IT Infrastructure Engineer

United States Digital Space LLC; San Francisco (CA); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Flexible (unlimited) paid time off

Medical, dental, and vision benefits

Life insurance and disability benefits

Retirement plan dependent on country

Parental leave

Fertility and family building benefits

Lunch, snacks and coffee

Discretionary benefit stipend

Free alphorn lessons

Job summary

United States Digital Space LLC is seeking an IT Infrastructure Engineer to scale internal systems during a growth phase. You will be the first hire on our internal IT team, collaborating with IT Lead, GRC Lead, and Engineering to build foundational infrastructure, strengthen security, and streamline operations.

Key projects include migrating from Google Workspace to Okta, integrating real-time device posture signals, automating user lifecycle workflows, deploying enterprise DLP, and building

Qualifications

• 4–8 years in IT infrastructure roles.
• Familiarity with Google Workspace, Okta, Vanta, AWS and HRIS systems.
• Strong knowledge of SAML, SCIM, OAuth/OIDC, REST APIs and IaC.
• Proficiency in Python, Bash, JavaScript and Terraform; React is a plus.
• Ability to operate independently in a fast-paced startup.

Responsibilities

• Lead migration from Google Workspace Identity to Okta and design a scalable identity foundation.
• Integrate real-time device posture signals into conditional-access policies.
• Develop identity-analytics to automate orphaned accounts and anomalous-login detection.
• Create automated user-lifecycle workflows from provisioning to deprovisioning.
• Deploy enterprise DLP and automate asset tagging and policy enforcement.
• Build integrations between internal systems and the compliance automation platform.
• Drive IT automation using Bash, Python, and low-code platforms.
• Develop scalable internal tools that integrate with business systems via APIs.
• Manage SaaS lifecycle workflows with emphasis on security and compliance.

Skills

Identity & Access Mgmt

Okta

Google Workspace

AWS

Vanta

HRIS systems

SAML/SCIM/OAuth

REST APIs

Infrastructure as Code

Python Bash

Terraform

React

Job description

About usAt the company, we're building a platform to enable every company in the world to build better, more human customer experiences with AI. We partner with industry leaders such as SoftBank, Uber, Rivian, CLEAR, and Sutter Health. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia.

We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and Family. These values are the foundation of our work, and we are committed to upholding them in everything we do.

Our co-founders are Bret Taylor and Clay Bavor. Bret currently serves as Board Chair of OpenAI. Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook. Bret was also one of Google's earliest product managers and co-creator of Google Maps. Before founding the company, Clay spent 18 years at Google, where he most recently led Google Labs. Earlier, he started and led Google's AR/VR effort, Project Starline, and Google Lens. Before that, Clay led the product and design teams for Google Workspace.

What you'll doAs an IT Infrastructure Engineer, you'll play a key role in scaling our internal systems during a critical phase of growth. As the first hire on our internal IT team, you'll collaborate with our IT Lead, GRC Lead, and Engineering team to build foundational infrastructure, strengthen security, and streamline operations.

• Identity & Access Management: Lead the migration from Google Workspace Identity to Okta, designing a scalable, secure identity foundation across the organization.

• Integrate real-time device posture signals into conditional-access policies using a modern endpoint-compliance solution.

• Implement an identity-analytics capability to automate orphaned-account discovery, anomalous-login detection, and access-review workflows.

• Onboarding & Offboarding Workflows: Develop automated user-lifecycle pipelines (provisioning through deprovisioning) to reduce manual provisioning time.

• Data Loss Prevention: Deploy enterprise DLP and endpoint-based DLP solutions; automate asset tagging and policy enforcement.

• Systems Integration & Compliance: Build integrations between internal systems and our compliance automation platform to support audits, reporting, and operational efficiency.

• IT Automation & Scripting: Drive efficiency through automation using Bash, Python, and low-code platforms to streamline routine IT processes.

• Internal Tools & Integrations: Build and maintain scalable internal tools that integrate with business systems via APIs to support operations and compliance.

• SaaS & Compliance Workflows: Manage SaaS lifecycle processes with a focus on compliance, security, and operational best practices.

• Enterprise IT Environment: Operate effectively within enterprise-scale environments, balancing speed with reliability and security.

• Device Compliance & Conditional Access: Integrate real-time device posture signals into conditional-access policies using a modern endpoint-compliance solution.

• Identity Analytics & Access Governance: Implement an identity-analytics capability to automate orphaned-account discovery, anomalous-login detection, and access-review workflows.

What you'll bring 4-8 years in IT infrastructure, software engineering, or related roles

• Familiarity with tools and platforms such as Google Workspace, Okta, Vanta, AWS, and HRIS systems

• Strong understanding of SAML, SCIM, OAuth/OIDC, REST APIs, and Infrastructure as Code (IaC) practices

• Proficiency in Python, Bash, JavaScript, and Terraform; experience with React is a plus

• Ability to operate independently with minimal oversight, bringing a systems-thinking approach to a fast-paced startup environment

Even better… Familiarity with IT compliance areas such as access audits, data residency planning, and control implementation

• Experience working with security tools and integrations, including CASB, EDR, and MDM solutions

• Track record of building internal IT documentation and onboarding guides

Our values Trust: We'll build trust with our customers with our accountability, empathy, quality, and responsiveness. We build trust in AI by making it more accessible, safe, and useful. We'll build trust with each other by showing up for each other professionally and personally, creating an environment that enables all of us to do our best work.

• Customer Obsession: We deeply understand our customers’ business goals and relentlessly focus on driving outcomes, not just technical milestones. Everyone at the company knows and spends time with our customers. When our customer is having an issue, we drop everything and fix it.

• Craftsmanship: We get the details right, from the words on the page to the system architecture. We have good taste. When we notice something isn't right, we take the time to fix it. We are proud of the products we produce. We continuously self-reflect to continuously self-improve.

• Intensity: We know we don’t have the luxury of patience. We play to win. We care about our product being the best, and when it isn’t, we fix it. When we fail, we talk about it openly and without blame so we succeed the next time.

• Family: We know that balance and intensity are compatible, and we model it in our actions and processes. We are the best technology company for parents. We support and respect each other and celebrate each other's personal and professional achievements.

What we offerWe want our benefits to reflect our values and offer the following to full-time employees:

• Flexible (unlimited) paid time off

• Medical, dental, and vision benefits for you and your family

• Life insurance and disability benefits

• Retirement plan dependent on country of employment

• Parental leave

• Fertility and family building benefits through Carrot

• Lunch, as well as delicious snacks and coffee to keep you energized

• Discretionary benefit stipend giving people the ability to spend where it matters most

• Free alphorn lessons

These benefits are further detailed in the company's policies, may vary by region, and are subject to change at any time, consistent with the terms of any applicable compensation or benefits plans. Eligible full-time employees can participate in the company's equity plans subject to the terms of the applicable plans and policies.

Be you, with usWe're working to bring the transformative power of AI to every organization in the world. To do so, it is important to us that the diversity of our employees represents the diversity of our customers. We believe that our work and culture are better when we encourage, support, and respect different skills and experiences represented within our team. We encourage you to apply even if your experience doesn't precisely match the job description. We strive to evaluate all applicants consistently without regard to race, color, religion, gender, national origin, age, disability, veteran status, pregnancy, gender expression or identity, sexual orientation, citizenship, or any other legally protected class.