Senior IT Systems Engineer , Abridge

• Experience: 5–8 years in IT Systems Engineering, Corporate Infrastructure, or a closely related discipline within an enterprise environment
• Endpoint Expertise: Deep hands-on experience managing macOS fleets at scale using MDM platforms; iOS and Linux experience a plus
• Cloud Infrastructure: Working knowledge of at least one major cloud platform (GCP, AWS, or Azure) in a corporate IT context, IAM, networking, logging, and access controls
• Identity & Access Management: Strong understanding of SSO (SAML/OIDC), MFA enforcement, SCIM provisioning, and directory services administration
• Security & Compliance: Practical experience implementing technical controls aligned to SOC 2, HIPAA, or equivalent frameworks; familiarity with audit evidence collection
• Scripting & Automation: Proficiency in Bash, Python, or equivalent scripting for system administration and operational automation tasks
• Problem Solving: Ability to independently diagnose and resolve complex infrastructure and endpoint issues in a fast-moving environment

Desirable

• As a Senior IT Systems Engineer, you will own the design, deployment, and operational reliability of Abridge's corporate infrastructure and endpoint ecosystem
• This includes managing and hardening the device fleet, maintaining cloud and network infrastructure, and ensuring that all systems meet the rigorous configuration and compliance standards required of a healthcare AI company operating under SOC 2 and HIPAA frameworks
• You will work closely with the Security team, IT leadership, and cross-functional stakeholders to maintain a resilient, scalable, and audit-ready infrastructure posture
• Endpoint Management: Own the full lifecycle of corporate endpoints, macOS, iOS, and Linux, including imaging, configuration management, patch enforcement, and compliance remediation using MDM platforms (JAMF, Fleet, or equivalent)
• Infrastructure Operations: Manage and maintain cloud infrastructure components (GCP, AWS, and/or Azure) supporting corporate IT, including identity federation, network segmentation, and access controls
• Security & Compliance Hardening: Implement and enforce CIS benchmarks, endpoint security baselines, and configuration standards aligned with SOC 2 Trust Service Criteria and HIPAA technical safeguards
• Identity & Access Management: Administer and maintain SSO, MFA, and directory services (Okta, Google Workspace, or equivalent); support access provisioning and deprovisioning workflows
• Asset & Configuration Management: Maintain an accurate CMDB and asset inventory; enforce configuration-as-code practices where applicable
• Cross-functional Collaboration: Partner with Security, Engineering, and IT Automation peers to evaluate new tooling, respond to audit requests, and drive continuous improvement of the infrastructure posture