IT Systems Engineer

Aalyria; California; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid remote/in-office schedules

Equity options

401(k)

Dental, vision, health, life insurance

Paid time off

Job summary

Aalyria is seeking a hands-on IT Systems Engineer to own the day-to-day operation and continuous improvement of our corporate IT stack. You will work across endpoint management, IAM, cloud infrastructure, automation and compliance in a security-first setting.

Join a modern, cross-functional team influencing how Aalyria operates and scales. The role emphasizes documentation, automation, and collaboration with Engineering, Security, and HR across a hybrid remote/in-office setup.

Qualifications

• 3+ years of experience in a corporate IT, IT engineering, or sysadmin role.
• Hands-on experience with at least one major MDM platform (Jamf Pro, Intune, or equivalent).
• Proficiency with a cloud IdP such as Okta, Azure AD, or JumpCloud.
• Familiarity with at least one public cloud platform (GCP, AWS, or Azure).
• Comfort writing scripts or lightweight automation in Python, Bash, or PowerShell.
• Strong documentation habits and a process-oriented mindset.

Responsibilities

• Endpoint Management: Administer macOS and Windows endpoints using MDM platforms (Jamf Pro, Intune); manage device enrollment and OS patching.
• Identity & Access Management: Administer Okta including SSO, MFA, lifecycle automation, and group policies.
• Cloud & Network Infrastructure: Support GCP (or AWS/Azure) infrastructure and manage VPN and secure remote access tooling.
• Compliance & Security: Support SOC 2, FedRAMP, or CMMC initiatives and maintain documentation in compliance platforms.
• Automation & Documentation: Build automation for IT workflows using Python or Terraform; write SOPs and runbooks.

Skills

3+ years experience

MDM platforms

Okta / IdP

Cloud platforms (GCP/AWS/Azure)

Scripting (Python, Bash, PowerShell)

Documentation & process orientation

Tools

Jamf Pro

Intune

Okta

Terraform

GCP

AWS

Azure

PowerShell

Job description

Role Overview

We're looking for a hands‑on IT Systems Engineer to join our team and own the day-to-day operation and continuous improvement of our corporate IT stack. This is a generalist IC role spanning endpoint management, identity and access management, cloud infrastructure, automation and compliance. You'll work across a modern, security-first environment and have a direct impact on how the company operates and scales.

Key Responsibilities

• Endpoint Management

  • Administer macOS and Windows endpoints using MDM platforms (Jamf Pro, Intune)
  • Manage device enrollment, configuration profiles, OS patching, and compliance policies
  • Own the device lifecycle from provisioning through offboarding and retrieval

• Identity & Access Management

  • Administer Okta (or equivalent IdP) including SSO, MFA, lifecycle automation, and group policies
  • Manage provisioning and deprovisioning workflows integrated with HRIS and downstream SaaS apps
  • Enforce least-privilege access controls across the environment

• Cloud & Network Infrastructure

  • Support GCP (or AWS/Azure) infrastructure for corporate IT workloads
  • Manage VPN, network segmentation, and secure remote access tooling
  • Write and maintain infrastructure-as-code using Terraform or equivalent

• Compliance & Security

  • Support SOC 2, FedRAMP, or CMMC compliance initiatives in partnership with Security
  • Maintain evidence, controls, and documentation in compliance platforms (e.g. Vanta)
  • Respond to audit requests and implement remediation for identified gaps

• Automation & Documentation

  • Build and maintain automation for IT workflows using Python, Cloud Functions, or workflow tools
  • Utilize agentic AI for common tasks
  • Write clear SOPs and runbooks to enable consistent, repeatable operations
  • Collaborate with Engineering, Security, and HR on cross-functional IT initiatives

Required Qualifications

• 3+ years of experience in a corporate IT, IT engineering, or sysadmin role
• Hands‑on experience with at least one major MDM platform (Jamf Pro, Intune, or equivalent)
• Proficiency with a cloud IdP such as Okta, Azure AD, or JumpCloud
• Familiarity with at least one public cloud platform (GCP, AWS, or Azure)
• Comfort writing scripts or lightweight automation in Python, Bash, or PowerShell
• Strong documentation habits and a process-oriented mindset

Preferred Qualifications

• Experience supporting compliance frameworks such as SOC 2, FedRAMP, or CMMC
• Terraform or other IaC experience for managing cloud resources
• Experience with scripting languages such as Python, Shell, and Golang
• Exposure to HRIS-driven provisioning integrations (Rippling, Workday, BambooHR, etc.)
• Background in a security-conscious or regulated industry (defense, gov-tech, fintech)
• Relevant certifications: Google Professional Cloud Engineer, Jamf 200/300, Okta Certified Administrator, CompTIA Security+
• Experience with PAM tooling (Teleport, CyberArk, or similar)
• Working knowledge of zero trust networking (Tailscale, Cloudflare Access, etc.)
• Contributions to open-source tooling or personal homelab/infrastructure projects

What We Offer

• Innovative Environment: Work at a cutting-edge company shaping the future of aerospace communications.
• Impactful Work: Directly contribute to critical national security programs and initiatives.
• Growth Opportunities: Expand your career with opportunities for professional development and advancement.
• Inclusive Culture: Be part of a collaborative, supportive, and inclusive workplace where your contributions matter.
• Flexibility: Flexible working arrangements including hybrid remote/in-office schedules.
• Compensation and Equity: Competitive salary, comprehensive benefits (401(k), dental, vision, health, life insurance), paid time off, and equity options.

ITAR/EAR Requirements

• (A) Qualify as a U.S. person, which includes:
  • U.S. citizen or national
  • U.S. lawful permanent resident (green card holder)
  • Refugee under 8 U.S.C. 1157
  • Asylee under 8 U.S.C. 1158
• (B) Be eligible to access export-controlled information without requiring an export authorization.
• (C) Be eligible and reasonably likely to obtain the necessary export authorization from the appropriate U.S. government agency.

The company reserves the right to decline pursuing an export licensing process for legitimate business-related reasons.

Equal Opportunity Employer Statement

Aalyria is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, disability status, genetic information, protected veteran status, or any other characteristic protected by law. Qualified applicants from all backgrounds are encouraged to apply.

About Aalyria

Aalyria is a leading technology company that supplies la