Systems Engineer, Corporate Security & IAM Automation

Ramp; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible PTO

Home-office stipend

Wellness stipend

Travel stipend

Coffee stipend

Job summary

Ramp is seeking a Systems Engineer for Corporate Security to own and operate controls across device fleet, identity, and AI tooling. The role is hands-on, involving configuration-as-code, policy enforcement, and automation through APIs.

You will collaborate with IT, Security Engineering, and AI DevX to strengthen our security posture. You will report to the Corporate Security lead and contribute to seamless, secure operations at Ramp’s scale, including EDR, IAM policies, and AI governance.

Qualifications

• 3–5 years of experience in Client Platform Engineer/Endpoint Engineering, IAM, or Corporate Security.
• Hands-on macOS management at scale with MDM and update mechanisms.
• Working knowledge of an identity provider: SSO, policies, SCIM provisioning, and conditional access.
• Scripting ability in Python, Go, or Bash, with API automation experience.
• Experience with EDR and endpoint vulnerability management (CrowdStrike or similar).
• Ability to evaluate tradeoffs between enforcement, policy, and user friction, and explain them clearly.

Responsibilities

• Maintain update policies for OS and software and monitor fleet, bringing new apps into patch cadence.
• Build automation for endpoint security agent remediation across EDR, DLP, VPN, and similar tooling.
• Maintain device configuration baselines as code, including drift detection and hardening standards.
• Configure authentication and authenticator policies in Okta: SSO, MFA and enrollment, device trust, and conditional access.
• Remediate identity posture gaps from ISPM tooling: stale accounts, orphaned service principals, over-scoped OAuth grants, MFA gaps, and excess privileges.
• Implement and operate controls for enterprise AI usage, including identity-aware access, logging and retention, DLP, and enforcement.
• Automate across platforms via APIs, build reporting on control coverage, and document operations.

Skills

macOS management

MDM

Okta SSO

Scripting: Python/Go/Bash

EDR / vulnerability mgmt

Cloudflare Zero Trust

Tools

Jamf

Fleet

Kandji

CrowdStrike

Job description

Ramp is seeking a Systems Engineer for Corporate Security to own and operate controls across device fleet, identity, and AI tooling. The role is hands-on, involving configuration-as-code, policy enforcement, and automation through APIs.

You will collaborate with IT, Security Engineering, and AI DevX to strengthen our security posture. You will report to the Corporate Security lead and contribute to seamless, secure operations at Ramp’s scale, including EDR, IAM policies, and AI governance.