IT Systems Engineer — Identity, Security & Automation

CryptoproNetwork; Northern (KY); Hybrid; USD 100,000 - 160,000; Full time

Job summary

Tempo is building a robust corporate IT infrastructure to securely manage identities, devices, and access at scale. The role is hands-on and requires engineering rigor to secure a crypto-forward company operating at the frontier of digital assets.

You will automate identity lifecycles, implement SSO/SCIM, manage Jamf Pro for macOS devices, and expand SIEM and endpoint security. This position emphasizes IaC and secure operational excellence.

Qualifications

• 4+ years in IT engineering roles.
• Hands-on Okta administration: SSO, SCIM, SAML/OIDC integrations, lifecycle policies.
• Production Jamf Pro experience: PreStage enrollment, configuration profiles, software update management, certificate distribution. macOS-first.
• Deployed and operated an EDR platform (SentinelOne) — policy tuning, MDM deployment, alert triage.
• Strong scripting (Python/Bash/Go preferred), comfortable with REST APIs, webhooks, JSON, auth flows, and event-driven workflows.
• Git-based config management, CI/CD pipelines (GitHub Actions), Terraform or equivalent.
• Solid grasp of DNS, certificates/PKI, ZTNA (Tailscale or similar), and modern access control models.

Responsibilities

• Architect and automate the full identity lifecycle — HRIS → Okta → SaaS apps — eliminating manual provisioning and off boarding gaps
• Complete and maintain SSO/SCIM integrations across the entire SaaS stack
• Own Jamf Pro end to end: PreStage enrollment, configuration profiles, software updates, certificate distribution
• Deploy and tune endpoint security (SentinelOne) — policy management, MDM-driven deployment, alert triage
• Expand SIEM coverage and write detection/alerting rules with a detection-as-code approach
• Build toward infrastructure-as-code management of all IT tooling (Terraform, GitHub Actions)
• Resolve hard identity, device, and access escalations that get past first-line support
• Drive SOC 2 readiness — unified audit trails across identity, device, and security systems

Skills

Scripting ability

REST API integration

Problem solving

Tools

Okta admin

Jamf Pro

EDR (SentinelOne)

Terraform

GitHub Actions

DNS / PKI

ZTNA

Job description

Tempo is building a robust corporate IT infrastructure to securely manage identities, devices, and access at scale. The role is hands-on and requires engineering rigor to secure a crypto-forward company operating at the frontier of digital assets.

You will automate identity lifecycles, implement SSO/SCIM, manage Jamf Pro for macOS devices, and expand SIEM and endpoint security. This position emphasizes IaC and secure operational excellence.