IT Systems Engineer — Identity & Access Automation

Openkrill; United States; Remote; USD 145,000 - 158,000; Full time

Job summary

Thatch, a fully distributed early-stage company in the U.S. healthcare space, is seeking an IT Ops/Systems Engineer to own company-wide identity and access infrastructure. This Mac-first environment focuses on secure access, compliance, and scalable automation.

You will own SSO/IdP workflows, conditional access, and PAM, while enabling secure, seamless onboarding and offboarding for employees globally. Join a fast-growing team that values ownership and hands-on security leadership.

Qualifications

• 4–6 years of hands-on IT support or systems engineering experience in a corporate environment.
• Certifications in Network+, Security+, JAMF, Bettercloud, Okta or comparable credentials.
• Deep understanding of SSO, 2FA, passkeys, conditional access, and password management systems.
• Experience administering or implementing a PAM tool, or the ability to design one from scratch.
• Strong knowledge of security principles and best practices with the ability to scale them.

Responsibilities

• Own the identity/access infrastructure across the technology stack.
• Administer conditional access policies and own the exception/escalation process.
• Own the Privileged Access Management (PAM) workflow and automate access reviews.
• Lead MFA enrollment and remediation campaigns for weak or breached passwords.
• Manage end-to-end employee lifecycle access from onboarding to offboarding.

Skills

Identity & access management

SSO

2FA / passkeys

Security principles

Ownership mindset

Education

Certification in Network+, Security+, JAMF, Bettercloud, Okta

Tools

Okta

Jamf

BetterCloud

Rippling MDM/SSO

Google Workspace

Microsoft 365

Slack

Zoom

Notion

Job description

Thatch, a fully distributed early-stage company in the U.S. healthcare space, is seeking an IT Ops/Systems Engineer to own company-wide identity and access infrastructure. This Mac-first environment focuses on secure access, compliance, and scalable automation.

You will own SSO/IdP workflows, conditional access, and PAM, while enabling secure, seamless onboarding and offboarding for employees globally. Join a fast-growing team that values ownership and hands-on security leadership.