IT Systems and Automation Engineer

Next Matter; New York (NY); Hybrid; USD 90,000 - 140,000; Full time

Benefits offered by this job

Unlimited time off

Flexible working

Health, dental and vision plans

401(k) with company match

Equity option plan

Rain Cards for testing core products

Wellness spending

Team summits (domestic and 국제)

Job summary

Rain seeks an experienced IT professional to own end-user support, onboarding, asset management and the SaaS portfolio across multiple offices.

You’ll design automation, manage identity workflows with Okta, and help safeguard security and compliance (SOC 2 Type II, PCI DSS, GDPR) while collaborating with a small, fast-growing team.

If you are hands-on, curious, and comfortable wearing many hats, this hybrid role offers a chance to shape Rain’s global infrastructure.

Qualifications

• 3+ years in IT support, systems engineering or automation at startups.
• Hands-on Okta administration experience (SSO, MFA, Group Rules and Universal Directory).
• Scripting and automation proficiency in Python and JavaScript.
• Experience with Google Workspace, Slack, JumpCloud, CrowdStrike.
• Experience with office networking and AV (UniFi).
• Understanding of SOC 2, PCI DSS and GDPR controls.
• Strong end-user support instincts and clear communication.
• Ability to wear multiple hats in a small team.

Responsibilities

• Own day-to-day end user IT support across hardware, software, accounts and access requests, serving as the primary point of contact through Console helpdesk and Slack.
• Run full IT onboarding and offboarding, including device provisioning through JumpCloud and Apple Business Manager, account setup and the new hire IT and security session.
• Own IT asset and inventory management across all offices, tracking hardware through its full lifecycle from procurement and assignment to refresh and retirement, with an accurate inventory
• Improve and document IT processes, including workflows, runbooks and onboarding guides, and drive down recurring ticket volume.
• Manage the SaaS portfolio, including licenses, renewals, enterprise tier upgrades and rightsizing spend.
• Lead vendor management and vendor security reviews, evaluating new tools, negotiating pricing and terms and onboarding approved vendors.
• Own onsite IT, networking and AV across all Rain offices, including UniFi network management, conference room infrastructure and physical security systems
• Design and build automation that eliminates manual toil across IT, HR and security, from simple scripts to agentic AI workflows.
• Architect and operate identity lifecycle automation in Okta and Okta Workflows, including joiner mover leaver provisioning and instant deprovisioning across the SaaS stack.
• Write and maintain scripts and lightweight internal integrations in Python and JavaScript to connect platforms that lack native integrations.
• Build AI assisted helpdesk deflection and self service flows that resolve common requests automatically and route the rest with context attached.
• Identify high leverage automation opportunities and ship reliable, monitored solutions with proper error handling and alerting.
• Document all automation processes, system architecture and Okta configurations thoroughly so the work is maintainable and knowledge transfers cleanly.
• Support SOC 2 Type II, PCI DSS and GDPR efforts, including evidence collection, access reviews and control monitoring using tools such as Vanta.
• Help enforce endpoint and access security across CrowdStrike, JumpCloud and Okta, including device posture and conditional access.
• Assist with security alert triage and incident response in coordination with the IT Manager.

Skills

IT support

Automation

Okta administration

Python

JavaScript

SaaS management

End user support

Networking

Security awareness

Communication

Tools

JumpCloud

Okta

Google Workspace

Slack

CrowdStrike

Apple Business Manager

UniFi

Vanta

Job description

About the Company

Rain makes the next generation of payments possible across the globe. We’re a lean and mighty team of passionate builders and veteran founders. Our infrastructure makes stablecoins usable in the real-world by powering card transactions, cross-border payments, B2B purchases, remittances, and more. We partner with fintechs, neobanks, and institutions to help them launch solutions that are global, inclusive, and efficient. You will have the opportunity to deliver massive impact at a hypergrowth company that is funded by some of the top investors in fintech, crypto, and SaaS, including Sapphire Ventures, Norwest, Galaxy Ventures, Lightspeed, Khosla, and several more. If you’re curious, bold, and excited to help shape a borderless financial future, we’d love to talk.

Our Ethos

We believe in an open and flat structure. You will be able to grow into the role that most aligns with your goals. Our team members at all levels have the freedom to explore ideas and impact the roadmap and vision of our company.

What you'll do

IT support, Services and Vendor management

• Own day to day end user support across hardware, software, accounts and access requests, serving as the primary point of contact through Console helpdesk and Slack.

• Run full IT onboarding and offboarding, including device provisioning through JumpCloud and Apple Business Manager, account setup and the new hire IT and security session.

• Own IT asset and inventory management across all offices, tracking hardware through its full lifecycle from procurement and assignment to refresh and retirement, with an accurate inventory

• Improve and document IT processes, including workflows, runbooks and onboarding guides, and drive down recurring ticket volume.

• Manage the SaaS portfolio, including licenses, renewals, enterprise tier upgrades and rightsizing spend.

• Lead vendor management and vendor security reviews, evaluating new tools, negotiating pricing and terms and onboarding approved vendors.

• Own onsite IT, networking and AV across all Rain offices, including UniFi network management, conference room infrastructure and physical security systems

Automation, agentic AI and identity engineering

• Design and build automation that eliminates manual toil across IT, HR and security, from simple scripts to agentic AI workflows.

• Architect and operate identity lifecycle automation in Okta and Okta Workflows, including joiner mover leaver provisioning and instant deprovisioning across the SaaS stack.

• Write and maintain scripts and lightweight internal integrations in Python and JavaScript to connect platforms that lack native integrations.

• Build AI assisted helpdesk deflection and self service flows that resolve common requests automatically and route the rest with context attached.

• Identify high leverage automation opportunities and ship reliable, monitored solutions with proper error handling and alerting.

• Document all automation processes, system architecture and Okta configurations thoroughly so the work is maintainable and knowledge transfers cleanly.

Security and Compliance

• Support SOC 2 Type II, PCI DSS and GDPR efforts, including evidence collection, access reviews and control monitoring using tools such as Vanta.

• Help enforce endpoint and access security across CrowdStrike, JumpCloud and Okta, including device posture and conditional access.

• Assist with security alert triage and incident response in coordination with the IT Manager.

You are likely to succeed if you have:

• 3 or more years in IT support, IT systems engineering or automation engineering, ideally at a startup or hypergrowth company.

• Hands on Okta administration experience, including SSO, MFA, Group Rules and Universal Directory, with Okta Workflows a strong plus.

• Scripting and automation proficiency in Python and JavaScript for API interaction and system management.

• Familiarity with a modern SaaS and endpoint stack such as Google Workspace, Slack, JumpCloud, CrowdStrike and more.

• Hands on experience with office networking and AV such as UniFi, and comfort supporting onsite infrastructure across multiple offices.

• A working understanding of compliance frameworks such as SOC 2, PCI DSS and GDPR and how IT controls map to them.

• Strong end user support instincts and excellent written and verbal communication.

• A bias toward action and genuine comfort wearing many hats and filling gaps across corporate IT and security on a small team.

Nice to have:

• Experience in fintech, payments or another regulated and high compliance environment.

• Experience with agentic AI tools and building AI powered internal workflows.

• Vendor negotiation and SaaS cost optimization experience.

Things that enable a fulfilling, healthy and happy experience at Rain:

Unlimited time off Unlimited vacation can be daunting, so we require Rainmakers to take 10 days minimum for themselves.

Flexible working We support a flexible workplace, if you feel comfortable at home please work from home. If you’d like to work with others in an office feel free to come in. We want everyone to be able to work in the environment in which they are their most confident and productive selves. New Rainmakers will have a stipend to create a comfortable atmosphere at home.

Easy to access benefits For US Rainmakers, we offer comprehensive health, dental and vision plans for you and your dependents, as well as a 100% company subsidized life insurance plan.

Retirement goals Plan for the future with confidence. We offer a 401(k) with a 4% company match.

Equity plan We offer every Rainmaker an equity option plan so we can all benefit from our success.

Rain Cards We want Rainmakers to be knowledgeable about our core products and services. To support this mission, we issue a card for our team to utilize the card for testing.

Health and Wellness High performance begins from within. Rainmakers are welcome to use their card for eligible health and wellness spending like gym memberships/fitness classes, massages, acupuncture - whatever recharges you!

Team summits Summits play an important role at Rain! Time spent together helps us get to know each other, strengthen our relationships, and build a common destiny. Expect team and company offsites both domestically and internationally.