Automation-Driven Systems Engineer, Corporate Security

Ramp Corp.; New York, Northern (NY, KY); Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Flexible PTO

Home-office equipment

Health and wellness stipend

Travel budget for in-office costs

Weekly coffee stipend

Health insurance (US)

One Medical membership

401(k) with employer match

Fertility HRA

Parental leave

Job summary

Ramp is hiring a Systems Engineer for Corporate Security to build and operate controls across devices, identities, and AI tooling. The role involves scripting, policy enforcement, and automating configurations to reduce manual work.

You will work with IT, Security Engineering, and AI DevX, report to the Corporate Security lead, and help safeguard the enterprise tech stack with IaC and APIs.

Qualifications

• 3–5 years in Client Platform Engineer/Endpoint Engineering, IAM, or Corporate Security.
• Experience managing macOS at scale with MDM solutions.
• Hands-on knowledge of Okta or similar: SSO, policies, SCIM provisioning, conditional access.
• Scripting ability in Python/Go/Bash; automating against platform APIs.
• Experience with EDR/endpoint vulnerability management (CrowdStrike or similar).
• Ability to balance enforcement, policy, and user friction, and explain decisions clearly.

Responsibilities

• Maintain update policies for OS/software and patching cadence.
• Build automation for endpoint security remediation across EDR, DLP, VPN, and related tooling.
• Maintain device configuration baselines as code with drift detection and hardening.
• Configure Okta policies: SSO, MFA, authenticator enrollment, device trust, conditional access.
• Remediate identity posture gaps surfaced by ISPM tooling.
• Implement and operate controls for enterprise AI usage, including access control and logging.

Skills

macOS management

Okta SSO

Scripting: Python/Go/Bash

EDR & endpoint security

Policy tradeoffs & explanation

Tools

Jamf

Fleet

Kandji

Cloudflare Zero Trust

Terraform

GitHub Actions

CrowdStrike

Job description

Ramp is hiring a Systems Engineer for Corporate Security to build and operate controls across devices, identities, and AI tooling. The role involves scripting, policy enforcement, and automating configurations to reduce manual work.

You will work with IT, Security Engineering, and AI DevX, report to the Corporate Security lead, and help safeguard the enterprise tech stack with IaC and APIs.