> Markdown version of [/jobs/ext/241429-it-systems-engineer](https://www.wearedevelopers.com/jobs/ext/241429-it-systems-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Systems Engineer

- **Company:** Kikoff Inc.
- **Location:** San Francisco, CA, United States
- **Experience:** Experienced
- **Salary:** $190,000.0 - $240,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Artificial Intelligence, Systems Engineering, Automation of Tests, Software as a Service, Cloud Computing, Cursor (Graphical User Interface Elements), Identity and Access Management, Python (Programming Language), Role-Based Access Control, Software Tools, Zero Trust Network Access, Software Construction, Software Deployment, Scripting, Okta, Large Language Models, Information Technology, Slack, Patch Management, Casper Suite, Gsuite, Security Orchestration, Automation & Response
- **Published:** May 20, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=6a32b73e980272f4

## About the Role

Do you have experience in macOS?, This is a consumer fintech startup, and you will be working with serial entrepreneurs who have built strong consumer brands and innovative products. We value extreme ownership, clear communication, a strong sense of craftsmanship, and the desire to create lasting work and work relationships. Yes, you can build an exciting business AND have real-life real-customer impact., Must-have

 * 4+ years in systems engineering, corporate IT, or a hybrid IT/security role - ideally at a startup
 * Deep macOS fluency: shell/Python scripting, configuration profiles, and hands-on MDM troubleshooting
 * Hands-on MDM experience (i.e., Rippling, Jamf, Kandji) - enrollment, policies, smart groups, zero-touch provisioning
 * Okta administration: lifecycle management, device trust policies, group rules
 * Proficient in scripting and building software - bash and Python at minimum. Expected to own automation scripts and internal tooling.
 * SaaS stack management: tool inventory, vendor renewals, access governance
 * Proficient using AI tools (Claude, Cursor, Codex or similar) as part of your daily workflow

Strong plus

 * Experience building or operating MCP servers or LLM agents
 * Familiarity with security concepts: least privilege, zero trust endpoint posture, log forwarding, DLP basics
 * Exposure to AWS IAM or cloud infrastructure
 * Experience with device trust architectures (Okta Device Trust, CrowdStrike, or similar)
 * Built internal tooling from scratch - provisioning workflows, self-service automations, or agent-driven ops

## Description

Kikoff is hiring its first dedicated Systems Engineer. This isn't an IT support role - you'll be standing up AI-powered internal tooling (MCP, agents), owning our corporate identity foundation, and improving our overall corporate security. You'll work directly with the engineering and security teams., * Corporate IT infrastructure - own and evolve our SaaS stack (Okta, Google Workspace, Slack). Procurement, provisioning, and lifecycle management

 * Identity & device trust - operate and mature our MDM stack (Rippling/Jamf/Kandji), enforce Okta Device Trust policies, and ensure endpoints meet our security baseline
 * MCP servers & AI agents - build and maintain internal MCP servers; design agents that automate internal ops and extend what the security and engineering teams can do
 * Endpoint hardening & macOS/Windows fleet management - configuration profiles, CIS benchmark enforcement, macOS scripting, software deployment, and patch management
 * Security automation - turn manual security tasks into automated workflows: access reviews, alert triage, onboarding/offboarding, posture checks


## Related Videos

- [Agentic employees in world's most downloaded FinTech app](https://www.wearedevelopers.com/videos/100123-agentic-employees-in-world-s-most-downloaded-fintech-app)
- [Stack Overflow: Community and AI](https://www.wearedevelopers.com/videos/600-stack-overflow-community-and-ai)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Cloud as the new mainframe: why the cloud hype does not reflect the dev reality](https://www.wearedevelopers.com/videos/797-cloud-as-the-new-mainframe-why-the-cloud-hype-does-not-reflect-the-dev-reality)
- [Startup Presentation: Dealing with the bug Mafia](https://www.wearedevelopers.com/videos/1175-startup-presentation-dealing-with-the-bug-mafia)
- [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most)

## Related Articles

- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Dev Digest 137 - AI'm not sure about this](https://www.wearedevelopers.com/magazine/485-dev-digest-137-ai-m-not-sure-about-this)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)