Sr. IT Systems Engineer

About the role

The Senior IT Systems Engineer is a hands-on, senior individual contributor responsible for designing, scaling, and operating Betterment's core IT systems and infrastructure. This role sits at the intersection of identity, SaaS platforms, endpoint management, and automation, ensuring employees have secure, reliable, and seamless access to the tools they need to do their best work.

This role is based out of our NYC office.

Responsibilities

• IT Systems & Infrastructure Engineering
  • Design, implement, and maintain identity and access management architecture across the enterprise.
  • Own end-to-end employee lifecycle automation, integrating HRIS, identity, and downstream SaaS systems.
  • Administer and optimize core SaaS platforms including Google Workspace, Okta, Slack, Zoom, Lumos, Jamf and other business-critical tools.
  • Experience administering business system/enterprise apps such as HRIS (ADP, etc.), Finance (Netsuite, Salesforce, ZipHq), Access review/ Spend control (Lumos).
  • Establish and maintain standards for system configuration, access models, and operational ownership.
• Automation & Platform Enablement
  • Automate repetitive IT workflows using scripting and infrastructure-as-code approaches.
  • Build scalable, self-service processes that reduce support burden and improve employee experience.
  • Standardize and codify IT infrastructure and workflows wherever possible to ensure consistency and reliability.
  • Experience with low-code automation platforms: Boomi, Workato, Okta Workflows, Zapier.
• Device & Endpoint Management
  • Manage and scale macOS endpoint fleets, including configuration, patching, security controls, and policy enforcement.
  • Own MDM tooling, OS upgrade strategies, and endpoint security posture in partnership with Security.
  • Support Windows endpoints where required, particularly for Finance and other specialized functions.
• Security & Compliance Partnership
  • Implement and enforce IT security best practices across systems and endpoints.
  • Partner with Security Engineering and Risk to strengthen MFA, SSO, RBAC, and device trust controls.
  • Proactively identify, troubleshoot, and remediate IT-related security gaps and operational risks.
  • Support audit and compliance efforts by ensuring systems are well-documented, controlled, and auditable.
• Employee Experience & Support
  • Act as a senior escalation point for IT Support, ensuring predictable availability and high-quality service.
  • Document IT standards, policies, and troubleshooting guides to promote clarity and consistency.
  • Improve onboarding, offboarding, and day-to-day employee experiences through reliable systems and automation.

Requirements

• Bachelor’s degree or equivalent practical experience in Information Systems, Technology, or a related field.
• 6+ years of experience in IT systems engineering, SaaS administration, or enterprise technology operations.
• Deep expertise in macOS administration and endpoint management at scale.
• Strong experience with Okta and modern identity standards including SAML, OIDC, SCIM, and RBAC.
• Proficiency in scripting and automation using tools such as Python, Bash, or similar.
• Demonstrated ability to design, document, and operate scalable IT Systems in a cloud-first environment.
• Strong debugging, problem-solving, and systems-thinking skills.
• Customer-service mindset with a reliable, detail-oriented, and collaborative approach.

Qualifications

• Nice to Have
• Experience with infrastructure-as-code tools such as Terraform.
• Familiarity with IT security controls in regulated environments (SOC 2, ISO 27001, SOX).
• Experience supporting high-growth organizations through scale or operational maturity transitions.
• Strong documentation and process-design discipline.