Systems Engineer, Corporate Security & Automation

RAMP; New York; On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Flexible PTO

Centralized home-office equipment

Health and wellness stipend

Intra-office travel budget

Weekly coffee stipend

Job summary

Ramp is seeking a Systems Engineer to own and automate security controls across device fleets, identity, and AI tools. You will write code, implement configuration-as-code, and extend automation to manage Okta policies, EDR, and enterprise AI usage.

You will report to the Corporate Security lead and collaborate with IT, Security Engineering, and AI DevX to keep systems secure and compliant in a fast-moving environment.

Qualifications

• 3–5 years of experience in Client Platform Engineering, Identity Access & Management, or Corporate Security.
• Hands-on macOS management at scale with MDM (Jamf, Fleet, Kandji, or equivalent).
• Working knowledge of an identity provider (Okta or similar): SSO, authentication and policies, SCIM provisioning, and conditional access.
• Scripting ability in Python, Go, or Bash, and experience automating against platform APIs.
• Experience with EDR and endpoint vulnerability management (CrowdStrike or similar).
• Ability to evaluate tradeoffs between enforcement, policy, and user friction, and to explain those tradeoffs clearly.

Responsibilities

• Maintain update policies for OS and software, and monitor the fleet patching cadence.
• Build automation for endpoint security agent remediation across EDR, DLP, VPN, and similar tooling.
• Maintain device configuration baselines as code, including drift detection and hardening.
• Configure authentication and authenticator policies in Okta: SSO, MFA, device trust, conditional access.
• Remediate identity posture gaps surfaced by ISPM tooling: stale accounts, over-scoped OAuth, MFA gaps.
• Implement and operate controls for enterprise AI usage, including access, logging, DLP, and enforcement.
• Automate across platforms using APIs, build reporting on control coverage, and document operations.

Skills

macOS MDM

Okta SSO

Python

Go

Bash

EDR

Vulnerability mgmt

Policy tradeoffs

Tools

Jamf

Fleet

Kandji

Job description

Ramp is seeking a Systems Engineer to own and automate security controls across device fleets, identity, and AI tools. You will write code, implement configuration-as-code, and extend automation to manage Okta policies, EDR, and enterprise AI usage.

You will report to the Corporate Security lead and collaborate with IT, Security Engineering, and AI DevX to keep systems secure and compliant in a fast-moving environment.