Senior IT Systems Engineer, Betterment

• Bachelor’s degree or equivalent practical experience in Information Systems, Technology, or a related field
• 6+ years of experience in IT systems engineering, SaaS administration, or enterprise technology operations
• Deep expertise in macOS administration and endpoint management at scale
• Strong experience with Okta and modern identity standards including SAML, OIDC, SCIM, and RBAC
• Proficiency in scripting and automation using tools such as Python, Bash, or similar
• Demonstrated ability to design, document, and operate scalable IT Systems in a cloud-first environment
• Strong debugging, problem-solving, and systems-thinking skills
• Customer-service mindset with a reliable, detail-oriented, and collaborative approach

Desirable

• Ntributor responsible for designing, scaling, and operating Betterment’s core IT systems and infrastructure
• This role sits at the intersection of identity, SaaS platforms, endpoint management, and automation, ensuring employees have secure, reliable, and seamless access to the tools they need to do their best work
• As a force multiplier within Corporate Technology, this role establishes standards, builds scalable systems, and reduces manual toil through automation and thoughtful system design
• The Senior IT Systems Engineer partners closely with Security, People Operations, Finance, and Engineering to ensure IT systems are secure, auditable, and built to scale with the business
• IT Systems & Infrastructure Engineering
• Design, implement, and maintain identity and access management architecture across the enterprise
• Own end-to-end employee lifecycle automation, integrating HRIS, identity, and downstream SaaS systems
• Administer and optimize core SaaS platforms including Google Workspace, Okta, Slack, Zoom, Lumos, Jamf and other business-critical tools
• Experience administering business system/enterprise apps such as HRIS (ADP, etc.), Finance (Netsuite, Salesforce, ZipHq), Access review/ Spend control (Lumos)
• Establish and maintain standards for system configuration, access models, and operational ownership
• Automation & Platform Enablement
• Automate repetitive IT workflows using scripting and infrastructure-as-code approaches
• Build scalable, self-service processes that reduce support burden and improve employee experience
• Standardize and codify IT infrastructure and workflows wherever possible to ensure consistency and reliability
• Experience withlow-code automation platforms: Boomi, Workato, Okta Workflows, Zapier
• Device & Endpoint Management
• Manage and scale macOS endpoint fleets, including configuration, patching, security controls, and policy enforcement
• Own MDM tooling, OS upgrade strategies, and endpoint security posture in partnership with Security
• Support Windows endpoints where required, particularly for Finance and other specialized functions
• Security & Compliance Partnership
• Implement and enforce IT security best practices across systems and endpoints
• Partner with Security Engineering and Risk to strengthen MFA, SSO, RBAC, and device trust controls
• Proactively identify, troubleshoot, and remediate IT-related security gaps and operational risks
• Support audit and compliance efforts by ensuring systems are well-documented, controlled, and auditable
• Security-first/minded approach
• Employee Experience & Support
• Act as a senior escalation point for IT Support, ensuring predictable availability and high-quality service
• Document IT standards, policies, and troubleshooting guides to promote clarity and consistency
• Improve onboarding, offboarding, and day-to-day employee experiences through reliable systems and automation