> Markdown version of [/jobs/ext/2708304-systems-engineer-iam](https://www.wearedevelopers.com/jobs/ext/2708304-systems-engineer-iam). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Systems Engineer - IAM - **Company:** Crusoe's Inc - **Location:** San Francisco, CA, United States - **Experience:** Expert - **Salary:** $165,000.0 - $200,000.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Systems Engineering, Build Automation, Business Systems, Identity and Access Management, Python (Programming Language), OAuth, OpenID, Windows PowerShell, Role-Based Access Control, Security Assertion Markup Language (SAML), Systems Integration, Scripting, Event Processing Language, Okta, Zapier, Information Technology, Gsuite, Restful APIs - **Published:** September 4, 2026 - **Apply:** https://startup.jobs/senior-systems-engineer-iam-crusoe-8029611 ## About the Role * 5+ years of experience in Systems Engineering or Identity & Access Management, with strong expertise in Okta administration and identity lifecycle management * Deep knowledge of Okta's security capabilities; Okta Administrator or Consultant certifications are strongly preferred * Experience with Lumos or similar identity governance platforms * Proven ability to build automation workflows using tools such as Workato or Okta Workflows * Strong troubleshooting skills, including diagnosing authentication issues, API failures, and access-related incidents. Must be fluent in interacting with REST APIs and using scripting languages (Python, PowerShell, or similar) to troubleshoot failures or perform bulk operations. * Solid understanding of RBAC, identity governance, PAM (Privileged Access Management) rollout and strategy, and zero-trust security principles. * Strong communication skills with the ability to translate technical concepts into clear documentation and processes * Familiarity with Google Workspace Enterprise (organizational units, policies, and security configurations) * Bachelor's or Master's degree in Computer Science, Engineering, or equivalent professional experience Bonus Points * Strong planning, communication, and change management skills * Experience working in fast-paced, global environments with distributed teams ## Description As a Senior Systems Engineer, you'll play a key role in building and optimizing Crusoe's global technology infrastructure. This is a hands-on, on-site role working closely with our global IT team to ensure systems are reliable, secure, and scalable to support Crusoe's growth. You will lead initiatives across identity and access management, automation, and system integrations while driving operational efficiency and strengthening Crusoe's security posture. What You'll Be Working On * Managing advanced Okta functionality, including Device Trust, Okta Expression Language, and complex identity lifecycle management * Implementing and maintaining RBAC best practices and adaptive security policies to ensure global consistency in access governance * Building automated workflows using Workato, Okta Workflows, and Lumos to eliminate manual processes and improve operational efficiency * Planning and executing application integrations (SAML, OIDC, OAuth) and system changes with minimal disruption to business operations * Partnering with IAM leadership and integration engineers to connect business systems and support feature adoption across the IT ecosystem * Acting as a Tier 2 escalation point for complex access issues, supporting the Service Desk and broader infrastructure needs * Mentoring and training Service Desk team members, developing documentation and SOPs to enable independent execution of common IAM tasks * Participating in global team collaboration, including occasional off-hours syncs to support distributed operations ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Recruitment Reinvented: Bold strategies and the $10K signing incentive](https://www.wearedevelopers.com/videos/1068-recruitment-reinvented-bold-strategies-and-the-10k-signing-incentive) - [Agentic employees in world's most downloaded FinTech app](https://www.wearedevelopers.com/videos/100123-agentic-employees-in-world-s-most-downloaded-fintech-app) - [Advanced Cypress: custom assertions and tasks](https://www.wearedevelopers.com/videos/790-advanced-cypress-custom-assertions-and-tasks) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)