Senior IT Systems Engineer

About the Team

Klaviyo’s global corporate Information Technology (IT) team is responsible for providing technology systems, administration, and support to Klaviyos around the world. Our main goal is to ensure that Klaviyos everywhere have a strong technology foundation to do great work. The IT Team solves problems using technology and provides Klaviyo’s continued scalability and sustainable employee growth in a rapidly evolving environment. The IT Systems team is primarily responsible for SaaS systems administration and end-to-end lifecycle management, building automation, and engineering solutions for both other internal teams and the business. The IT Systems team is highly collaborative, working closely with the IT Searchbar team, our end-user support team as well as with our Security, Risk, and Trust teams and the broader Engineering department.

About the Role

As a Senior IT Systems Engineer on the IT Systems team, you own the design, implementation, and long-term health of the enterprise systems Klaviyo runs on identity, endpoint management, and the SaaS platforms every Klaviyo touches. You will lead projects end to end, from SSO/SCIM rollouts to complex multi-tool integrations and automations, and you will be trusted to take an ambiguous business problem, define the problem statement yourself, and deliver a solution that scales. You will partner with operations, engineering, Security, and the IT Searchbar team, and act as a technical escalation point when systems break. Klaviyo is building an AI-first future, and IT is where a lot of that gets real. You will use AI fluently in your own work and help design AI-assisted workflows into the systems we run for the rest of the company. This is a senior individual contributor role: no direct reports, high autonomy, and real ownership. We are looking for someone who has already run systems at scale, holds opinions grounded in experience, and can be handed a domain and trusted to run it.

How You’ll Have An Impact

• Own systems, not tickets. You will take a domain identity, endpoint, or a set of core SaaS platforms and be accountable for its reliability, security, and roadmap, raising the decisions that need to go higher and driving everything else yourself.
• Lead projects end to end at pace: scope the work, design the solution, plan the rollout and the rollback, communicate the change, and land it without skipping testing, peer review, or documentation to hit a date.
• Turn ambiguous business needs into clear problem statements and systems that hold up, so Klaviyos spend their time on their work instead of fighting their tools.
• Set the technical bar: clean configuration, least-privilege access by default, automation over manual toil, and runbooks the rest of the team can operate from without you in the room.
• Define what success looks like before you build, then prove it with data tickets deflected, provisioning time saved, coverage and compliance gaps closed.
• Raise the people around you: review others’ work, mentor engineers earlier in their careers, and give and receive direct, useful feedback.
• Act as a technical escalation point for complex system issues, drive root cause rather than symptoms, and feed what you learn back into the platform so the same incident does not happen twice.

Requirements

• 4+ years of hands-on experience as a systems engineer or systems administrator, with a track record of owning enterprise systems in production—not just operating them, but deciding how they should work.
• You define problem statements yourself. You can take a vague or contested business need, scope it, drive alignment with stakeholders, and deliver with minimal direction without losing the thread when priorities shift.
• Deep working knowledge across a wide range of IT systems, including enterprise device management, identity and access management, and endpoint security.
• You have deployed and managed macOS and iOS devices at scale through an MDM (Jamf preferred), including configuration profiles, policies, and OS update strategy. Windows management (Intune, Autopilot) is a strong plus.
• You have administered core SaaS platforms such as Google Workspace, Slack, Atlassian, and Zoom, including their security and admin controls.
• Hands-on experience with IdP configuration, management, and maintenance: SSO (SAML/OIDC), SCIM provisioning, group and role design, and app onboarding. Experience with Okta or Entra ID (Azure AD) is preferred.
• You have owned the identity lifecycle in practice—onboarding, role changes, and offboarding—and understand the security and audit consequences of getting it wrong.
• AI proficiency: AI is already part of how you work, and you can show it. You use LLM assistants and agents to research, write and debug code, draft documentation, and compress routine work, and you exercise judgment about when to trust the output. You are actively interested in putting AI into the systems you run—automating triage, enrichment, and repetitive workflows for the wider company.
• You automate by default, and you have the scripting skills to do it: Bash, PowerShell, or Python. Python is preferred and AWS Lambda experience is a plus. You have replaced manual, repetitive work with automation other people now rely on, and you can safely read and modify someone else’s script.
• Comfortable working with APIs—REST, JSON, authentication, and rate limits—and building integrations between systems that do not natively talk to each other.
• You value clean, concise controls and easily editable security functionality within tools, and you can produce evidence for access reviews and audits (SOC 2, SOX) without it derailing your week.
• Disciplined change management: you test,