IT Engineer, US

engineeringjobs.net, Inc.; Town of Montana (WI); On-site; USD 90,000 - 150,000; Full time

Job summary

Ema is building the Universal AI Employee and is hiring its first dedicated IT Engineer to own corporate IT end to end: identity, devices, SaaS and compliance across 200+ devices in the US, UK, Canada and India.

This isn't a help desk role. You'll automate IT workflows with agentic tooling to minimize manual work and improve every employee's IT experience over time.

Qualifications

• 2–4 years in IT systems, endpoint or identity engineering.
• Hands-on Okta (or similar IdP) and Google Workspace administration.
• Working knowledge of SSO, SAML, OIDC and SCIM.
• Mac endpoint management experience (Kandji or similar).
• Python or Bash scripting, with at least one shipped automation you can walk us through.

Responsibilities

• Automate recurring IT tasks using Python, Bash, APIs, Okta Workflows and AI coding tools.
• Own the joiner, mover and leaver lifecycle with People Ops via Rippling, Okta, SCIM, including access reviews.
• Administer Okta, Google Workspace, Slack and Atlassian; configure SSO (SAML/OIDC), SCIM and MFA across all apps.
• Manage the Mac fleet in Kandji: enrollment, automated OS patching, encryption baselines and drift detection.
• Maintain SaaS inventory and usage programmatically, and reclaim unused licenses automatically.
• Generate evidence for SOC 2, ISO 27001 and AI governance frameworks continuously, as a byproduct of automated operations.
• Maintain runbooks, a knowledge base and an integration registry; provide Tier 1/2 support within defined SLAs.
• Be the go-to for Finance and HR on tool access, licensing, renewals and billing.

Skills

Identity engineering

Okta administration

Google Workspace administration

SSO/SAML/OIDC

Kandji / Mac MDM

Python or Bash scripting

SaaS & Licensing knowledge

IT troubleshooting

Tools

Okta

Kandji

Google Admin Console

OKta Workflows

Job description

About Ema

Ema is building the world's leading Agentic AI platform to transform enterprise productivity. We enable organizations to delegate repetitive tasks to Ema, the Universal AI Employee, delivering 10x gains in workforce efficiency, across functions. Founded by former executives from Google, Coinbase, Flipkart, and Okta, our team includes engineers from premier tech companies and graduates of Stanford, MIT, UC Berkeley, CMU, and IITs.

We are backed by industry leading investors including Accel, Naspers/Prosus, Section32, and angels like Sheryl Sandberg and Dustin Moskovitz. Headquartered in Silicon Valley and with offices in London, Bangalore and Vancouver, Ema is at the frontier of what Agentic AI can do in production --- we ship real systems that run real business processes at scale.

About the role

Ema is building the Universal AI Employee, and we expect our own operations to run the same way. We're hiring our first dedicated IT Engineer to own corporate IT end to end: identity, devices, SaaS and compliance across 200+ devices in the US, UK, Canada and India.

This isn't a help desk role. You'll run IT while systematically automating it, using agentic tooling to remove manual work rather than absorb it. Success is measured by how little of the job is still manual after a year, and how good every employee's IT experience is.

What you’ll do

• Treat every recurring task as an automation candidate, building workflows with Python, Bash, APIs, Okta Workflows and AI coding tools
• Own the joiner, mover and leaver lifecycle with People Ops via Rippling ? Okta ? SCIM, moving it from tickets to policy-driven automation, including access reviews
• Administer Okta, Google Workspace, Slack and Atlassian; configure SSO (SAML/OIDC), SCIM and MFA across all apps
• Manage the Mac fleet in Kandji: enrollment, automated OS patching, encryption baselines and continuous drift detection
• Maintain SaaS inventory and usage programmatically, and reclaim unused licenses automatically
• Generate evidence for SOC 2, ISO 27001 and AI governance frameworks continuously, as a byproduct of automated operations
• Maintain runbooks, a knowledge base and an integration registry; provide Tier 1/2 support within defined SLAs
• Be the go-to for Finance and HR on tool access, licensing, renewals and billing

What success looks like

• 90 days:Onboarding and offboarding are automated end to end; SaaS inventory is live and license reclamation is running
• 6 months:Most recurring IT work is automated, audit evidence is always ready, and InfoSec is off IT tickets

What we’re looking for

• A strong instinct to eliminate repetitive work, with hands-on use of AI coding tools
• 2--4 years in IT systems, endpoint or identity engineering
• Hands-on Okta (or similar IdP) and Google Workspace administration
• Working knowledge of SSO, SAML, OIDC and SCIM
• Mac endpoint management experience (Kandji or similar)
• Python or Bash scripting, with at least one shipped automation you can walk us through
• Strong troubleshooting across identity, SaaS and networking
• Precise documentation, clear written communication and sound judgment on security and compliance risk

Nice to have

• Okta Workflows or an iPaaS (Workato, Tines, Zapier)
• SOC 2 / ISO 27001 experience
• AWS/GCP admin or Terraform
• Okta or Kandji certifications

Why Ema

• First owner of corporate IT at an agentic AI company. You build it, not inherit it.
• Automate an entire corporate function with the same kind of agentic tooling we build for customers.
• Work closely with InfoSec, with a clear path into security engineering.

Compensation offered will be determined by factors such as location, level, job-related knowledge, skills, and experience. Certain roles may be eligible for variable compensation, equity, and benefits.

Ema Unlimited is an equal opportunity employer and is committed to providing equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, or genetics.