IT Operations Engineer

• Own day to day end user support across hardware, software, accounts and access requests, serving as the primary point of contact through Console helpdesk and Slack.
• Run full IT onboarding and offboarding, including device provisioning through JumpCloud and Apple Business Manager, account setup and the new hire IT and security session.
• Own IT asset and inventory management across all offices, tracking hardware through its full lifecycle from procurement and assignment to refresh and retirement, with an accurate inventory
• Improve and document IT processes, including workflows, runbooks and onboarding guides, and drive down recurring ticket volume.
• Manage the SaaS portfolio, including licenses, renewals, enterprise tier upgrades and rightsizing spend.
• Lead vendor management and vendor security reviews, evaluating new tools, negotiating pricing and terms and onboarding approved vendors.
• Own onsite IT, networking and AV across all Rain offices, including UniFi network management, conference room infrastructure and physical security systems

Automation, agentic AI and identity engineering

• Design and build automation that eliminates manual toil across IT, HR and security, from simple scripts to agentic AI workflows.
• Architect and operate identity lifecycle automation in Okta and Okta Workflows, including joiner mover leaver provisioning and instant deprovisioning across the SaaS stack.
• Write and maintain scripts and lightweight internal integrations in Python and JavaScript to connect platforms that lack native integrations.
• Build AI assisted helpdesk deflection and self service flows that resolve common requests automatically and route the rest with context attached.
• Identify high leverage automation opportunities and ship reliable, monitored solutions with proper error handling and alerting.
• Document all automation processes, system architecture and Okta configurations thoroughly so the work is maintainable and knowledge transfers cleanly.

Security and Compliance

• Support SOC 2 Type II, PCI DSS and GDPR efforts, including evidence collection, access reviews and control monitoring using tools such as Vanta.
• Help enforce endpoint and access security across CrowdStrike, JumpCloud and Okta, including device posture and conditional access.
• Assist with security alert triage and incident response in coordination with the IT Manager.

• 3 or more years in IT support, IT systems engineering or automation engineering, ideally at a startup or hypergrowth company.
• Hands on Okta administration experience, including SSO, MFA, Group Rules and Universal Directory, with Okta Workflows a strong plus.
• Scripting and automation proficiency in Python and JavaScript for API interaction and system management.
• Familiarity with a modern SaaS and endpoint stack such as Google Workspace, Slack, JumpCloud, CrowdStrike and more.
• Hands on experience with office networking and AV such as UniFi, and comfort supporting onsite infrastructure across multiple offices.
• A working understanding of compliance frameworks such as SOC 2, PCI DSS and GDPR and how IT controls map to them.
• Strong end user support instincts and excellent written and verbal communication.
• A bias toward action and genuine comfort wearing many hats and filling gaps across corporate IT and security on a small team.

Nice to have:

• Experience in fintech, payments or another regulated and high compliance environment.
• Experience with agentic AI tools and building AI powered internal workflows.
• Vendor negotiation and SaaS cost optimization experience.

Unlimited time off Unlimited vacation can be daunting, so we require Rainmakers to take 10 days minimum for themselves.

Flexible working We support a flexible workplace - work from home, come into an office, or both. We want everyone to work in an environment where they’re their most confident and productive selves. New Rainmakers receive a stipend to set up a comfortable home workspace.

Easy to access benefits For US Rainmakers, we cover 95% of your health, dental, and vision plan costs and 90% for your dependents, plus a 100% company-subsidized life insurance plan.

Retirement goals Plan for the future with confidence. We offer a 401(k) with a 4% company match.

Rain is the global stablecoin payments platform for enterprises, neobanks, platforms, developers, and AI agents. Our technology allows partners to move, store, and use stablecoins instantly and compliantly through global payment cards, rewards, on/offramps, wallets, and cross-border rails. As both a Visa and Mastercard Principal Member, Rain issues cards that work at more than 175 million merchant locations in over 220 countries and territories. Built natively for stablecoins and trusted by more than 100 organizations worldwide, Rain delivers secure, scalable infrastructure that makes money move freely and instantly around the world.