Senior IT Identity & Automation Engineer (Okta, SSO)

Baseten; Toronto; Hybrid; CAD 245,000 - 315,000; Full time

Benefits offered by this job

Equity

Flexible PTO

Parental leave

Fertility stipend

401(k)

Job summary

Baseten is hiring an IT Systems Engineer to own the identity, authentication, and automation layer of Baseten’s internal IT environment. You will design and maintain how employees access every system at the company, from the day they’re hired to the day they leave.

This is a senior individual contributor role focused on engineering, not frontline support. You will lead our Okta environment, build automated workflows, and partner with Security to enforce access controls as we scale.

Qualifications

• 6+ years in IT systems or identity engineering.
• Hands-on Okta administration including Identity Engine, Workflows, policies, and lifecycle management.
• Strong knowledge of SAML, OIDC, SCIM, and MFA implementations.
• Proficiency in Python, Bash, or PowerShell and REST APIs.
• Experience administering Google Workspace and an MDM (Kandji or Jamf).
• Security and compliance focus with SOC 2 considerations.
• Clear written and verbal communication for technical and non-technical audiences.

Responsibilities

• Own Okta architecture, configuration, and admin including SSO, MFA, policies, groups, and app integrations.
• Lead Okta migration and integration of apps via SAML, OIDC, and SCIM.
• Design automations for joiner/mover/leaver across HRIS, Okta, Google Workspace, MDM, and SaaS.
• Develop automation with Okta Workflows, REST APIs, and scripting to reduce manual IT work.
• Implement RBAC and least-privilege access with Security; perform periodic reviews.
• Integrate identity with endpoint management for device trust and compliance.
• Support SOC 2 compliance with access controls, audits, and documentation.
• Document systems with runbooks and architecture diagrams; act as escalation for IT Support.

Skills

Okta Administration

SAML/OIDC/SCIM

Scripting (Python/Bash/PowerShell)

Google Workspace

REST APIs

SOC 2 / Security

Documentation & communication

Tools

Okta Workflows

MDM: Kandji/Jamf

Google Workspace Admin

Terraform

AWS IAM

Job description

Baseten is hiring an IT Systems Engineer to own the identity, authentication, and automation layer of Baseten’s internal IT environment. You will design and maintain how employees access every system at the company, from the day they’re hired to the day they leave.

This is a senior individual contributor role focused on engineering, not frontline support. You will lead our Okta environment, build automated workflows, and partner with Security to enforce access controls as we scale.