IT Engineer

Ondo; New York (NY); Teletrabalho; USD 85 000 - 120 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Competitive pay and equity

Benefits package

Flexible vacation (PTO)

Remote-first team across countries

Alumni from top firms

Resumo da oferta

Ondo Finance seeks an IT Engineer to join its fully remote Corporate IT team. This junior but high‑impact role covers identity, access, endpoint management, and employee lifecycle workflows in a SaaS‑first, automated IT environment.

You will support IAM platforms like Okta and Azure AD, help with SSO/SCIM integrations, and contribute to low‑code automation to improve efficiency. The role offers growth into identity‑driven IT within a fast‑growing crypto/fintech company.

Qualificações

• 2–3 years of experience in IT support, IT operations, or systems-focused roles.
• Experience providing Tier 1–2 IT support in a SaaS-heavy environment.
• Solid understanding of identity and access management fundamentals, including SSO, SCIM, MFA, and RBAC.
• Hands‑on experience with IAM platforms such as Okta, Azure AD, or similar.
• Experience supporting Google Workspace or Microsoft 365 environments.
• Experience supporting macOS environments or strong endpoint fundamentals.
• Comfort working in a terminal / CLI environment.
• Ability to read and modify scripts written in Python, Bash, or PowerShell.
• Strong written communication and documentation skills.
• Ability to work independently in a fully remote environment.
• Backgrounds in Microsoft-centric environments (O365, Azure AD, Intune) are welcome, provided there is comfort learning Okta and SaaS-first tooling.

Responsabilidades

• Identity, Access & SaaS Operations: Support IAM lifecycle, provisioning, MFA, group mgmt, and SSO integrations.
• Assist with SCIM integrations between IAM and SaaS platforms such as Google Workspace, Slack, Notion, and internal tools.
• Help enforce least-privilege access and conduct access reviews and audits.
• Execute secure access provisioning and deprovisioning per lifecycle processes.
• Endpoint & Device Management: Support macOS endpoint management using Addigy, Iru, or similar.
• Assist with device enrollment, compliance monitoring, troubleshooting, and lifecycle workflows.
• Coordinate device preparation, shipping, replacements, and secure recovery for offboarding.
• Help maintain endpoint security standards and configuration baselines.
• Employee Lifecycle & Automation: Coordinate onboarding/offboarding, including account provisioning and device setup.
• Build/maintain low-code/no-code automations (e.g., Okta Workflows) to reduce manual work.
• Ensure lifecycle processes are documented, repeatable, and auditable.
• Identify opportunities to improve lifecycle efficiency and reduce risk.
• Tier 1 & 2 IT Support: Provide day-to-day IT support across identity, SaaS apps, access, and macOS endpoints.
• Escalation point for complex access/integration/device issues.
• Perform structured troubleshooting and root-cause analysis.
• Identify recurring problems and contribute to system-wide improvements.
• Vendor Lifecycle & IT Operations: Support vendor onboarding, evaluation, and renewals.
• Assist with SaaS access reviews and vendor offboarding.
• Help maintain visibility into vendor usage and lifecycle status.
• Contribute to procurement and asset-tracking processes.

Conhecimentos

IAM fundamentals

SSO

SCIM

MFA

RBAC

Okta

Azure AD

Google Workspace

macOS

Python

Bash

PowerShell

CLI

Documentation

Remote work

Ferramentas

Okta

Azure AD

Google Workspace

Slack

Notion

Microsoft 365

Addigy

Intune

Iru

Descrição da oferta de emprego

IT Engineer

Hi, we're Ondo Finance. Our mission is to provide institutional-grade, blockchain-enabled investment products and services. We have both a technology arm that develops decentralized finance technology, and an asset management arm that creates and manages tokenized funds. We were the first company to tokenize exposure to US Treasuries, and have since expanded into several other assets. We are also focused on incubating protocols that can support both tokenized real-world assets and traditional crypto.Founded by folks from Goldman Sachs Digital Assets Team, we're backed by some of the best investors in the world including Founders Fund, Coinbase Ventures, Pantera Capital, Tiger Global, and more. We are currently the leaders in the space in terms of AUM and are well capitalized to continue growing the firm. We're fully remote, with team members across the U.S.

About the role

We are seeking a motivated, systems-oriented IT Engineer to join our Corporate IT team. This role combines hands‑on IT operations and Tier 1–2 support with ownership of identity, access, endpoint management, and employee lifecycle workflows. You will work closely with the IT Operations Engineer and Security team to operate and continuously improve a modern, SaaS‑first, highly automated IT environment. This is a junior but high‑impact role designed for someone who wants to grow into identity‑driven, automation‑focused IT.

Responsibilities

Identity, Access & SaaS Operations

• Support day-to-day administration of IAM platforms such as Okta (or similar IdPs), including user lifecycle workflows, access provisioning, group management, and MFA.
• Assist with SSO and SCIM integrations between IAM systems and SaaS platforms such as Google Workspace, Slack, Notion, and other internal tools.
• Help enforce least‑privilege access principles and support periodic access reviews and audits.
• Execute secure and timely access provisioning and deprovisioning aligned with documented lifecycle processes.

Endpoint & Device Management

• Support macOS endpoint management using Addigy, Iru, or similar platforms.
• Assist with device enrollment, compliance monitoring, troubleshooting, and lifecycle workflows.
• Coordinate device preparation, shipping, replacements, and secure device recovery for offboarding employees.
• Help maintain endpoint security standards and configuration baselines.

Employee Lifecycle & Automation

• Execute and coordinate end-to-end onboarding and offboarding processes, including: Account provisioning and access configuration, Device setup and logistics, Role-based access enforcement, Secure deactivation and asset recovery.
• Assist in building and maintaining low-code / no-code automations (e.g., Okta Workflows) to reduce manual effort and increase reliability.
• Ensure lifecycle processes are documented, repeatable, and auditable.
• Identify opportunities to improve lifecycle efficiency and reduce operational risk.

Tier 1 & 2 IT Support

• Provide day-to-day IT support across identity, SaaS applications, access issues, and macOS endpoints.
• Serve as an escalation point for more complex access, integration, or device issues.
• Perform structured troubleshooting and root‑cause analysis rather than applying temporary fixes.
• Identify recurring operational problems and contribute to durable, system-level improvements.

Vendor Lifecycle & IT Operations

• Support vendor onboarding, evaluation, and renewals.
• Assist with SaaS access reviews and vendor offboarding.
• Help maintain visibility into vendor usage, contracts, and lifecycle status.
• Contribute to improving procurement and asset tracking processes.

Requirements

• 2–3 years of experience in IT support, IT operations, or systems-focused roles.
• Experience providing Tier 1–2 IT support in a SaaS-heavy environment.
• Solid understanding of identity and access management fundamentals, including SSO, SCIM, MFA, and RBAC.
• Hands‑on experience with IAM platforms such as Okta, Azure AD, or similar.
• Experience supporting Google Workspace or Microsoft 365 environments.
• Experience supporting macOS environments or strong endpoint fundamentals.
• Comfort working in a terminal / CLI environment appropriate to experience level.
• Ability to read and modify scripts written in Python, Bash, or PowerShell.
• Strong written communication and documentation skills.
• Ability to work independently in a fully remote environment.
• Backgrounds in Microsoft-centric environments (O365, Azure AD, Intune) are welcome, provided there is comfort learning Okta and SaaS-first tooling.

Nice to haves

• Experience with endpoint management platforms such as Addigy, JAMF, Iru, or Intune.
• Experience building or maintaining low-code / no-code automations (e.g., Okta Workflows).
• Exposure to SaaS-first, identity-driven IT architectures.
• Familiarity with vendor management, procurement workflows, or asset lifecycle tracking.
• Interest in identity governance, security‑adjacent work, or enterprise automation.
• Relevant certifications (Okta certifications, CompTIA A+/Network+/Security+, Google Workspace, Microsoft certifications).

What we offer

• Competitive compensation including salary and/or equity (according to your preferences) — we're well‑funded and believe that great talent deserves great compensation
• Full benefits (medical, vision, and dental) and flexible vacation policy (PTO)
• Small remote‑first team across many countries — you'll be an early team member helping shape our vision, culture, and design practices
• A+ colleagues — our team includes alumni from: Goldman Sachs, Blackrock, Two Sigma, Bridgewater, SpaceX, AWS, Meta, Google, Pinterest, McKinsey, Circle, Uniswap, Phantom
• Best-in-class investors — we are proud to be backed by leading crypto experts and VCs, including Pantera Capital, Founders Fund and Coinbase Ventures