Systems Engineer – IT

Doist; Seattle (WA); On-site; USD 75,000 - 90,000; Full time

Benefits offered by this job

Equity

Health benefits

Flexible time off

Job summary

Read AI is hiring a Security & IT Systems Engineer to own IT and security operations, turning a manual support queue into engineered systems that scale. You’ll manage laptops, MDM, identity administration, and the office network, while collaborating with a security team to raise the overall security posture.

The role emphasizes building automated workflows, writing code in Python/Go/TypeScript, and using Terraform to manage infrastructure. Hybrid presence in Seattle is required.

Qualifications

• 3+ years in IT operations or similar hands-on role with ownership of systems.
• Hands-on experience administering an MDM platform (FleetDM, Jamf, Kandji, Intune) and macOS fleets at scale.
• Practical identity administration experience: Google Workspace or Okta, SSO/SAML/SCIM integrations.
• Demonstrated automation ability — written scripts or services replacing manual processes.
• Working familiarity with AWS and cloud access models.
• Strong service instincts: patient with interruptions, clear in writing, organized to protect project time.
• Based in the Seattle area and able to work on a hybrid schedule, including in-person support and physical equipment duties.

Responsibilities

• Own the laptop fleet end to end: procurement, imaging, hardware and OS refresh cycles, and support.
• Administer FleetDM MDM and our Apple Business Manager account, maintaining full enrollment and patch compliance.
• Roll out and manage BYOD mobile enrollment for iOS and Android using work profiles, so work resources stay in a managed, independently wipeable container.
• Maintain the IT equipment closet and asset inventory.
• Administer Google Workspace: user lifecycle, groups and group membership, and organizational settings.
• Own SSO, SAML, and SCIM integrations, and standardize how new applications get onboarded to them.
• Run recurring access reviews and keep groups as the single source of truth for access.
• Build automated onboarding and offboarding workflows across Ravenna, Google Workspace, and Gusto — role-based access on day one, provably complete deprovisioning on exit.
• Field IT support requests through Ravenna, Slack, and in person, with clear response and resolution targets.
• Document recurring requests into self-service knowledge so ticket volume drops over time.
• Manage our Unifi network and office infrastructure, including our Xerox printer.
• Administer our phishing triage and security awareness program (Adaptive Security), including campaigns, reporting, and remediation loops.
• Perform first-pass triage of security alerts and events from AWS and Panther, following documented runbooks and escalating with judgment.
• Answer general and low-level security questions from across the company.
• Write real code — Python, Go, or TypeScript — to eliminate manual operational work.
• Use infrastructure-as-code (Terraform) for the systems you own.
• Scope, deliver, and document security and IT tooling initiatives end to end.

Skills

IT operations

MDM administration

Identity administration

Automation scripting

AWS / cloud access

Service mindset

Security judgement

Seattle hybrid work

Tools

FleetDM

Jamf

Kandji

Intune

Job description

About Read AI:

At Read AI we’re redefining how teams collaborate by bringing intelligence to every conversation. Our platform supercharges productivity across meetings, messages, and email, so work gets done faster, smarter, and with better focus. We integrate seamlessly with tools like Zoom, Microsoft Teams, Google Meet, Slack, and more, helping teams stay aligned and move forward, whether they’re in the same room or across time zones. Backed by $81 million in funding from Smash Capital, Madrona, and Goodwater Capital, Read AI is growing. If you're excited to shape the future of AI-powered collaboration and want to make an impact at a product-focused startup, we’d love to meet you.

The Role:

We're hiring a Security & IT Systems Engineer to take full ownership of IT and systems operations at Read AI, and to share the front line of security operations with our security team. Today, this work lives with our Staff Security Engineer, which limits how much deeper security engineering we can do. You'll take it over — the laptop fleet, MDM, identity administration, the office network, and the IT support experience — and then improve it. This isn't a ticket-closing role. The explicit mandate is to turn IT from a queue of manual, one-off requests into engineered systems that scale past our current headcount.

What You'll Do:

Device and fleet management

• Own the laptop fleet end to end: procurement, imaging, hardware and OS refresh cycles, and support
• Administer FleetDM MDM and our Apple Business Manager account, maintaining full enrollment and patch compliance
• Roll out and manage BYOD mobile enrollment for iOS and Android using work profiles, so work resources stay in a managed, independently wipeable container
• Maintain the IT equipment closet and asset inventory

Identity and access

• Administer Google Workspace: user lifecycle, groups and group membership, and organizational settings
• Own SSO, SAML, and SCIM integrations, and standardize how new applications get onboarded to them
• Run recurring access reviews and keep groups as the single source of truth for access
• Build automated onboarding and offboarding workflows across Ravenna, Google Workspace, and Gusto — role-based access on day one, provably complete deprovisioning on exit

IT support and infrastructure

• Field IT support requests through Ravenna, Slack, and in person, with clear response and resolution targets
• Document recurring requests into self-service knowledge so ticket volume drops over time
• Manage our Unifi network and office infrastructure, including our Xerox printer

Security operations

• Administer our phishing triage and security awareness program (Adaptive Security), including campaigns, reporting, and remediation loops
• Perform first-pass triage of security alerts and events from AWS and Panther, following documented runbooks and escalating with judgment
• Answer general and low-level security questions from across the company

Engineering and automation

• Write real code — Python, Go, or TypeScript — to eliminate manual operational work
• Use infrastructure-as-code (Terraform) for the systems you own
• Scope, deliver, and document security and IT tooling initiatives end to end

What We're Looking For:

• 3+ years in IT operations, systems administration, or a similar hands-on role, with real ownership of the systems you ran
• Hands-on experience administering an MDM platform (FleetDM, Jamf, Kandji, Intune, or similar) and managing macOS fleets at scale
• Practical identity administration experience: Google Workspace or Okta, group-based access, and SSO/SAML/SCIM integrations
• Demonstrated automation ability — you've written scripts or services that replaced manual processes, in Python, Go, TypeScript, or similar
• Working familiarity with AWS and cloud access models
• Strong service instincts: patient with interruptions, clear in writing, and organized enough to protect project time
• Sound security judgment, including knowing when you're uncertain and escalating early
• Based in the Seattle area and able to work on a hybrid schedule, including in-person support and physical equipment duties

Nice to Have:

• Experience with BYOD mobile management and Android/iOS work profiles
• Exposure to a SIEM (Panther, Splunk, Datadog) and alert triage workflows
• Experience administering a phishing simulation or security awareness platform
• Terraform or other IaC experience
• Experience integrating an HRIS (Gusto, Rippling, Workday) with identity provisioning

Why This Role Matters:

Read AI's products sit on top of our customers' most sensitive communication. The internal systems that decide who can access what, from which device, are the foundation that trust rests on. Getting identity, device posture, and access provisioning right isn't back-office work here — it's directly upstream of whether we can credibly tell customers their data is safe.

You’ll also be defining these systems while they're still malleable. Device policy, BYOD posture, access review cadence — the decisions you make in your first year will be the way Read AI works for years afterward.

Why Read AI?

Innovative: We bring AI to the masses with proactive technology that acts as the ultimate AI assistant. Built on our proprietary, patented technology, Read AI takes notes, surfaces information, facilitates collaboration, and learns you, making individuals and teams more effective.

Massive Impact: AI's greatest impact will be on the ability to allow people to do more, taking away mundane tasks, and guiding them to the next best action.

Growth Opportunities: Read AI is the fastest growing AI-copilot and meeting notetaker in history, and is one of the leading AI companies in the world, adding more than 1MM new customers every month. The company raised Series A and B in 2024, also was recognized as a Top Startup in Seattle by LinkedIn (2025), also notably a Top Company To Watch in 2025 by Inc Magazine, and is one of the Top AI Companies in Demand by Startups, according to a16z.

Leadership: Learn more about CEO and Co-Founder David Shim in this Fortune Good Life profile and listen to him share his vision for AI Agents, Digital Twins and the Future of Work. CTO and Co-Founder Rob Williams was recently anointed as one of the most disruptive leaders in AI. For more on our technology, Co-Founder and VP Data Science Elliott Waldron goes behind-the-scenes on our patents and models in this tech brief.

Collaborative Culture: Work in a supportive and collaborative environment with a diverse and talented team.

This positions offer a base pay range of $75,000 - $90,000 plus equity and benefits. Please note that the base pay shown is a guideline, and individual total compensation will vary based on factors such as qualifications, skill level, competencies, and work location. We also offer low deductible health plans, as well as flexible time away and family leave programs.

Please note our company does not provide visa support or sponsorship for employees.