Senior IT Systems Engineer

Klaviyo Campus; Boston (MA); On-site; USD 112,000 - 168,000; Full time

Job summary

Klaviyo’s IT Systems team is seeking a Senior IT Systems Engineer to own enterprise systems including identity, endpoint management, and high-availability SaaS platforms. You will lead end-to-end projects from SSO/SCIM rollouts to complex integrations and automation, partnering with operations, engineering and security to implement scalable solutions.

The role emphasizes AI fluency, automation, and a high degree of autonomy with no direct reports, requiring seasoned engineers who can operate at

Qualifications

• 4+ years hands-on experience as a systems engineer or systems administrator in production environments.
• Ability to define problem statements and drive alignment with stakeholders with minimal direction.
• Deep knowledge across enterprise device management, identity and access management, and endpoint security.
• Experience deploying macOS/iOS devices at scale via MDM (Jamf preferred); Windows management (Intune/Autopilot) is a plus.
• Administered core SaaS platforms such as Google Workspace, Slack, Atlassian, and Zoom including security controls.
• Identity lifecycle management: SSO, SCIM provisioning, group/role design, and app onboarding; Okta/Entra ID preferred.
• AI proficiency: applying AI to automate workflows; using LLMs and agents.
• Automation by default with Bash/PowerShell/Python (Python preferred; AWS Lambda a plus).
• REST/JSON APIs and building cross-system integrations.
• Strong change management, documentation, and security audit readiness.
• Root-cause analysis and debugging in unfamiliar systems; clear communication to non-technical stakeholders.
• Vendor/tool evaluation and defensible recommendations.
• Excellent written communication and on-call readiness.

Responsibilities

• Own enterprise systems identity, endpoint management, and core SaaS platforms’ reliability, security, and roadmap.
• Lead end-to-end projects: scope, design, rollout, rollback, testing, and documentation.
• Translate ambiguous business needs into clear requirements and scalable solutions.
• Set technical standards: least-privilege, automation, and runbooks.
• Define success metrics and prove them with data; reduce incidents and improve coverage.
• Mentor engineers and provide direct feedback.
• Act as escalation point for complex system issues and drive root-cause analysis.
• Collaborate with operations, engineering, Security, and IT Searchbar teams.
• Help design AI-assisted workflows into systems.

Skills

Systems engineering

MDM (Jamf)

SaaS administration

Identity management

SSO/SCIM

Okta/Entra ID

Automation scripting

Python

Bash/PowerShell

REST/JSON APIs

Security auditing

Change management

AI proficiency

Documentation

Tools

Jamf

Intune/Autopilot

Google Workspace

Slack

Jira Service Management

Atlassian

Zoom

AWS Lambda

Job description

At Klaviyo, we value the unique backgrounds, experiences and perspectives each Klaviyos brings to our workplace each and every day. We believe everyone deserves a fair shot at success and appreciate the experiences each person brings beyond the traditional job requirements. If you’re a close but not exact match with the description, we hope you’ll still consider applying. Want to learn more about life at Klaviyo? Visit klaviyo.com/careers to see how we empower creators to own their own destiny.

At Klaviyo, we value the unique backgrounds, experiences, and perspectives each Klaviyos brings to our workplace each and every day. We believe everyone deserves a fair shot at success and appreciate the experiences each person brings beyond the traditional job requirements. If you’re a close but not exact match with the description, we hope you’ll still consider applying.

About the team:

Klaviyo’s global corporate Information Technology (IT) team is responsible for providing technology systems, administration, and support to Klaviyos around the world. Our main goal is to ensure that Klaviyos everywhere have a strong technology foundation to do great work. The IT Team solves problems using technology and provides Klaviyo’s continued scalability and sustainable employee growth in a rapidly evolving environment.

The IT Systems team is primarily responsible for SaaS systems administration and end-to-end lifecycle management, building automation, and engineering solutions for both other internal teams and the business. The IT Systems team is highly collaborative, working closely with the IT Searchbar team, our end-user support team as well as with our Security, Risk, and Trust teams and the broader Engineering department.

About the role:

As a Senior IT Systems Engineer on the IT Systems team, you own the design, implementation, and long-term health of the enterprise systems Klaviyo runs on identity, endpoint management, and the SaaS platforms every Klaviyo touches. You will lead projects end to end, from SSO/SCIM rollouts to complex multi-tool integrations and automations, and you will be trusted to take an ambiguous business problem, define the problem statement yourself, and deliver a solution that scales. You will partner with operations, engineering, Security, and the IT Searchbar team, and act as a technical escalation point when systems break.

Klaviyo is building an AI‑first future, and IT is where a lot of that gets real. You will use AI fluently in your own work and help design AI‑assisted workflows into the systems we run for the rest of the company. This is a senior individual contributor role: no direct reports, high autonomy, and real ownership. We are looking for someone who has already run systems at scale, holds opinions grounded in experience, and can be handed a domain and trusted to run it.

How you’ll have an impact

• Own systems, not tickets. You will take a domain identity, endpoint, or a set of core SaaS platforms and be accountable for its reliability, security, and roadmap, raising the decisions that need to go higher and driving everything else yourself.
• Lead projects end to end at pace: scope the work, design the solution, plan the rollout and the rollback, communicate the change, and land it without skipping testing, peer review, or documentation to hit a date.
• Turn ambiguous business needs into clear problem statements and systems that hold up, so Klaviyos spend their time on their work instead of fighting their tools.
• Set the technical bar: clean configuration, least‑privilege access by default, automation over manual toil, and runbooks the rest of the team can operate from without you in the room.
• Define what success looks like before you build, then prove it with data tickets deflected, provisioning time saved, coverage and compliance gaps closed.
• Raise the people around you: review others’ work, mentor engineers earlier in their careers, and give and receive direct, useful feedback.
• Act as a technical escalation point for complex system issues, drive root cause rather than symptoms, and feed what you learn back into the platform so the same incident does not happen twice.

Requirements:

• 4+ years of hands‑on experience as a systems engineer or systems administrator, with a track record of owning enterprise systems in production not just operating them, but deciding how they should work.
• You define problem statements yourself. You can take a vague or contested business need, scope it, drive alignment with stakeholders, and deliver with minimal direction without losing the thread when priorities shift.
• Deep working knowledge across a wide range of IT systems, including enterprise device management, identity and access management, and endpoint security.
• You have deployed and managed macOS and iOS devices at scale through an MDM (Jamf preferred), including configuration profiles, policies, and OS update strategy. Windows management (Intune, Autopilot) is a strong plus.
• You have administered core SaaS platforms such as Google Workspace, Slack, Atlassian, and Zoom, including their security and admin controls.
• Hands‑on experience with IdP configuration, management, and maintenance: SSO (SAML/OIDC), SCIM provisioning, group and role design, and app onboarding. Experience with Okta or Entra ID (Azure AD) is preferred.
• You have owned the identity lifecycle in practice onboarding, role changes, and offboarding and understand the security and audit consequences of getting it wrong.
• AI proficiency: AI is already part of how you work, and you can show it. You use LLM assistants and agents to research, write and debug code, draft documentation, and compress routine work, and you exercise judgment about when to trust the output. You are actively interested in putting AI into the systems you run automating triage, enrichment, and repetitive workflows for the wider company.
• You automate by default, and you have the scripting skills to do it: Bash, PowerShell, or Python. Python is preferred and AWS Lambda experience is a plus. You have replaced manual, repetitive work with automation other people now rely on, and you can safely read and modify someone else’s script.
• Comfortable working with APIs REST, JSON, authentication, and rate limits and building integrations between systems that do not natively talk to each other.
• You value clean, concise controls and easily editable security functionality within tools, and you can produce evidence for access reviews and audits (SOC 2, SOX) without it derailing your week.
• Disciplined change management: you test, get peer review, plan rollback, communicate to affected users, and document what changed including under pressure.
• You can debug a system problem you have never seen before, drive it to the root cause, and communicate clearly to non‑technical stakeholders while it is still unresolved.
• You can evaluate vendors and tools on their merits: security posture, integration surface, total cost and make a defensible recommendation.
• Strong written communication. Your documentation, runbooks, and change notices are good enough that other people can act on them without asking you.
• Participation in an after‑hours on‑call rotation with the IT Systems team is required for site‑specific or business‑blocking issues.

Nice to have

• You have worked with Workato, Okta Workflows, n8n, or other similar SSO and automation solutions, and have built something non‑trivial in one.
• Experience with enterprise‑scale networking topics, including routing, DNS, DHCP, VPN, and building and maintaining multiple global office networks.
• Experience as a systems administrator or systems engineer in a fast‑paced, high‑growth IT environment, ideally supporting a globally distributed workforce.
• Experience building with AI beyond the chat window prompt and context engineering, connecting an LLM to systems via APIs or MCP, or running an AI‑assisted workflow or agent in production.
• Experience with VPC, EC2, Security Groups, ACLs, and IAM in AWS and GCP.
• Experience with infrastructure‑as‑code (Terraform, Ansible) or version‑controlled configuration management for IT systems.
• Experience administering an ITSM platform such as Freshservice or Jira Service Management, including forms, workflows, SLAs, and reporting.
• Relevant certifications such as Jamf 200/300, Okta Certified Professional or Administrator, or associate‑level AWS, Azure, or Google Cloud.

Massachusetts Applicants:
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Our salary range reflects the cost of labor across various U.S. geographic markets. The range displayed below reflects the minimum and maximum target salaries for the position across all our US locations. The base salary offered for this position is determined by several factors, including the applicant’s job‑related skills, relevant experience, education or training, and work location.

In addition to base salary, our total compensation package may include participation in the company’s annual cash bonus plan, variable compensation (OTE) for sales and customer success roles, equity, sign‑on payments, and a comprehensive range of health, welfare, and wellbeing benefits based on eligibility.

Base Pay Range For US Locations:

$112,000—$168,000 USD

This role may require up to 10% travel for purposes such as new hire onboarding, client or partner work if applicable, team meetings, and industry events. Travel is coordinated in advance.

Get to Know Klaviyo

We’re Klaviyo (pronounced clay‑vee‑oh). We empower creators to own their destiny by making first‑party data accessible and actionable like never before. We see limitless potential for the technology we’re developing to nurture personalized experiences in ecommerce and beyond. To reach our goals, we need our own crew of remarkable creators—ambitious and collaborative teammates who stay focused on our north star: delighting our customers. If you’re ready to do the best work of your career, where you’ll be welcomed as your whole self from day one and supported with generous benefits, we hope you’ll join us.

AI fluency at Klaviyo includes responsible use of AI (including privacy, security, bias awareness, and human‑in‑the‑loop). We provide accommodations as needed.

By participating in Klaviyo’s interview process, you acknowledge that you have read, understood, and will adhere to our Guidelines for using AI in the Klaviyo interview Process. For more information about how we process your personal data, see our Job Applicant Privacy Notice.

Klaviyo is committed to a policy of equal opportunity and non‑discrimination. We do not discriminate on the basis of race, ethnicity, citizenship, national origin, color, religion or religious creed, age, sex (including pregnancy), gender identity, sexual orientation, physical or mental disability, veteran or active military status, marital status, criminal record, genetics, retaliation, sexual harassment or any other characteristic protected by applicable law.

IMPORTANT NOTICE: Our company takes the security and privacy of job applicants very seriously. We will never ask for payment, bank details, or personal financial information as part of the application process. All our legitimate job postings can be found on our official career site. Please be cautious of job offers that come from non‑company email addresses (@klaviyo.com), instant messaging platforms, or unsolicited calls.