Senior IT & Corporate Engineering

Flex; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

Flex is building the AI-native private bank for business owners, with IT and corporate engineering anchored under the CTO. You will own the IT and corporate engineering function end to end, improving identity, access, endpoint posture, and SaaS governance across a distributed, international company.

You will design fast onboarding and secure deprovisioning, manage external partners, and drive automation to remove friction.

Qualifications

• Experience building IT and corporate engineering functions.
• Ability to design and enforce identity, access, and endpoint policies.

Responsibilities

• Own IT and corporate engineering end to end: roadmap, budget, vendor relationships, outcomes.
• Manage external IT partner as delivery capacity; define scope and SLAs.
• Design joiner/mover/leaver processes and entitlement model for fast onboarding and secure deprovisioning.
• Administer and improve identity and productivity stack (Okta, Google Workspace).
• Own operational policy: device standards, access workflow, SaaS onboarding and procurement review.
• Build automation: provisioning, access reviews, asset/license reconciliation, internal tooling.
• Run endpoint and MDM program across distributed company; keep fleet audit-ready.
• Own corporate security posture: conditional access, MFA, session and device rules; review third-party OAuth.
• Design and deliver security awareness and training programs; engage with security engineers as needed.
• Partner with People, Finance, and Legal; manage onboarding/offboarding, spend, audit evidence.
• Be an internal service; publish what you own and reduce friction.

Skills

Identity management

MFA policy

Access control

Vendor management

Security awareness training

SaaS governance

Okta

Google Workspace

Tools

Okta

Google Workspace

Job description

Flex is building the AI-native private bank for business owners.

We’re re-architecting the entire financial system for entrepreneurs—from the first dollar a business earns to how that value compounds, moves, and is ultimately spent in real life. Banking, credit, payments, personal finance, and financial operations—rebuilt from the ground up as a single, intelligent system. Flex is the full financial home for ambitious owners.

Since launching publicly in September 2023, Flex has scaled from zero to nine-figure annualized revenue, with a clear path to profitability by late 2026. We move fast, ship relentlessly, and operate with extreme ownership.

Our customers are affluent business owners ($3–$200M in revenue)—the backbone of the economy and one of the most underserved segments in finance. They’re stuck with outdated banks and fragmented tools. We’re replacing all of it. The opportunity is massive: a ~$1T+ revenue market hiding in plain sight. Our ambition is to build a $100B+ company by delivering a product that is fundamentally better—not incrementally improved.

Flex has raised $100M+ in equity and $300M+ in debt.

- Mission-critical problems: We build software that directly controls how money moves at scale.

- High bar, low ego: Small teams, exceptional people, real ownership.

- Speed over comfort: We prioritize execution, quality, clarity, and results.

- Enduring impact: What we’re building will define how a generation of owners runs their businesses.

Team & Locations

We hire exceptional people who want to build hard things and see their work matter immediately. Roles are available in: San Francisco, Miami, New York, and fully remote.

About The Role

This role owns IT and corporate engineering at Flex, end to end. It reports directly to the CTO.

We think IT's job is enablement. The measure of this function is not how many tickets it closes or how many controls it can point at. It is whether everyone else at Flex can do their work faster and more safely than they could last quarter. A new hire productive on day one instead of day four. An engineer who gets exactly the access they need in minutes, without asking twice and without being handed the keys to everything. A team that can adopt a new tool because someone reviewed it properly, not because they routed around IT to buy it on a personal card. So we are not looking for a gatekeeper, or for someone whose default answer is no. The right person makes the safe path the easy path, and removes friction permanently instead of absorbing it repeatedly.

Which is why this role also owns Flex's corporate security posture. Identity, access, endpoints, and the SaaS estate are one system, and the person who makes access fast should be the person who decides how much access is reasonable. Split those across two teams and employees route around both. You'll set conditional access and MFA policy, own privileged access and endpoint posture, and run third‑party OAuth and Workspace grant review. Our security engineers own the product and infrastructure side, the money paths and the code, and you'll work with them constantly. Corporate security is yours to decide, not to implement on someone else's behalf.

This is the hard part of the job, and we'd rather say so than leave it as a bonus line. The argument between moving fast and holding a line is now an argument you have with yourself. Day to day, what gets tightened, what gets mitigated, and what we knowingly accept is your call; the large ones come to the CTO, and we'd rather see a close call early than find out you decided it quietly. What we'd ask is that a no comes from a real read of the risk and the business context rather than a standard applied by default.

The rest of the work has two halves. The IT half is the fleet, identity, access, the SaaS estate, and the joiner/mover/leaver process, delivered with help from a managed IT partner who handles procurement, device logistics, tier‑1 support, and international coverage. You own that relationship, define the SLA, and enforce it. The corporate engineering half is the part we think makes this a good job: writing the automation and internal tooling that means the IT half doesn't scale linearly with headcount. If a process only works because a person runs it by hand every Tuesday, we'd rather you replaced it.

You'd be inheriting an estate here, not starting one. The first year is as much untangling what has already accumulated - stale access, tools nobody reviewed, processes that work because someone remembers them - as it is building what comes next. Automate that assessment. Nobody should be reading through a SaaS estate by hand in 2026.

Now the shape of this. Flex is around 150 people, and you would be the only person in this function, with vendor capacity underneath you and a direct line to the CTO. That means real autonomy and real scope from week one. It also means this is a hands‑on senior individual contributor role, not a management role, and we are not planning a team under it in the near term. If you're looking to build and lead an IT organization right now, this isn't that job, and we'd rather you knew before you applied.

We're looking for an IT and corporate engineering builder who wants to own security posture, rather than a security specialist willing to cover IT. Both halves have to interest you. If the enablement work reads as the price of admission for the security work, this will be a frustrating job.

What You'll Do

• Own IT and corporate engineering end to end: the roadmap, the budget, the vendor relationships, and the outcomes.

• Manage our external IT partner as delivery capacity, not as a peer function. Define the scope, set the SLA, hold them to it, and own the escalation path when it slips.

• Design the joiner, mover, and leaver process and the entitlement model behind it. Make onboarding fast enough that a new hire is working on day one, and keep deprovisioning in‑house and same‑day, because it's the highest‑consequence action in IT.

• Administer and improve our identity and productivity stack (Okta, Google Workspace, and the SaaS estate around them), including SSO, SCIM, and group and role design.

• Own operational policy: device standards, the access‑request workflow, and SaaS onboarding and procurement review. Review tools before people buy them, and make that review fast enough that nobody wants to skip it.

• Build the automation. Provisioning, access reviews, asset and license reconciliation, and the internal tooling that removes recurring manual work across the SaaS estate.

• Run the endpoint and MDM program across a distributed, increasingly international company, and keep the fleet in a state you'd be comfortable showing an auditor.

• Own Flex's corporate security posture. Conditional access, MFA, session and device rules, and privileged access are yours to set. So is endpoint posture, and the review of third‑party OAuth and Workspace grants that quietly accumulate at every company this age.

• Design and deliver the security awareness and training program. Not a once‑a‑year video, and not the version people click through with the sound off.

• Partner with our security engineers, who own product and infrastructure security. The line runs between corporate and product, not between operating and deciding. You'll bring them into identity decisions with blast radius, and they'll rely on you for provisioning data they can trust.

• Work closely with People, Finance, and Legal. Onboarding, offboarding, spend, and audit evidence all run through this function.

• Be a real internal service. Publish what you own, respond when people ask, and find the friction before it turns into a workaround.

What Makes You A Great Fit

• You think IT exists to make other people effective, and you can point at specific friction you removed rather than tickets