IT Systems Engineer-Identity & Automation

The Trade Desk, Inc.; Ventura (CA); On-site; USD 78,000 - 142,000; Full time

Benefits offered by this job

Competitive benefits package

Company-funded smartphone

Job summary

The Trade Desk is seeking an IT Systems Engineer to design, automate, and operate identity, access, and enterprise platform systems. You’ll own Entra ID integrations, RBAC models, and lifecycle automation, building scalable workflows with Tines and REST API integrations.

Work involves platform automation, API-driven integrations across Infoblox, Portnox, and Azure services, plus AI-assisted operations. You’ll provide tier-3 support and collaborate across IT, Cybersecurity, and Systems teams.

Qualifications

• BS degree or equivalent years of IT Systems Engineering experience.
• Strong Entra ID (Azure AD) experience required.
• Experience with automation platforms (Tines preferred).
• REST APIs and integrations experience required.
• Scripting in PowerShell, Python, and JavaScript.
• Knowledge of SAML, OAuth, OIDC, SCIM.

Responsibilities

• Own and evolve authentication and authorization systems using Entra ID.
• Design and implement RBAC and policy-driven access models.
• Build identity lifecycle automation (joiner/mover/leaver).
• Integrate apps with SSO, SCIM provisioning, and modern protocols.
• Design and maintain automation pipelines using Tines.
• Create API-driven integrations across Infoblox, Portnox, and Azure.
• Develop internal tools with Azure App Services or serverless solutions.
• Leverage AI tooling to accelerate IT automation.
• Provide tier-3 support and collaborate on cross-functional IT projects.

Skills

Entra ID

REST APIs

PowerShell

Python

JavaScript

RBAC

AI tooling

Education

BS degree or equivalent

Tools

Tines

Azure App Services

Infoblox

Portnox

Intune

Jamf

NinjaOne

Job description

The Trade Desk is a global technology company and the world’s leading independent platform for digital advertising, with nearly 4,000 employees across more than 30 offices. Our technology helps advertisers reach the right audiences across the open internet — from streaming TV and podcasts to mobile apps, news, and more.

Advertising powers the content people love. By making it more transparent, effective, and responsible, we help support trusted journalism, quality entertainment, and creators worldwide. The world’s brands and agencies rely on us to reach their customers and grow their businesses responsibly.

The scale of our platform brings unique technical challenges — from processing massive datasets in real time to building systems that operate reliably on a global scale. When you work here, your impact is worldwide. We welcome diverse perspectives, encourage curiosity, and build teams that learn from one another. If you’re driven to solve meaningful challenges, we’d love to meet you.

What we do:

The IT Systems Engineer is responsible for designing, automating, and operating The Trade Desk’s identity, access, and enterprise platform ecosystem. This role sits at the intersection of Identity (authentication & authorization), Automation (Tines), and Enterprise Infrastructure (Azure, DNS, DHCP, endpoint platforms)

This engineer will act as a builder and integrator, developing scalable workflows, APIs, and agent-driven solutions that eliminate manual processes and improve security posture. The ideal candidate is energized by automation-first thinking, is fluent in identity systems and APIs, and is comfortable building solutions using modern tooling including Tines, Entra ID, and AI-assisted development (Copilot/agentic workflows)

What you’ll do:

Identity & Access Engineering:

• Own and evolve authentication and authorization systems using Entra ID and integrated platforms such as C1.
• Design and implement role-based access control (RBAC) and policy-driven authorization models.
• Build identity lifecycle automation (joiner/mover/leaver workflows).
• Integrate enterprise applications using SSO, SCIM provisioning, and modern protocols (SAML, OIDC, OAuth).

Automation & Workflow Engineering:

• Design and maintain automation pipelines using Tines
• Replace manual processes with event-driven, API-based workflows
• Build reusable automation patterns

Platform & Integration Engineering:

• Develop API-driven integrations across Infoblox, Portnox, endpoint and SaaS systems
• Build internal tools using Azure App Services and serverless solutions

AI & Agentic Enablement:

• Leverage AI tooling to accelerate IT automation
• Identify opportunities for AI-assisted operations

Core Infrastructure:

• Maintain DNS, DHCP, IPAM (Infoblox) and NAC (Portnox)
• Ensure availability and scalability of services

Operational Excellence:

• Maintain documentation and runbooks
• Enable self-service and automation adoption
• Provide tier-3 support to the IT organization
• Participate in cross-functional projects across IT, Cybersecurity, and Systems

Who you are:

• BS degree or equivalent years of experience and 6-8+ years of experience in IT Systems Engineering related role required.
• Strong experience with Entra ID (Azure AD) required
• Experience with automation platforms required (Tines preferred)
• Experience working with REST APIs and integrations required
• Scripting experience required (PowerShell, Python, JavaScript)
• Knowledge of SAML, OAuth, OIDC, SCIM required
• Experience with Azure infrastructure required
• Experience with C1 or identity governance platforms strongly preferred
• Experience with Infoblox and Portnox strongly preferred
• Experience with Azure App Services or serverless development preferred
• Familiarity with Intune, Jamf, NinjaOne preferred
• Experience with RBAC and least privilege models preferred
• Experience with AI-assisted tooling (Copilot, Claude) preferred
• Infrastructure-as-code experience preferred
• Conduct that supports the company’s ethics, core values, and compliance programs
• Must be able to sit, stand, walk or a combination of the three for up to 10 hours a day
• Must be able to lift up to 50 pounds
• Overtime: Must be available and willing to work such overtime per week as we determine is necessary or desirable to meet business needs.
• Weekend and Holiday: Must be available and willing to work such weekends and holidays as we determine are necessary or desirable to meet The Trade Desk business needs.
• Will be required to carry a company-funded smart phone and expected to respond to urgent calls in a timely manner. This may require remote or occasional on-site support.

Note:

Interns are not eligible for variable incentive awards such as stock-based compensation, retirement plan, vacation, tuition reimbursement or parental leave

The Trade Desk does not accept unsolicited resumes from search firm recruiters. Fees will not be paid in the event a candidate submitted by a recruiter without an agreement in place is hired; such resumes will be deemed the sole property of The Trade Desk. The Trade Desk is an equal opportunity employer. All aspects of employment will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.

[LA JOBS ONLY] The Trade Desk will consider qualified applicants with criminal histories for employment in a manner consistent with the requirements of the Los Angeles Fair Chance Initiative for Hiring, Ordinance No. 184652.

[SF JOBS ONLY] Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

#LI-TP1

The Trade Desk also offers a competitive benefits package. Click here to learn more.

At the Trade Desk, Base Salary is one part of our competitive total compensation and benefits package and is determined using a salary range. The base salary range for this role is $77,600—$142,200 USD

As an Equal Opportunity Employer, The Trade Desk is committed to creating an inclusive hiring experience where everyone has the opportunity to thrive.

Please reach out to us at [e-mail] to request an accommodation or discuss any accessibility needs you may require to access our Company Website or navigate any part of the hiring process.

When you contact us, please include your preferred contact details and specify the nature of your accommodation request or questions. Any information you share will be handled confidentially and will not impact our hiring decisions.