Staff IT & Security Engineer

Responsibilities

• Enterprise AI Tools Ownership & Governance
• Security & Compliance
• Identity & Access Management Architecture
• SaaS Administration & Vendor Management
• IT Budget Support & Financial Operations
• Automation & Engineering
• Mentorship, Documentation & Strategic Support

About The Role

Flow is seeking an experienced Staff IT & Security Engineer to lead and own our internal IT systems, security posture, automation efforts, and enterprise AI tool ecosystem.

Qualifications

• 7+ years of experience in IT engineering, security engineering, infrastructure, or a closely related senior role
• Deep knowledge of identity and access management — SSO, SAML, RBAC, Google Workspace administration, and MDM policy design (Addigy, JumpCloud, Jamf, or equivalent)
• Hands-on experience with cloud platforms (GCP, AWS, or Azure) — deploying and maintaining services in production cloud environments
• Direct experience owning enterprise AI tools at an organizational level — governance, access control, usage monitoring, and policy enforcement
• Experience building or maintaining AI-powered internal tools — REST APIs, LLM integrations, Slack bots, or cloud-hosted automation services
• Familiarity with physical security system architecture — video management systems, IP access control platforms, or intercom/visitor management systems
• Ubiquiti/UniFi network architecture experience — VLAN design, firewall policy, multi-site wireless
• Experience with cloud FinOps practices — billing export analysis, committed use discount modeling, cost allocation tagging
• UCaaS or VoIP platform experience — Zoom Phone, RingCentral, or equivalent
• Residential or hospitality property technology environment experience
• Bilingual English/Spanish

Preferred Qualifications

• Experience with physical security system architecture — video management systems, IP access control platforms, or intercom/visitor management systems
• Ubiquiti/UniFi network architecture experience — VLAN design, firewall policy, multi-site wireless
• ITSM platform administration — Freshservice, Jira Service Management, or equivalent
• UCaaS or VoIP platform experience — Zoom Phone, RingCentral, or equivalent
• Residential or hospitality property technology environment experience
• Bilingual English/Spanish