IT Engineer

SOLANA FOUNDATION; Northern (KY); Hybrid; USD 55,000 - 75,000; Full time

Benefits offered by this job

Remote-first team

Medical, vision & dental benefits

Flexible PTO

Job summary

Ondo Finance is seeking a motivated IT Engineer to join our Corporate IT team. This junior but high-impact role combines hands-on IT operations with identity, access, endpoint management, and lifecycle workflows in a SaaS-first environment.

You will grow with the team, supporting IAM platforms (Okta, Azure AD), SSO/SCIM integrations, macOS management, and low-code automations, while delivering reliable Tier 1–2 IT support in a remote setting.

Qualifications

• 2–3 years of IT support/operations experience.
• Tier 1–2 IT support in SaaS-heavy environments.
• IAM fundamentals: SSO, SCIM, MFA, RBAC.
• Hands-on IAM with Okta/Azure AD or similar.
• Experience with Google Workspace or Microsoft 365.
• macOS support or strong endpoint basics.
• CLI comfort; ability to read/modify scripts.
• Strong writing and documentation skills.
• Able to work remotely and independently.
• Microsoft-centric backgrounds welcomed with Okta learning curve.

Responsibilities

• Identity, Access & SaaS operations including IAM platforms.
• Assist with SSO and SCIM integrations across SaaS apps.
• Enforce least-privilege access and perform access reviews.
• Provision/deprovision accounts and lifecycle workflows.
• Support macOS endpoint management and device lifecycle.
• Coordinate device shipping, replacements, and offboarding.
• Build low-code/no-code automations (Okta Workflows).
• Document processes and improve automation; reduce risk.
• Provide Tier 1–2 IT support and assist vendor lifecycle.

Skills

IAM basics

Okta

Azure AD

SCIM

MFA

RBAC

SaaS support

macOS support

CLI

Scripting

Tools

Okta Workflows

Google Workspace

Microsoft 365

Job description

IT Engineer

About the company

Hi, we're Ondo Finance. Our mission is to provide institutional-grade, blockchain-enabled investment products and services. We have both a technology arm that develops decentralized finance technology, and an asset management arm that creates and manages tokenized funds. We were the first company to tokenize exposure to US Treasuries, and have since expanded into several other assets. We are also focused on incubating protocols that can support both tokenized real-world assets and traditional crypto.

Founded by folks from Goldman Sachs Digital Assets Team, we're backed by some of the best investors in the world including Founders Fund, Coinbase Ventures, Pantera Capital, Tiger Global, and more. We are currently the leaders in the space in terms of AUM and are well capitalized to continue growing the firm. We're fully remote, with team members across the U.S.

About the role

We are seeking a motivated, systems-oriented IT Engineer to join our Corporate IT team. This role combines hands-on IT operations and Tier 1–2 support with ownership of identity, access, endpoint management, and employee lifecycle workflows.

You will work closely with the IT Operations Engineer and Security team to operate and continuously improve a modern, SaaS-first, highly automated IT environment. This is a junior but high-impact role designed for someone who wants to grow into identity-driven, automation-focused IT.

Responsibilities

Identity, Access & SaaS Operations

• Support day-to-day administration of IAM platforms such as Okta (or similar IdPs), including user lifecycle workflows, access provisioning, group management, and MFA.
• Assist with SSO and SCIM integrations between IAM systems and SaaS platforms such as Google Workspace, Slack, Notion, and other internal tools.
• Help enforce least-privilege access principles and support periodic access reviews and audits.
• Execute secure and timely access provisioning and deprovisioning aligned with documented lifecycle processes.

Endpoint & Device Management

• Support macOS endpoint management using Addigy, Iru, or similar platforms.
• Assist with device enrollment, compliance monitoring, troubleshooting, and lifecycle workflows.
• Coordinate device preparation, shipping, replacements, and secure device recovery for offboarding employees.
• Help maintain endpoint security standards and configuration baselines.

Employee Lifecycle & Automation

• Execute and coordinate end-to-end onboarding and offboarding processes, including:
  • Account provisioning and access configuration
  • Device setup and logistics
  • Role-based access enforcement
  • Secure deactivation and asset recovery
• Assist in building and maintaining low-code / no-code automations (e.g., Okta Workflows) to reduce manual effort and increase reliability.
• Ensure lifecycle processes are documented, repeatable, and auditable.
• Identify opportunities to improve lifecycle efficiency and reduce operational risk.

Tier 1 & 2 IT Support

• Provide day-to-day IT support across identity, SaaS applications, access issues, and macOS endpoints.
• Serve as an escalation point for more complex access, integration, or device issues.
• Perform structured troubleshooting and root-cause analysis rather than applying temporary fixes.
• Identify recurring operational problems and contribute to durable, system-level improvements.

Vendor Lifecycle & IT Operations

• Support vendor onboarding, evaluation, and renewals.
• Assist with SaaS access reviews and vendor offboarding.
• Help maintain visibility into vendor usage, contracts, and lifecycle status.
• Contribute to improving procurement and asset tracking processes.

Requirements

• 2–3 years of experience in IT support, IT operations, or systems-focused roles.
• Experience providing Tier 1–2 IT support in a SaaS-heavy environment.
• Solid understanding of identity and access management fundamentals, including SSO, SCIM, MFA, and RBAC.
• Hands-on experience with IAM platforms such as Okta, Azure AD, or similar.
• Experience supporting Google Workspace or Microsoft 365 environments.
• Experience supporting macOS environments or strong endpoint fundamentals.
• Comfort working in a terminal / CLI environment appropriate to experience level.
• Ability to read and modify scripts written in Python, Bash, or PowerShell.
• Strong written communication and documentation skills.
• Ability to work independently in a fully remote environment.

Backgrounds in Microsoft-centric environments (O365, Azure AD, Intune) are welcome, provided there is comfort learning Okta and SaaS-first tooling.

Nice to haves

• Experience with endpoint management platforms such as Addigy, JAMF, Iru, or Intune.
• Experience building or maintaining low-code / no-code automations (e.g., Okta Workflows).
• Exposure to SaaS-first, identity-driven IT architectures.
• Familiarity with vendor management, procurement workflows, or asset lifecycle tracking.
• Interest in identity governance, security-adjacent work, or enterprise automation.
• Relevant certifications (Okta certifications, CompTIA A+/Network+/Security+, Google Workspace, Microsoft certifications).

What we offer

• Competitive compensation including salary and/or equity (according to your preferences) — we're well-funded and believe that great talent deserves great compensation
• Full benefits (medical, vision, and dental) and flexible vacation policy (PTO)
• Small remote-first team across many countries — you'll be an early team member helping shape our vision, culture, and design practices
• A+ colleagues — our team includes alumni from: Goldman Sachs, Blackrock, Two Sigma, Bridgewater, SpaceX, AWS, Meta, Google, Pinterest, McKinsey, Circle, Uniswap, Phantom
• Best-in-class investors — we are proud to be backed by leading crypto experts and VCs, including Pantera Capital, Founders Fund and Coinbase Ventures