Remote Systems Engineer, Corporate Security & IAM Automation

Triwill Group; New York, Northern (NY, KY); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Flexible PTO

Home-office equipment

Health and wellness stipend

Relocation support to NYC/SF

Job summary

Ramp is hiring a Systems Engineer for Corporate Security to build and operate controls across device, identity, and AI tooling. You will implement configuration-as-code, patching, and policy enforcement using Okta, Cloudflare, and AI deployments.

The role is hands-on, requiring scripting in Python/Go/Bash, API automation, and cross-team collaboration with IT, Security Engineering, and AI DevX. Remote-friendly with NYC HQ options.

Qualifications

• Experience with macOS at scale including MDM and update mechanisms.
• Proficient in Python/Go/Bash scripting and API automation.
• Hands-on with EDR like CrowdStrike and IAM tooling (Okta, SSO, MFA).

Responsibilities

• Maintain update policies for OS/software and patch cadence.
• Build automation for endpoint security remediation across EDR, DLP, VPN.
• Maintain device configuration baselines as code and drift detection.
• Configure Okta policies: SSO, MFA, enrollment, device trust, conditional access.
• Remediate identity posture gaps surfaced by ISPM tooling.
• Implement controls for enterprise AI usage, including logging and DLP where appropriate.
• Automate across platforms via APIs and report control coverage.

Tools

macOS management

MDM

Okta

SSO

MFA

Python

Go

Bash

API automation

EDR

CrowdStrike

identity posture management

Cloudflare

Terraform

GitHub Actions

Job description

Ramp is hiring a Systems Engineer for Corporate Security to build and operate controls across device, identity, and AI tooling. You will implement configuration-as-code, patching, and policy enforcement using Okta, Cloudflare, and AI deployments.

The role is hands-on, requiring scripting in Python/Go/Bash, API automation, and cross-team collaboration with IT, Security Engineering, and AI DevX. Remote-friendly with NYC HQ options.