IT Systems Engineer

Kikoff Inc.

San Francisco, CA, United States

3 months ago

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Experienced

Experience required

4 years minimum

Compensation

$190,000.0 - $240,000.0

Working hours

Regular working hours

Job source

indeed.com

Tech stack

Microsoft Windows Artificial Intelligence Systems Engineering Automation of Tests Software as a Service Cloud Computing Cursor (Graphical User Interface Elements) Identity and Access Management Python (Programming Language) Role-Based Access Control Software Tools Zero Trust Network Access

+11 more

Software Construction Software Deployment Scripting Okta Large Language Models Information Technology Slack Patch Management Casper Suite Gsuite Security Orchestration, Automation & Response

Job description

Kikoff is hiring its first dedicated Systems Engineer. This isn’t an IT support role - you’ll be standing up AI-powered internal tooling (MCP, agents), owning our corporate identity foundation, and improving our overall corporate security. You’ll work directly with the engineering and security teams., * Corporate IT infrastructure - own and evolve our SaaS stack (Okta, Google Workspace, Slack). Procurement, provisioning, and lifecycle management

Identity & device trust - operate and mature our MDM stack (Rippling/Jamf/Kandji), enforce Okta Device Trust policies, and ensure endpoints meet our security baseline
MCP servers & AI agents - build and maintain internal MCP servers; design agents that automate internal ops and extend what the security and engineering teams can do
Endpoint hardening & macOS/Windows fleet management - configuration profiles, CIS benchmark enforcement, macOS scripting, software deployment, and patch management
Security automation - turn manual security tasks into automated workflows: access reviews, alert triage, onboarding/offboarding, posture checks

Requirements

Do you have experience in macOS?, This is a consumer fintech startup, and you will be working with serial entrepreneurs who have built strong consumer brands and innovative products. We value extreme ownership, clear communication, a strong sense of craftsmanship, and the desire to create lasting work and work relationships. Yes, you can build an exciting business AND have real-life real-customer impact., Must-have

4+ years in systems engineering, corporate IT, or a hybrid IT/security role - ideally at a startup
Deep macOS fluency: shell/Python scripting, configuration profiles, and hands-on MDM troubleshooting
Hands-on MDM experience (i.e., Rippling, Jamf, Kandji) - enrollment, policies, smart groups, zero-touch provisioning
Okta administration: lifecycle management, device trust policies, group rules
Proficient in scripting and building software - bash and Python at minimum. Expected to own automation scripts and internal tooling.
SaaS stack management: tool inventory, vendor renewals, access governance
Proficient using AI tools (Claude, Cursor, Codex or similar) as part of your daily workflow

Strong plus

Experience building or operating MCP servers or LLM agents
Familiarity with security concepts: least privilege, zero trust endpoint posture, log forwarding, DLP basics
Exposure to AWS IAM or cloud infrastructure
Experience with device trust architectures (Okta Device Trust, CrowdStrike, or similar)
Built internal tooling from scratch - provisioning workflows, self-service automations, or agent-driven ops