IT Engineer — Identity & Automation Lead (SF Office)

Decagon; San Francisco (CA); On-site; USD 112,000 - 154,000; Full time

Benefits offered by this job

Medical, Dental, and Vision benefits

Life Insurance and Disability Benefits

401K plan / Retirement

Parental Leave

Fertility and family-building benefits

Wellness stipend

Office lunches and snacks

Generous vacation policy

Job summary

Decagon is seeking an IT Engineer to be the hands-on IT presence for our San Francisco office. You will co-own identity and access management, endpoint administration, and SaaS operations while solving problems at the root to enable scalable growth.

You’ll manage a core SaaS stack (Okta, Google Workspace, Slack, Notion, Rippling, Claude), automate with Python/Bash, and drive security and compliance with least-privilege and MFA practices. This role requires on-site work five days a week in SF.

Qualifications

• 5–7 years of experience in IT systems, endpoint, or identity engineering at a fast-growing company.
• Hands-on administration experience with Okta.
• Working knowledge of SSO, SAML, OIDC, and SCIM.
• Experience managing SaaS platforms such as Google Workspace, Slack, Notion, Rippling and Claude.
• Experience with Mac endpoint management (Rippling or similar MDM).
• Scripting ability in Python or Bash, with real automation you've shipped.
• Strong troubleshooting instincts across systems that touch identity, networking, and SaaS integrations.
• Clear written communication — you'll document as much as you build.
• Comfort with ambiguity and a preference for owning problems end to end.
• Willingness to work in our San Francisco office 5 days a week and provide in-person support alongside longer-term projects.

Responsibilities

• Serve as the on-site IT support engineer for our San Francisco office — resolving hardware, account, and access issues for employees in person and through the ticket queue
• Administer and evolve our core SaaS stack — Okta, Google Workspace, Slack, Notion, and similar tools — as the systems the rest of the company depends on
• Own the employee identity lifecycle: onboarding, off-boarding, and access changes, provisioned accurately and on time through Okta
• Configure and maintain SSO, SAML, OIDC, and SCIM integrations as we bring on new SaaS applications
• Own Mac endpoint management through Rippling MDM including configuration policies, OS/app patching, compliance enforcement
• Automate recurring IT and access-management work using Python, Bash, and tools like Workato or similar
• Support security and compliance efforts — least-privilege access, MFA enforcement, and audit-ready documentation for frameworks like SOC 2
• Write and maintain clear run-books and architecture documentation so the systems you build are usable by the rest of the team
• Identify opportunities to streamline and enhance IT operations at scale

Skills

Identity engineering

Python scripting

Bash scripting

Troubleshooting

Written communication

Ambiguity tolerance

On-site in SF

Tools

Okta

Google Workspace

Slack

Notion

Rippling

Claude

Job description

Decagon is seeking an IT Engineer to be the hands-on IT presence for our San Francisco office. You will co-own identity and access management, endpoint administration, and SaaS operations while solving problems at the root to enable scalable growth.

You’ll manage a core SaaS stack (Okta, Google Workspace, Slack, Notion, Rippling, Claude), automate with Python/Bash, and drive security and compliance with least-privilege and MFA practices. This role requires on-site work five days a week in SF.