IT Systems Engineer Austin, New York City, San Francisco

Vercel Inc.; San Francisco (CA); On-site; USD 180,000 - 288,000; Full time

Benefits offered by this job

Competitive salary

Equity

Health insurance

Paid time off

Parental leave

Professional development stipend

Lunch & commuter benefits (SF office)

Job summary

Vercel is hiring an IT Systems Engineer to strengthen identity and device management for our global team. This hands-on role focuses on IAM, MDM, security, and automation, with opportunities to use Terraform and AI to improve IT workflows.

You will partner with IT and Security to implement least-privilege access, maintain Okta configurations, and expand infrastructure as code across our systems. Office days required in SF, NY, or ATX.

Qualifications

• Strong hands-on IT systems engineering with IAM or MDM focus.
• Experience administering Okta and SAML/OIDC/SCIM.
• MDM platform experience: Jamf, Kandji/Iru, Intune.
• Security fundamentals: least privilege, endpoint hardening.
• Scripting with Python or Bash and API automation.
• AI use in IT operations with code review.
• Ability to document decisions and share with teams.

Responsibilities

• Configure Okta with SSO, MFA, groups, and provisioning.
• Build onboarding and offboarding workflows.
• Maintain MDM enrollment, deployment, and security controls.
• Define least-privilege access in partnership with Security.
• Develop scripts and automations across Okta, MDM, Google Workspace, Slack.
• Expand IT systems management through code with Terraform.
• Use AI tools to accelerate troubleshooting and documentation.
• Serve as escalation for identity, device, and system issues.
• Support AWS IAM configurations as part of IT environment.
• Maintain clear documentation of configurations and policies.

Skills

IAM expertise

MDM expertise

Okta admin

SAML/OIDC/SCIM

Python scripting

Bash scripting

AI in IT ops

Troubleshooting

Tools

Okta

Jamf

Kandji/Iru

Intune

Terraform

Google Workspace

Slack

APIs

Job description

About Vercel:

Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience.

Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide.

About the Role

We’re hiring an IT Systems Engineer to help build, secure, and improve the systems our employees rely on every day, with a particular focus on identity and access management (IAM) and mobile device management (MDM).

You’ll share ownership with our IT and Security engineers to improve how we manage identities, application access, and devices. This is a hands‑on role that combines technical configuration, security judgment, and automation. We’re looking for someone who uses AI effectively to troubleshoot, build, and improve IT workflows. Experience managing IT systems as code using Terraform is a strong plus.

This role requires in‑office anchor days on Monday, Tuesday, and Friday from one of our offices (SF, NY, or ATX).

What You Will Do

• Configure and improve Okta, including application integrations, single sign-on (SSO), multi‑factor authentication (MFA), groups, access policies, and automated provisioning.
• Build reliable onboarding, role‑change, and offboarding workflows that keep employee access appropriate and up to date.
• Configure and maintain MDM solutions, including device enrollment, configuration profiles, software deployment, patching, encryption, and compliance controls.
• Partner with Security to define and implement least‑privilege access, device security standards, access reviews, and device‑based access policies.
• Design and maintain scripts, API integrations, and automation across Okta, MDM, Google Workspace, Slack, and IT service management systems.
• Help expand management of IT systems through code, including opportunities to use Terraform for Okta configuration and other supported resources.
• Use AI tools to accelerate troubleshooting, scripting, documentation, and workflow improvements while validating outputs and protecting company data.
• Serve as an escalation point for complex identity, device, and systems issues; address root causes and prevent recurring problems.
• Support AWS identity and access configurations as part of the broader IT environment.
• Maintain clear documentation for configurations, access policies, integrations, and operational procedures.
• Identify opportunities to simplify the IT environment, reduce technical debt, and improve SaaS lifecycle processes.

About You

• Strong hands‑on IT systems engineering experience, with deep expertise in either IAM or MDM and solid working knowledge of the other.
• Experience administering Okta and integrating applications using technologies such as SAML, OIDC, and SCIM.
• Experience configuring and operating an MDM platform such as Jamf, Kandji/Iru, Intune, or an equivalent.
• Strong understanding of security principles, including least privilege, authentication and authorization, endpoint hardening, and secure handling of credentials and company data.
• Proficiency with scripting languages such as Python or Bash, APIs, and workflow automation tools.
• Demonstrated experience using AI to solve technical problems and improve IT operations, with the judgment to review generated code and validate proposed changes.
• Strong troubleshooting skills and the ability to follow problems across identity, devices, applications, and integrations.
• Comfortable sharing ownership, collaborating with Security and other teams, and explaining technical decisions clearly.
• Able to take projects from identifying a problem through implementation, documentation, and ongoing maintenance.

A Strong Plus

• Experience using Terraform to manage Okta or other IT systems as code, including version‑controlled configurations, code review, repeatable deployments, and configuration drift management.

Success in This Role Looks Like

• More reliable identity lifecycle workflows, with timely provisioning, access changes, and deprovisioning.
• Better device enrollment, patching, and compliance through consistent MDM configurations and automation.
• Clearer access policies and repeatable access reviews developed in partnership with Security.
• Less manual work through maintainable automation and effective use of AI.
• More consistent, reviewable system configurations through expanded use of code where appropriate.
• Fewer recurring identity and device issues through root‑cause fixes.
• Reliable documentation that helps the team operate, troubleshoot, and improve shared systems.

Benefits

• Competitive salary and meaningful equity
• Comprehensive health, dental, and vision coverage
• Generous paid time off and parental leave
• Professional development stipend
• Daily lunch and commuter benefits (SF office)

Compensation & Benefits:

• Competitive compensation package, including equity.
• Inclusive Healthcare Package.
• Learn and Grow - we provide mentorship and send you to events that help you build your network and skills.
• Flexible Time Off.
• We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed.

The San Francisco, CA base pay range for this role is $180,000.00 - $288,000.00. Actual salary will be based on job‑related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity‑based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process.

Disclosures:

• Privacy: Please review our Job Applicant Privacy Policy for more information on how we handle your data.
• Equal Opportunity:Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.