weak or breached passwords
  • Own the complete employee lifecycle experience from onboarding through offboarding, managing access control, hardware provisioning, and audit-ready documentation
  • Vet and administer new SaaS tooling for SSO/IdP compliance as part of vendor onboarding, expose and remediate shadow IT
  • Build and maintain a knowledge base that empowers employees to solve common issues independently
  • Identify and build automation for repetitive IT and access-management tasks
  • Partner with the Head of IT and Security to support company-wide initiatives and maintain our security posture

Qualifications

  • 4-6 years of hands-on IT support or systems engineering experience in a corporate environment, ideally including some ownership of identity/access infrastructure
  • Certification in Network+, Security+, JAMF, Bettercloud, Okta, or comparable credentials
  • Deep understanding of SSO, 2FA, passkeys, conditional access, and password management systems
  • Experience administering or implementing a PAM tool, or a clear grasp of the concepts and willingness to build one from scratch
  • Strong knowledge of security principles and best practices with proven ability to implement them at scale
  • Excellent follow-through and organizational skills. You never let tasks fall through the cracks

Skills

Required:OktaMac administrationSSO/IdPPAM (Privileged Access Management)MDM/EDR/DLPSecurity fundamentals
Nice to have:Automation

Benefits

  • (Not specified in the description)
Last updated Oct 15, 2026. Interested? Apply on the company site.

About Thatch

Health benefits from the future

Thatch is an all-in-one platform that makes it easy to offer the most personalized healthcare experience to your employees using an ICHRA.

healthcarebenefitsplatform
Company profileWebsite

More open roles at Thatch