MTS - IT Engineer

ironsite-ai

San Francisco (CA)

On-site

USD 150,000 - 200,000

Full time

14 days+

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Benefits offered by this job

Meaningful early-stage equity

Full benefits: health, dental, vision,

401(k) with 6% match

Daily catered breakfast and lunch

Office in San Francisco next to Oracle

Job summary

Ironsite is hiring a Senior IT Engineer to own internal IT as we scale nationwide. You’ll build identity, device, and security foundations for a fast-growing company with HQ and field crews across the United States, ensuring access, security, and compliance are built in from day one.

You’ll lead a scalable IT stack, automate workflows, and maintain SOC 2 and ISO 27001 without slowing growth while supporting a distributed workforce and growing headcount from 35 to 100+.

Qualifications

4+ years in IT engineering or systems administration in production environments.
Deep experience with multi-cloud IAM, SSO, LDAP.
Hands-on with device management: MDM and EDR for distributed workforce.
Strong scripting: Python and Bash; Infrastructure as Code (Terraform or similar).
ZTNA/VPN design and administration experience.
Security/compliance expertise: SOC 2, ISO 27001 audits.
CS/SE/Math/Physics or related field, or equivalent hands-on experience.

Responsibilities

Own IT engineering stack from identity to endpoint management and support.
Build scalable, secure IT systems for HQ, remote, and field crews across the country.
Automate IT to scale sub-linearly with headcount as the company grows.
Help ensure SOC 2 and ISO 27001 compliance is maintained without slowing progress.

Skills

IT engineering

IAM

Device management

IaC

ZTNA/VPN

SOC 2 ISO27001

Build vs Buy

CS/SE/Math/Physics

Education

Computer Science / Software Engineering / Math / Physics

Tools

Terraform

Python

Bash

Google Workspace

LDAP

MDM

EDR

Job description

About Ironsite

Ironsite is building the intelligence layer for the physical world. We design our own wearable hardware, deploy it alongside craft workers, and transform a shift's footage into a next-morning report. Our internal team and purpose-built models label the data overnight and deliver actionable insights to superintendents by 5 AM.

We are accelerating the speed, efficiency, and predictability of construction, especially for complex, mission-critical infrastructure projects, including data centers, LNG facilities, sports stadiums, hospitals, and other large-scale developments, by training AI models on egocentric construction footage and labor productivity data. We are built with a pro-worker philosophy at our core: we believe technology should empower the workforce, not replace it. We're working to give craft workers and project leaders better visibility into what's happening on-site, while creating a system where the reality of construction and the chaos of each day is finally available to the people running the project.

Ironsite is deployed across several of the largest active construction projects in the country. To date, we've captured more than 100,000 hours of construction footage across seven states, now process thousands of hours of site activity every day, and maintain a worker opt-out rate below two percent. This is enabled by a workforce-first architecture that anonymizes devices, captures no audio, and never releases raw video.

Ironsite is backed by leading investors (8VC, South Park Commons, Saga Ventures) and prominent operators across technology and construction, including Eric Schmidt, Jeff Dean, Jeff Rothschild, Mark Leslie, Scott Wu, Eric Glyman, Karim Atiyeh, Russell Kaplan, and others, alongside over a dozen construction industry operators who have joined us as partners in building this.

Longer term, we believe Ironsite is the foundation for what construction becomes in the next decade. We think the systems we're building are the operating system for how the physical world gets built, and will unlock a fundamentally different way of respect for our workforce. One where craft workers are more valued, more visible, and better paid for the skill they bring, and where the industry finally has the intelligence layer that makes autonomous construction possible. Both futures start with the same foundation.

The Role

We're hiring an exceptional Senior IT Engineer to own internal IT as we scale nationwide.

You’ll build the identity, device, and security foundation that lets a fast-growing, distributed company move quickly and safely. How people get access on day one, how every laptop and field device is managed and secured, and how we meet the compliance bar our enterprise customers expect. You’ll support a workforce that spans HQ and field crews across the United States, and your work will be the reason the company stays secure and productive as we grow from 35 people to 100+ without losing a step.

This is a role for someone who wants to build the IT function from the ground up, not inherit one. You’ll own the systems, the tooling, the compliance posture, and the day-to-day support, and you’ll build them in a way that scales sub-linearly with headcount, so the IT footprint stays small even as the company doesn’t.

What You’ll Build

Identity & Access Management. Automated onboarding and offboarding, SSO, and least-privilege access across our SaaS stack and multi-cloud environments, so the right people get the right access on day one, and lose it cleanly when they leave.
Device & Endpoint Management. MDM and EDR across the laptop fleet, plus asset management and provisioning workflows for the hardware deployed across jobsites. The fleet is going to grow fast; the tooling has to grow with it.
Security & Compliance. The controls behind SOC 2 and ISO 27001, partnership with the team on InfoSec, and the evidence and monitoring that make audits routine rather than fire drills. Enterprise customers ask about this in every deal so your work directly enables our sales motion.
IT Support & Enablement. The support workflows and self-serve tooling that keep a distributed, multi-state team unblocked and productive, whether they’re at HQ, remote, or in the field on a jobsite.
Networking & Corporate Infrastructure. Corporate networking, VPN, and the core IT systems the company runs on will be managed as code wherever possible, so future you (and future hires) don’t inherit a mess.

Technical Challenges You’ll Solve

Securing and supporting a workforce that spans HQ, remote employees, and field crews across the country. IT for a distributed company is one problem. IT for a company where a meaningful chunk of the team is on active construction jobsites is a different problem. You’ll build systems and workflows that work for both without compromising either.
Standing up and maintaining SOC 2 and ISO 27001 without slowing the company down. Compliance can either become a drag on the org or the foundation that lets us move faster. Your job is to make sure it’s the second and help us by building controls that pass audits without becoming day-to-day bottlenecks.
Keeping access least-privilege as the org changes weekly. We’re growing fast, adding SaaS tools regularly, and rearchitecting how teams work as we scale. Identity and access management has to keep up without becoming a manual project every week. You’ll build the automation that makes this a solved problem, not a running fire.
Building asset management for a growing fleet of field-deployed hardware. Ironsite deploys hundreds of devices across jobsites in multiple states, with more coming every month. The tooling to track, provision, secure, and retire that hardware doesn’t exist yet so you’ll build it.
Automating IT so it scales sub-linearly with headcount. As Ironsite grows from 35 people to 200, the IT footprint can’t grow linearly with the team. You’ll build the automation, self-serve tooling, and infrastructure-as-code patterns that make that possible.

What We’re Looking For

Strong background in IT engineering, systems administration, or corporate IT in production environments, typically 4+ years, with hands‑on experience across the full stack of what a modern IT team owns.
Deep experience with authentication and authorization: multi‑cloud IAM, SSO (Google Workspace and similar), LDAP, and the identity patterns modern SaaS orgs run on.
Hands‑on experience with modern device management: MDM, EDR, and the endpoint security patterns for a distributed workforce.
Comfort with Infrastructure as Code (Terraform or similar) and strong scripting skills (Python, Bash)
Real experience designing and administering ZTNA/VPN deployments, plus corporate network administration.
Hands‑on experience implementing and maintaining security and compliance frameworks (SOC 2, ISO 27001, or similar).
Judgment about when to build vs. when to buy, as you know when a SaaS tool is the right answer and when it’s a tax you’ll regret paying later.
A background in Computer Science, Software Engineering, Mathematics, Physics, or a related technical field, or the equivalent hands‑on experience.

Preferred Qualifications

Cloud network architecture (VPCs, peering, segmentation).
Relevant certifications (Security+, CISSP, Okta, Jamf, or similar).
Experience scaling IT at a fast‑growing startup through rapid headcount and multi‑site growth, as you’ve been through this before and know what breaks first.
Experience supporting hardware or device fleets, or IT for field operations.
Experience leading or supporting SOC 2 or ISO 27001 audits end‑to‑end.
Experience with construction, manufacturing, or similar operational industries where your users aren’t always behind a desk.

Location, Compensation, & Perks