IT Systems Engineer: Identity, Security & Automation

Tempo; San Francisco (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Tempo is building a security‑minded IT infrastructure team in San Francisco and seeks a hands‑on engineer to own identity, device management, endpoint security, and automation. You will integrate SSO, SCIM, and HRIS data, manage Jamf Pro workflows, and extend SIEM and SOC 2 readiness across the tech stack.

You’ll work across HRIS, security, and operations to enforce scalable, IaC‑driven controls, while operating at the frontier of crypto infrastructure and real‑world payments.

Qualifications

• 4+ years in IT engineering roles
• Hands-on Okta administration: SSO, SCIM, SAML/OIDC integrations, lifecycle policies, Okta Workflows. Understands HRIS-as-source-of-truth (Rippling or similar)
• Production Jamf Pro experience: PreStage enrollment, configuration profiles, software update management, certificate distribution. macOS-first
• Deployed and operated an EDR platform (SentinelOne or comparable) — policy tuning, MDM deployment, alert triage
• Strong scripting (Python/Bash/Go preferred), comfortable with REST APIs, webhooks, JSON, auth flows, and event-driven workflows
• Git-based config management, CI/CD pipelines (GitHub Actions), Terraform or equivalent
• Solid grasp of DNS, certificates/PKI, ZTNA (Tailscale or similar), and modern access control models

Responsibilities

• Architect and automate the full identity lifecycle — HRIS Okta SaaS apps — eliminating manual provisioning and off boarding gaps
• Complete and maintain SSO/SCIM integrations across the entire SaaS stack
• Own Jamf Pro end to end: PreStage enrollment, configuration profiles, software updates, certificate distribution
• Deploy and tune endpoint security (SentinelOne) — policy management, MDM-driven deployment, alert triage
• Expand SIEM coverage and write detection/alerting rules with a detection-as-code approach
• Build toward infrastructure-as-code management of all IT tooling (Terraform, GitHub Actions)
• Resolve hard identity, device, and access escalations that get past first-line support
• Drive SOC 2 readiness — unified audit trails across identity, device, and security systems

Skills

SSO, SCIM, SAML/OIDC integrations

Scripting (Python/Bash/Go)

REST APIs & event-driven workflows

GitHub Actions CI/CD

DNS, PKI, ZTNA concepts

Terraform / IaC

Tools

Okta

Jamf Pro

SentinelOne

GitHub Actions

Terraform

Job description

Tempo is building a security‑minded IT infrastructure team in San Francisco and seeks a hands‑on engineer to own identity, device management, endpoint security, and automation. You will integrate SSO, SCIM, and HRIS data, manage Jamf Pro workflows, and extend SIEM and SOC 2 readiness across the tech stack.

You’ll work across HRIS, security, and operations to enforce scalable, IaC‑driven controls, while operating at the frontier of crypto infrastructure and real‑world payments.