Senior Systems Engineer, IAM Operations

Crusoe; San Francisco (CA); On-site; USD 165,000 - 200,000; Full time

Benefits offered by this job

Competitive compensation

Equity packages

Health insurance

401(k) plan

Paid time off

Job summary

Crusoe in San Francisco seeks a Senior Systems Engineer to own day-to-day identity and access management operations, focusing on Okta and SSO-enabled apps. You’ll onboard and offboard users, manage access, and build automations to scale IAM across the environment.

You will run periodic access reviews, enforce least privilege, and collaborate with API, engineering, and Service Desk teams. Strong scripting and governance experience are required.

Qualifications

• 5+ years in Systems Engineering, IAM, or IT operations.
• Hands-on Okta administration experience.
• Experience with identity governance platforms (e.g., Lumos or similar).
• Familiarity with SCIM provisioning and automation tooling.
• Proficient in Python or PowerShell for bulk ops.

Responsibilities

• Own day-to-day IAM operations in Okta and SSO-enabled apps.
• Onboard/off-board users and manage access during hires, terminations, and transfers.
• Build automations with Okta Workflows and no-code tools; create SCIM solutions where needed.
• Conduct periodic access reviews and entitlement certifications; enforce least- privilege.
• Collaborate with API, engineering, and Service Desk teams to scale IAM across the stack.
• Troubleshoot authentication failures, API errors, and script-driven bulk operations.

Skills

Okta administration

IAM governance

RBAC

Python/PowerShell

SaaS administration

SCIM provisioning

Education

Bachelor's degree in CS/IT

Tools

Lumos

Okta Identity Governance

Slack

Google Workspace

Job description

Crusoe is on a mission to accelerate the abundance of energy and intelligence. As the only vertically integrated AI infrastructure company built from the ground up, we own and operate each layer of the stack — from electrons to tokens — to power the world's most ambitious AI workloads. When you join Crusoe, you join a team that is building the future, faster.

We're in the midst of the greatest industrial revolution of our time. The demand for AI compute is boundless, and power is a bottleneck. We're solving that — with an energy-first approach that makes AI infrastructure better for the world and faster for the people innovating with AI.

We're looking for problem-solving, opportunity-finding teammates with a sense of urgency, who believe in the scale of our ambition and thrive on a path not fully paved — people who want to grow their careers alongside a team of experts across energy, manufacturing, data center construction, and cloud services.

If you want to do the most meaningful work of your career, help our customers and partners advance their AI strategies, and be part of a high-performing team that believes in each other, come build with us at Crusoe.

About This Role

We're looking for a Senior Systems Engineer to own day-to-day identity and access management operations at Crusoe. This is a hands‑on role focused on keeping our Okta ecosystem running smoothly and securely. You will oversee user lifecycle management, onboard applications to Okta for SSO, manage our governance platform (Lumos), and support our SaaS application stack.

You’ll be the go‑to for onboarding, off‑boarding, and access automation, acting as a Tier 2 escalation point for the Service Desk while building the automations that keep IAM operations scalable as Crusoe grows.

What You’ll Be Working On

• Owning end-to-end user lifecycle management in Okta, including onboarding, off‑boarding, hires, rehires, and contractor conversions
• Managing sensitive off‑boarding scenarios, including closing out lingering user sessions on personal devices across Slack, Google Workspace, and other platforms
• Managing core SaaS application administration (e.g., Slack, Claude, Port.io, DocuSign), ensuring seamless user provisioning, role‑based access control (RBAC), and automated license reclamation to optimize software spend
• Building access request workflows and approval automations in our governance platform to streamline access delivery and enforce least‑privilege principles
• Building, executing, and supporting periodic user access reviews and entitlement certifications across core SaaS platforms to maintain compliance and audit readiness
• Administering Okta security features, including FastPass multifactor authentication and device trust, to strengthen access across the environment
• Building automations for application provisioning and repetitive IAM tasks using Okta Workflows and no‑code platforms, including custom SCIM solutions where native support falls short
• Training and empowering Service Desk team members on new security policies, IAM best practices, and major system changes, actively involving them in projects to ensure smooth operational handoffs
• Acting as a Tier 2 escalation point for the Service Desk on complex access, authentication, and application integration issues
• Partnering with the API team to define clear requirements for custom automations, leveraging Okta Workflows knowledge to bridge the gap between IAM and engineering
• Troubleshooting authentication failures, API errors, and access‑related incidents, using REST APIs and scripting to resolve issues or run bulk operations
• Documenting SOPs and runbooks that keep IAM operations consistent and scalable as the team grows

What You’ll Bring to the Team

• 5+ years of experience in Systems Engineering, IT Operations, or Identity & Access Management (IAM), with hands‑on Okta administration experience.
• Hands‑on experience with Identity Governance platforms (e.g., Lumos, Okta Identity Governance, or similar governance frameworks) to manage access requests, entitlements, and periodic access reviews.
• Proven experience managing user lifecycle automation, including onboarding, off‑boarding, hires, rehires, and contractor conversions.
• Deep familiarity with Okta security features, such as FastPass multifactor authentication (MFA) and device trust.
• Familiarity with SCIM provisioning, including building custom solutions when native support is unavailable.
• Working knowledge of no‑code or low‑code automation tools, particularly Okta Workflows.
• Strong troubleshooting skills across authentication issues, REST APIs, and scripting languages (e.g., Python, PowerShell) for bulk operations.
• Experience supporting multi‑platform enterprise environments, including Google Workspace and Slack.
• Clear communication skills and comfort partnering cross‑functionally with API, engineering, and Service Desk teams.

Bonus Points

• Exposure to identity governance platforms such as Lumos, Opal, or similar tools
• Experience with application integrations using OIDC or SAML
• Terraform or other infrastructure-as-code experience
• Okta Administrator or Consultant certification

Benefits:

• Competitive compensation and equity packages
• Restricted Stock Units
• Paid time off, paid holidays & leave of absence programs
• Comprehensive health, dental & vision insurance
• Employer contributions to HSA account
• Paid parental leave
• Paid life insurance, short‑term and long‑term disability
• Professional development & tuition reimbursement
• Mental health & wellness support
• Commuter benefits (parking & transit)
• Cell phone stipend
• 401(k) Retirement plan with company match up to 4% of salary
• Volunteer time off
• Global travel insurance & emergency assistance
• Daily meals allowanceAdditional perks & programs specific to location

Compensation Range

Compensation will be paid in the range of up to $165,000 - $200,000 + Bonus. Restricted Stock Units are included in all offers. Compensation to be determined by the applicant's knowledge, education, and abilities, as well as internal equity and alignment with market data.

Crusoe is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.