IT Engineer

Doist; Boston (MA); On-site; USD 90,000 - 150,000; Full time

Job summary

7AI is seeking an IT Engineer to run IT operations end-to-end — identity, endpoints, SaaS and business systems administration, and onboarding/offboarding.

You'll be the first technical contact for IT needs and will partner with our security program to keep a fast-moving, productive environment as we scale, administering Okta, Jamf Pro, Google Workspace, Salesforce, and more.

Qualifications

• 5+ years IT engineering at a fast-growing technology company.
• Deep Okta administration: SAML/OIDC, SCIM, lifecycle policies.
• Jamf Pro and macOS endpoint management fluency with scripting.
• Experience automating onboarding/offboarding with code.
• Hands-on admin of broad SaaS estate (Google Workspace, GitHub, Salesforce, etc.).
• Ability to collaborate with Sales Ops, Finance, and People on access controls.
• Calm, low-friction operator capable of handling incidents and executive IT requests.

Responsibilities

• Administer Okta as the front door for business apps with SAML/OIDC and SCIM.
• Automate employee onboarding and offboarding end-to-end.
• Manage SaaS and business systems (Salesforce, Zoom, Slack, Google Workspace) including config, integrations, and licensing.
• Oversee the Jamf-administered macOS fleet: provisioning, patching, and day-to-day endpoint ops.
• Maintain an accurate inventory of SaaS, integrate apps with SSO/SCIM, prune unused accounts and tokens.
• Partner with Finance on SaaS licensing, renewals, and rationalization as the estate grows.
• Support the security team's phishing-awareness program, evidence collection, and detection tuning.
• Serve as first IT responder with SLAs and scale the function as the company grows.

Skills

Okta administration

SAML/OIDC/SCIM

Automation / scripting

Python

Bash

IT operations

SaaS administration

MacOS management

Cross-functional collaboration

Tools

Jamf Pro

Google Workspace

Salesforce

GitHub

Job description

7AI is looking for an IT Engineer to run IT operations end-to-end — identity, endpoints, SaaS and business systems administration, and onboarding/offboarding. You'll be the first technical point of contact for the company's IT needs and partner closely with our security program to keep a fast-moving, technical company productive and well-governed as we scale.

What you'll do

• Administer Okta as the front door for every business application: SAML/OIDC, SCIM, lifecycle policies, and access provisioning across AWS, GitHub, Salesforce, and the broader SaaS estate.
• Automate employee onboarding and offboarding end-to-end, replacing manual runbooks with code.
• Own day-to-day administration of our SaaS and business systems — Salesforce, Zoom, Slack, Google Workspace, and similar — including configuration, integrations, user and license management, and support for the teams that depend on them.
• Manage the Jamf-administered macOS fleet: default provisioning, software allowlisting, patching, and day-to-day endpoint operations.
• Maintain an accurate inventory of the SaaS estate, integrate apps with SSO/SCIM, and prune unused accounts, licenses, and API tokens.
• Partner with Finance and system owners on SaaS licensing, renewals, and rationalization as the estate grows.
• Support the security team's phishing-awareness program, audit evidence collection, and corporate detection tuning.
• Serve as first responder for IT issues across the company, setting SLAs and growing the function as we scale.

Requirements

• 5+ years of IT engineering experience at a fast-growing technology company.
• Deep Okta administration expertise: SAML/OIDC, SCIM, lifecycle policies, and workflows.
• Jamf Pro and macOS endpoint management fluency, with scripting in Python, Bash, or similar.
• A track record of automating onboarding/offboarding and replacing manual access processes with code.
• Hands-on experience administering a broad SaaS estate spanning engineering and business systems (Google Workspace, GitHub, 1Password, Salesforce, Zoom, Slack, etc.).
• Comfort supporting business-critical systems owned by other teams — able to work with Sales Ops, Finance, and People on configuration and access without needing to be the domain expert.
• A calm, low-friction operator presence — able to handle an incident, an executive IT request, and a fleet rollout in the same morning.