Senior IT Platform Engineer

Beast Industries; San Mateo (CA); Presencial; USD 115.000 - 173.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical insurance

Health Savings Account (HSA)

401k plan

Flexible vacation

Tech package

Relocation assistance with housing

Descripción de la vacante

Beast Industries is seeking an Identity Platform Engineer to own and extend our centralized identity stack across Step and the Beast ecosystem. You will design automated joiner/mover/leaver flows, implement SSO and SCIM for hundreds of SaaS apps, and maintain dual‑instance boundaries to keep regulated fintech systems isolated.

This role anchors the West Coast from the San Mateo office, four days a week, with on‑site collaboration and escalation duties.

Formación

• 5+ years in IT systems, identity, or infrastructure engineering with hands-on Okta administration.
• Experience automating identity workflows and provisioning.
• Proven federation experience with SAML, OIDC/OAuth, SCIM.

Responsabilidades

• Design and operate joiner/mover/leaver workflows driven by HRIS events.
• Onboard and manage apps with SSO/SCIM coverage across hundreds of SaaS apps.
• Develop and maintain identity automation within dual-instance fintech architecture.
• Serve as the on-site IT face for the West Coast, including Step integration.

Conocimientos

Okta admin

Automation

Federation

HRIS provisioning

DevOps

Endpoint security

AV systems

Service mindset

Regulatory compliance

AI tooling

Herramientas

Okta Workflows

Tines

Serval

APIs

Descripción del empleo

Beast Industries is a multifaceted media and entertainment company founded by Jimmy Donaldson, popularly known as MrBeast, the most watched person in the world. Renowned for revolutionizing digital content creation, Beast Industries encompasses a diverse portfolio of ventures that extend far beyond its origins on YouTube. With a mission to entertain, inspire, and create significant social impact, Beast Industries operates across various domains including digital media, philanthropy, consumer products, and innovative business initiatives. At Beast Industries, we believe in the transformative power of digital media and its potential to entertain, educate, and effect positive change. Our commitment to innovation, creativity, and philanthropy drives us to explore new frontiers, create unforgettable experiences, and build a legacy that inspires future generations.

Beast Industries · San Mateo, CA (on-site 4 days/week at Step) · Full-time · Reports to the Director of IT

Identity & Application Lifecycle

ABOUT THE ROLE

Beast Industries is the company behind MrBeast, Feastables, Beast Games, and a growing family of businesses that now includes Step, the fintech platform helping the next generation build credit and manage money. We're unifying identity across that whole family. Hundreds of SaaS applications and hundreds of employees are converging onto a single Okta instance while regulated, compliance-sensitive systems stay properly isolated.

You'll be the engineer working deep inside that platform. You'll know how users and applications get onboarded, provisioned, secured, and retired across every Beast company, and you'll run point for Step. That means the HRIS-driven provisioning that feeds it, the SSO and SCIM integrations for its app stack, and the dual-instance boundary that keeps its regulated systems separate from the rest of the business. This is a hands‑on engineering role, not an administrator seat. You'll think in APIs, scripts, and pipelines, and you'll build automation so lifecycle events run themselves.

You'll also anchor the West Coast for the Beast IT team, working from Step's San Mateo office about four days a week. The office runs on you being there. You're the face of IT for the region, the first call when something breaks, and the person who makes sure exec visits and events go off without a hitch.

WHAT YOU'LL DO

Identity platform engineering

• Run the user lifecycle end to end. Design and operate automated joiner, mover, and leaver flows for new hires, department changes, contractors, rehires, offboarding, and MFA enrollment, driven by HRIS events across multiple payroll and HR platforms.
• Drive the application lifecycle. Onboard, integrate, maintain, and decommission apps across an inventory of several hundred SaaS applications, dozens of them federated for SSO and SCIM coverage growing, including our multi‑workspace Slack environment. SAML, SCIM, and SWA configurations are your daily work.
• Engineer identity automation. Manage groups, group rules, and sign‑on and authentication policies, and build the automation that keeps them honest. Work fluently within the dual‑instance architecture that isolates regulated fintech systems like KYC, brokerage, and banking integrations from the general business stack.
• Run point for Step. Be the go‑to engineer for how Step connects to the central Beast stack. Scope new integrations, keep the production ones healthy, and take first swing when something between Step and Beast breaks.
• Document like an engineer. Maintain runbooks, architecture diagrams, and knowledge base articles, and keep the application inventory accurate enough to be a real system of record.

Site support and operations

• Own the San Mateo queue. Triage, resolve, and elevate against SLAs in Serval, our Slack‑native ITSM platform. The queue is yours, including the numbers behind it.
• Run the site. New hire desks ready before day one, device provisioning and depot, peripheral and asset inventory. Small problems compound when nobody watches them. You watch them.
• Keep the rooms working. Conference rooms, Zoom Rooms, Rally Bars, town hall AV. Meetings start on time because you made sure they would, and when an all‑hands goes sideways, you're the one who gets it back.
• Take care of the people. Walk‑up questions, patient help for the less technical, showing a new hire how things work here, spotting the person quietly struggling with a tool and fixing it before they file a ticket. The general care and feeding of an office full of users is real work, and it's yours.
• Be the face of IT for the West Coast. You're the on‑site escalation point for the region and the white‑glove support for exec visits and company events, occasionally available after hours when the moment calls for it.

WHAT WE'RE LOOKING FOR

• 5+ years in IT systems, identity, or infrastructure engineering with deep hands‑on Okta administration. Groups, policies, SSO/SAML, SCIM, lifecycle management. Comfortable on macOS and Windows alike.
• Proven automation in Okta Workflows or equivalent (e.g. Tines, Serval), including building against APIs directly when the platform runs out of buttons.
• Federation fluency. You've integrated SaaS apps via SAML, OIDC/OAuth, and SCIM enough times that the edge cases don't surprise you.
• HRIS‑driven provisioning experience with real joiner/mover/leaver automation in production, not just a proof of concept.
• DevOps discipline. Version control, CI/CD concepts, infrastructure as code, and cloud platforms (AWS and/or GCP).
• Endpoint awareness. Working knowledge of MDM (Intune, FleetDM preferred) and device trust.
• AV fluency. Comfortable deploying and troubleshooting conference room systems like Zoom Rooms and Logitech Rally Bar.
• A real service streak. You're happy being the person people find when something breaks, and you're as sharp with an exec's dead laptop as with a broken SCIM integration.
• Comfort in a regulated, multi‑entity environment. Fast‑moving doesn't excuse sloppy. You know how to move quickly inside compliance boundaries.
• Proven use of AI tooling for IT work such as Claude (Cowork and Code) and GenSpark.

NICE TO HAVE

• Certifications or deep admin experience in Okta, Google Workspace, Slack, or Jira. Okta Workflows or Consultant certifications especially welcome.
• Tenant migrations or SaaS consolidation at scale. You've merged, split, or collapsed identity platforms before and have the scars to prove it.
• Experience supporting developer environments. GitHub and CI administration, developer tool provisioning, and enough context to speak an engineer's language.
• Fintech and compliance tooling familiarity. KYC, brokerage, fraud and identity decisioning, audit‑trail separation.
• Google Workspace and Microsoft 365 dual‑domain administration.
• Slack Enterprise Grid or multi‑workspace SCIM experience.
• Security tooling exposure.

SUCCESS IN THE FIRST SIX MONTHS

• Automated lifecycle workflows cover the core joiner, mover, and leaver events and routine identity changes need no human hands.
• The application inventory is accurate and maintained with provisioning and deprovisioning documented per app.
• The San Mateo queue runs against its SLAs and the office treats IT as something that just works. Desks ready before day one, rooms that start on time, an escalation path people trust.

WHAT MAKES THIS ROLE DIFFERENT

Identity engineers rarely get this mix. Deep, hands‑on work across a multi‑company identity platform with a fintech compliance boundary running through the middle of it, at a company whose name everyone you know recognizes. You'll ship work that would be committee‑bound anywhere else, and because you're in the office with the people who use it, you'll see it land firsthand.

The target total compensation ranges from $115,000– $172,500, includingan employee equity plan grant, bonus, plus comprehensive benefits.

Equity grants are issued in good faith, subject to company policies, board approval, and individual eligibility.

The Perks, Why Work On the MrBeast Team

• Generous Medical (Blue Cross Blue Shield), Dental, Vision and company‑paid Life Insurance
• Company contributions to employee Health Savings Accounts (HSA)
• 401k Plan with Safe Harbor company‑matching
• Flexible vacation policy and paid company holidays
• Company‑provided technology package
• Relocation assistance where applicable, including travel and company‑provided housing for the first 90 days

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self‑identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in MrBeast’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service‑connected disability.

A "recently separated veteran" means any veteran during the three‑year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.