[All remote jobs](https://jobicy.com/jobs.md)[![Flex logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/7bfdefe3-221.jpeg)](https://jobicy.com/company/flex.md)[Flex](https://jobicy.com/company/flex.md) # Senior IT & Corporate Engineering Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move. [Apply for this job](#job-application)[View company](https://jobicy.com/company/flex.md)ShareRemote from[USA](https://jobicy.com/job-region/usa.md)SalaryUSD 145k–200k / yrDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceSeniorPublished18 Oct 2026Apply before17 Nov 2026Listing views38Application actions1Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. AI Summary ## The role, at a glance. Flex is seeking a senior hands-on individual contributor to own corporate IT, identity, endpoint management, SaaS governance, and corporate security posture. The role reports to the CTO and combines strategic ownership with direct implementation of automation, access controls, and internal tooling. Key responsibilities include administering Okta and Google Workspace, designing joiner/mover/leaver processes, managing an external IT provider, and strengthening conditional access, MFA, MDM, and privileged-access controls. The successful candidate will work independently in a fast-moving financial technology environment while partnering closely with Security, People, Finance, Legal, and engineering teams. This is not a people-management role; it requires a builder who can make secure, self-service internal systems scale with company growth. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 5/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 5/5IndependentCollaborative AI insightThis is a broad, high-accountability role that combines IT operations, identity architecture, automation, vendor management, and corporate security ownership for a distributed fintech company. The candidate must make independent risk decisions while building scalable systems as the sole internal owner of the function. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Market rate$172,500US market range (per year)$150k–$210k0$231.00k AI insightFlex discloses a yearly base-compensation range of $145,000 to $200,000 USD, with a midpoint of $172,500. This is a credible annual range for a senior US-based corporate IT and security individual contributor with end-to-end ownership in a regulated, high-growth fintech environment. The estimated US market range for comparable roles is approximately $150,000 to $210,000 per year. ## Core skills Skills and capabilities most closely associated with this opportunity. [Corporate IT](https://jobicy.com/jobs?search_keywords=Corporate%20IT.md)[Identity and Access Management](https://jobicy.com/jobs?search_keywords=Identity%20and%20Access%20Management.md)[Okta](https://jobicy.com/jobs?search_keywords=Okta.md)[Google Workspace](https://jobicy.com/jobs?search_keywords=Google%20Workspace.md)[Single Sign-On](https://jobicy.com/jobs?search_keywords=Single%20Sign-On.md)[SCIM](https://jobicy.com/jobs?search_keywords=SCIM.md)[SAML](https://jobicy.com/jobs?search_keywords=SAML.md)[MDM](https://jobicy.com/jobs?search_keywords=MDM.md)[Endpoint Security](https://jobicy.com/jobs?search_keywords=Endpoint%20Security.md)[Conditional Access](https://jobicy.com/jobs?search_keywords=Conditional%20Access.md)[MFA](https://jobicy.com/jobs?search_keywords=MFA.md)[Python Automation](https://jobicy.com/jobs?search_keywords=Python%20Automation.md)[SaaS Governance](https://jobicy.com/jobs?search_keywords=SaaS%20Governance.md)[Vendor Management](https://jobicy.com/jobs?search_keywords=Vendor%20Management.md)[Access Reviews](https://jobicy.com/jobs?search_keywords=Access%20Reviews.md) Sample interview questionsHow would you redesign a joiner, mover, and leaver process to improve both employee productivity and security?I would begin by mapping authoritative data sources and defining clear ownership across People, IT, and managers. I would automate account provisioning and role-based access through HRIS-triggered workflows, SCIM, and entitlement groups, while requiring same-day automated deprovisioning for departures. I would measure time-to-productivity, stale-access findings, and deprovisioning completion time to continually improve the process. Describe a time you had to balance a business request for speed against an identity or security risk. I would explain the risk in practical business terms, identify the minimum controls needed to reduce the most serious exposure, and offer a time-bound alternative rather than a blanket refusal. For example, I might approve restricted, monitored access with MFA and an expiration date while building a durable role-based access model. The decision and residual risk should be documented and escalated when it exceeds agreed thresholds. What is your approach to managing Okta or a similar identity provider beyond routine administration? I treat the identity provider as a core security and productivity platform. That means designing group and entitlement models, standardizing SSO and SCIM integrations, enforcing phishing-resistant MFA where appropriate, reviewing privileged roles, and routinely auditing third-party OAuth grants. I also automate lifecycle events and maintain clear documentation so access remains understandable and scalable. How would you evaluate and manage an outsourced IT or MSP partner? I would define outcomes, service boundaries, escalation paths, SLAs, and reporting requirements before relying on the partner for execution. I would retain accountability internally for security decisions, access changes with high consequence, and the employee experience. Regular performance reviews should cover ticket quality, fulfillment times, device inventory accuracy, recurring issues, and whether the partner is helping eliminate—not merely process—manual work. How would you build an effective security-awareness program for a distributed company? I would tailor training to actual employee workflows and current risks instead of relying solely on annual compliance content. The program would combine concise role-relevant guidance, simulations where appropriate, clear reporting paths, and timely education after real incidents or emerging threats. Success would be measured through reporting behavior, repeated-risk reduction, and employee feedback, not just training completion rates. Opportunity details ## About this role. Flex is building the AI-native private bank for business owners. We’re re-architecting the entire financial system for entrepreneurs—from the first dollar a business earns to how that value compounds, moves, and is ultimately spent in real life. Banking, credit, payments, personal finance, and financial operations—rebuilt from the ground up as a single, intelligent system. Flex is the full financial home for ambitious owners. Since launching publicly in September 2023, Flex has scaled from zero to nine-figure annualized revenue, with a clear path to profitability by late 2026. We move fast, ship relentlessly, and operate with extreme ownership. Our customers are affluent business owners ($3–$200M in revenue)—the backbone of the economy and one of the most underserved segments in finance. They’re stuck with outdated banks and fragmented tools. We’re replacing all of it. The opportunity is massive: a ~$1T+ revenue market hiding in plain sight. Our ambition is to build a $100B+ company by delivering a product that is fundamentally better—not incrementally improved. Flex has raised $100M+ in equity and $300M+ in debt. – Mission-critical problems: We build software that directly controls how money moves at scale. – High bar, low ego: Small teams, exceptional people, real ownership. – Speed over comfort: We prioritize execution, quality, clarity, and results. – Enduring impact: What we’re building will define how a generation of owners runs their businesses. Team & Locations We hire exceptional people who want to build hard things and see their work matter immediately. Roles are available in: San Francisco, Miami, New York, and fully remote. Flex Fuels Ambition. ### About The Role This role owns IT and corporate engineering at Flex, end to end. It reports directly to the CTO. We think IT’s job is enablement. The measure of this function is not how many tickets it closes or how many controls it can point at. It is whether everyone else at Flex can do their work faster and more safely than they could last quarter. A new hire productive on day one instead of day four. An engineer who gets exactly the access they need in minutes, without asking twice and without being handed the keys to everything. A team that can adopt a new tool because someone reviewed it properly, not because they routed around IT to buy it on a personal card. So we are not looking for a gatekeeper, or for someone whose default answer is no. The right person makes the safe path the easy path, and removes friction permanently instead of absorbing it repeatedly. Which is why this role also owns Flex’s corporate security posture. Identity, access, endpoints, and the SaaS estate are one system, and the person who makes access fast should be the person who decides how much access is reasonable. Split those across two teams and employees route around both. You’ll set conditional access and MFA policy, own privileged access and endpoint posture, and run third-party OAuth and Workspace grant review. Our security engineers own the product and infrastructure side, the money paths and the code, and you’ll work with them constantly. Corporate security is yours to decide, not to implement on someone else’s behalf. This is the hard part of the job, and we’d rather say so than leave it as a bonus line. The argument between moving fast and holding a line is now an argument you have with yourself. Day to day, what gets tightened, what gets mitigated, and what we knowingly accept is your call; the large ones come to the CTO, and we’d rather see a close call early than find out you decided it quietly. What we’d ask is that a no comes from a real read of the risk and the business context rather than a standard applied by default. The rest of the work has two halves. The IT half is the fleet, identity, access, the SaaS estate, and the joiner/mover/leaver process, delivered with help from a managed IT partner who handles procurement, device logistics, tier-1 support, and international coverage. You own that relationship, define the SLA, and enforce it. The corporate engineering half is the part we think makes this a good job: writing the automation and internal tooling that means the IT half doesn’t scale linearly with headcount. If a process only works because a person runs it by hand every Tuesday, we’d rather you replaced it. You’d be inheriting an estate here, not starting one. The first year is as much untangling what has already accumulated – stale access, tools nobody reviewed, processes that work because someone remembers them – as it is building what comes next. Automate that assessment. Nobody should be reading through a SaaS estate by hand in 2026. Now the shape of this. Flex is around 150 people, and you would be the only person in this function, with vendor capacity underneath you and a direct line to the CTO. That means real autonomy and real scope from week one. It also means this is a hands-on senior individual contributor role, not a management role, and we are not planning a team under it in the near term. If you’re looking to build and lead an IT organization right now, this isn’t that job, and we’d rather you knew before you applied. We’re looking for an IT and corporate engineering builder who wants to own security posture, rather than a security specialist willing to cover IT. Both halves have to interest you. If the enablement work reads as the price of admission for the security work, this will be a frustrating job. ### What You’ll Do * Own IT and corporate engineering end to end: the roadmap, the budget, the vendor relationships, and the outcomes. * Manage our external IT partner as delivery capacity, not as a peer function. Define the scope, set the SLA, hold them to it, and own the escalation path when it slips. * Design the joiner, mover, and leaver process and the entitlement model behind it. Make onboarding fast enough that a new hire is working on day one, and keep deprovisioning in-house and same-day, because it’s the highest-consequence action in IT. * Administer and improve our identity and productivity stack (Okta, Google Workspace, and the SaaS estate around them), including SSO, SCIM, and group and role design. * Own operational policy: device standards, the access-request workflow, and SaaS onboarding and procurement review. Review tools before people buy them, and make that review fast enough that nobody wants to skip it. * Build the automation. Provisioning, access reviews, asset and license reconciliation, and the internal tooling that removes recurring manual work across the SaaS estate. * Run the endpoint and MDM program across a distributed, increasingly international company, and keep the fleet in a state you’d be comfortable showing an auditor. * Own Flex’s corporate security posture. Conditional access, MFA, session and device rules, and privileged access are yours to set. So is endpoint posture, and the review of third-party OAuth and Workspace grants that quietly accumulate at every company this age. * Design and deliver the security awareness and training program. Not a once-a-year video, and not the version people click through with the sound off. * Partner with our security engineers, who own product and infrastructure security. The line runs between corporate and product, not between operating and deciding. You’ll bring them into identity decisions with blast radius, and they’ll rely on you for provisioning data they can trust. * Work closely with People, Finance, and Legal. Onboarding, offboarding, spend, and audit evidence all run through this function. * Be a real internal service. Publish what you own, respond when people ask, and find the friction before it turns into a workaround. ### What Makes You A Great Fit * You think IT exists to make other people effective, and you can point at specific friction you removed rather than tickets you closed. * You write code. Not necessarily production services, but scripts, integrations, and glue that other people end up depending on. * You’d rather fix the process than get faster at the workaround. * You hold both sides of this honestly. You’ve said no to something that mattered, and you’ve also said yes to something a stricter version of you would have blocked, and you can explain both calls. * You’re comfortable being the only person in a function, and comfortable saying what you need instead of quietly absorbing it. * You know you can’t be in the loop on every request, and you don’t want to be. You build the self-service paths that let people get what they need without going through you. * You can hold a vendor accountable without turning the relationship adversarial. * You can tell a colleague, including a senior one, that what they’ve built can’t keep the access it has, explain why in plain language, and work alongside them to find a way that works. * You’re calm when something is broken and several people are watching. * You explain technical constraints clearly to people who don’t share your background, in writing, across time zones. ### What We’re Looking For * Substantial hands-on experience owning IT or corporate engineering at a growing company, including a stretch where you were the most senior person doing the work. Roughly [6+] years is typical, but we care about what you’ve owned, not the year count. * Deep, hands-on ownership of an identity provider (Okta, Entra, JumpCloud, or similar) at the design layer: SSO, SCIM, SAML, group and entitlement modeling. Not just the admin console. * Practical experience running Google Workspace or Microsoft 365 as a platform. * Real MDM and endpoint experience across macOS, and ideally Windows, in a remote or hybrid company. * Automation ability in at least one scripting or programming language (Python, Go, TypeScript, or similar), and comfort with APIs and identity plumbing. * Experience designing an access model and running access reviews, not only fulfilling requests. * Real ownership of identity security decisions, not only their execution. You’ve set MFA or conditional access policy, tightened privileged access, or cleaned up third-party app grants, and you can talk about what you traded away to do it. * Track record managing an outsourced IT provider or MSP, or a clear-eyed view of why the ones you’ve worked with succeeded or failed. * Clear written communication. Much of this job is asynchronous and cross-team. ### Strongly Preferred * Experience in a regulated or audited environment (SOC 2, PCI, or a bank partnership), as the control owner rather than the auditor. * Time as the senior security voice somewhere without a security team, or without a CISO to escalate to. * Experience supporting employees and contractors across multiple countries, including device logistics and local employment platforms. * Experience at a company that grew quickly enough that you had to replace your own early processes. * Experience introducing AI tooling internally in a way that was actually adopted and actually governed. ### Interested? We’d love to hear from you At Flex, we value passion, determination, and honesty. Even if you don’t fully match the job specifics, we encourage you to apply. Unusual career paths and unique skills can help you stand out. We believe diversity drives our success. Join us at jobs@flex.one Flex is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status, marital or family status, pregnancy, genetic information, or any other characteristic protected by law. If you need an accommodation at any point in the process, tell us and we’ll sort it out. ### Compensation Final compensation within this range will be based on experience, qualifications, and interview performance. This position is also eligible for equity compensation. Flex offers medical, dental and vision insurance, paid time off, and a 401(k) plan. Applications will be accepted on an ongoing basis until the position is filled. ### Additional Information Why Join Us Build something generational — Capture the full lifecycle of money for ambitious business owners. Work on real money, real risk — Payments, credit, and banking at serious scale. Solve hard problems — AI, underwriting, compliance, and global finance from first principles. True ownership — Small teams, high trust, real accountability. Founder-level exposure — Direct access to leadership, customers, and investors. High bar, high taste — Move fast without cutting corners. Elite peers — People here are builders, not tourists. Real upside — Meaningful equity if you help build something big. Show more [Apply now >](https://jobicy.com/jobs/155773-senior-it-corporate-engineering.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![EDB logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/6c7d3949-221.png) EDB Oct 18 New ### [Director of Security Operations and Engineering](https://jobicy.com/jobs/155742-director-of-security-operations-and-engineering.md) A Little About Us EDB provides a data and AI platform that enables organizations to harness the full power of Postgres for transactional, analytical, and AI workloads across any cloud,… * ![Semperis logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/01cb24ea-221.png) Semperis Oct 18 New ### [Pre-Sales Engineer – West Coast](https://jobicy.com/jobs/155718-pre-sales-engineer-west-coast.md) At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they… * ![Laminar Projects logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/5bd8df6b-221.png) Laminar Projects Oct 17 New ### [Vigilant IT Security Manager – Portugal/Poland](https://jobicy.com/jobs/153410-vigilant-it-security-manager-portugal-poland.md) This is not an offshoring back-office job for an international company. You will be a key player in our globally distributed team. We’re searching for a Vigilant IT Security Manager… * ![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg) CertiK Oct 17 New ### [Public Facing Security Researcher](https://jobicy.com/jobs/153376-public-facing-security-researcher.md) About the Company Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications… * ![Carrot logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/07/005d05de29487ec44cd07bd9d757d4e1.png) Carrot Oct 16 ### [Director, Information Security](https://jobicy.com/jobs/155508-director-information-security.md) About Carrot: Carrot is the leading global fertility and family care platform, built on intelligent care orchestration: the right clinical guidance, at the right moment, in the context of each… * ![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg) CertiK Oct 16 ### [Security Research Internship](https://jobicy.com/jobs/155448-security-research-internship.md) About CertiK One of the fastest-growing and most trusted companies in blockchain security, CertiK is a true market leader. To date, CertiK has worked with over 3,200 Enterprise clients, secured… * ![Cision logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/e9661342-221.jpeg) Cision Oct 16 ### [IAM Security Engineer](https://jobicy.com/jobs/155431-iam-security-engineer.md) At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As… * ![Cision logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/e9661342-221.jpeg) Cision Oct 16 ### [Security Engineer](https://jobicy.com/jobs/155437-security-engineer-3.md) At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As… * ![Samsara logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/dd26f5ca-221.jpg) Samsara Oct 16 ### [Senior Security Operations Engineer](https://jobicy.com/jobs/155429-senior-security-operations-engineer-3.md) Who we are Samsara (NYSE: IOT) is the pioneer of the Connected Operations™ Cloud, which is a platform that enables organizations that depend on physical operations to harness Internet of… * ![Huntress logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91eae3ae-221.jpg) Huntress Oct 16 ### [Principal Security Researcher – EDR (Windows)](https://jobicy.com/jobs/155418-principal-security-researcher-edr-windows.md) What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at… [Browse all jobs](https://jobicy.com/jobs.md)