[All remote jobs](https://jobicy.com/jobs.md)[![Baseten logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/f9522d034e6b-221.webp)](https://jobicy.com/company/baseten.md)[Baseten](https://jobicy.com/company/baseten.md) # IT Systems Engineer AI Summary Baseten is hiring an IT Systems Engineer to build secure, scalable internal technology systems for identity, endpoints, SaaS, and cloud access. The role focuses on identity lifecycle automation, least-privilege access, macOS fleet management, patching, device compliance, and non-human identity governance. The engineer will use scripting and infrastructure-as-code practices to reduce configuration drift and improve audit readiness. Success requires strong technical judgment and close collaboration with IT Operations, People, Engineering, Legal, GRC, and Security. This is a senior hands-on corporate security and IT engineering role in a cloud-native environment.[Apply for this job](#job-application)[View company](https://jobicy.com/company/baseten.md)ShareRemote from[USA](https://jobicy.com/job-region/usa.md)SalaryUSD 175k–225k / yrDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceOpen levelPublished14 Nov 2026Apply before14 Dec 2026Listing views44Application actions5Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. Opportunity details ## About this role. ABOUT [BASETEN](https://jobicy.com/company/baseten.md) Baseten powers mission-critical inference for the world’s most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We’re growing quickly and recently raised our [$1.5B Series F](https://www.baseten.co/blog/announcing-our-series-f/), led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products. THE ROLE We’re looking for an IT Engineer to design the systems behind how people at Baseten get access, stay secure, and move through their time here. This role builds the controls and automation that our IT Operations team runs every day across identity, client platforms, SaaS, and cloud access. The goal is a corporate environment that’s secure by default and easy to use: access that’s right from day one, removed when it should be, and provable at any time. RESPONSIBILITIES * Strengthen our identity platform with strong authentication, clean access models, and least privilege as the default. * Automate the workforce lifecycle so that joining, changing roles, and leaving Baseten are fast, consistent, and need little manual work. * Build reliable pipelines for OS updates, patching, and software deployment that keep the fleet current without disrupting people’s work. * Connect device health to access decisions, so a compliant device is what earns access to sensitive systems. * Recommend identity and security standards for our SaaS and AI tools, and make the secure configuration the easy path for teams adopting new ones. * Bring governance to non-human identities (service accounts, API keys, AI agents) and replace long-lived credentials with better options wherever possible. * Manage configuration as code across identity and endpoints to reduce drift, so audit readiness comes from the systems themselves instead of a separate workstream. * Give IT Operations well-designed tools and guardrails, so they can handle more requests on their own, safely. REQUIREMENTS * 5+ years in IT engineering or corporate security engineering, ideally at a cloud-native company. * Strong grounding in identity: SSO, MFA, provisioning, and the protocols behind them. * Hands-on experience engineering macOS fleets at scale: MDM, configuration profiles, app packaging and deployment, and endpoint visibility and EDR tooling. * Experience automating real workflows in code (Python, Bash, or similar), and comfort with infrastructure-as-code. * A working understanding of SaaS and cloud access risks, and how to reduce them without blocking the business. * Good judgment about when to build, when to buy, and when to leave something alone. * Clear writing, and a track record of working across IT, People, Engineering, Legal, GRC and Security. BENEFITS * Competitive compensation, including meaningful equity * (U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents * Flexible PTO policy including company wide Winter Break (our offices are closed from Christmas Eve to New Year’s Day!) * Paid parental leave * Fertility and family-building stipend through Carrot * (U.S. only) Company-facilitated 401(k) * Exposure to a variety of ML startups, offering unparalleled learning and networking opportunities. Apply now to embark on a rewarding journey in shaping the future of AI! If you are a motivated individual with a passion for machine learning and a desire to be part of a collaborative and forward-thinking team, we would love to hear from you. At Baseten, we are committed to fostering a diverse and inclusive workplace. We provide equal employment opportunities to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. We are an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with applicable law (by example, the requirements of the San Francisco Fair Chance Ordinance, where applicable). Show more [Apply now >](https://jobicy.com/jobs/162141-it-systems-engineer.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 4/5IndependentCollaborative AI insightThe role combines identity security, endpoint engineering, automation, cloud/SaaS governance, and audit-oriented configuration management. It requires designing durable controls while balancing security requirements against employee usability and business velocity. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Market rate$200,000US market range (per year)$170k–$240k0$264k AI insightThe employer discloses a base salary range of $175,000–$225,000 USD per year, with a midpoint of $200,000. The estimated US market range for a senior IT systems and corporate security engineer with identity, macOS fleet, and automation expertise is approximately $170,000–$240,000 per year. ## Core skills Skills and capabilities most closely associated with this opportunity. [Identity and access management](https://jobicy.com/jobs?search_keywords=Identity%20and%20access%20management.md)[Single sign-on](https://jobicy.com/jobs?search_keywords=Single%20sign-on.md)[Multi-factor authentication](https://jobicy.com/jobs?search_keywords=Multi-factor%20authentication.md)[SCIM provisioning](https://jobicy.com/jobs?search_keywords=SCIM%20provisioning.md)[macOS fleet management](https://jobicy.com/jobs?search_keywords=macOS%20fleet%20management.md)[Mobile device management](https://jobicy.com/jobs?search_keywords=Mobile%20device%20management.md)[Endpoint detection and response](https://jobicy.com/jobs?search_keywords=Endpoint%20detection%20and%20response.md)[Python automation](https://jobicy.com/jobs?search_keywords=Python%20automation.md)[Bash scripting](https://jobicy.com/jobs?search_keywords=Bash%20scripting.md)[Infrastructure as code](https://jobicy.com/jobs?search_keywords=Infrastructure%20as%20code.md)[SaaS security](https://jobicy.com/jobs?search_keywords=SaaS%20security.md)[Cloud access governance](https://jobicy.com/jobs?search_keywords=Cloud%20access%20governance.md)[Least privilege access](https://jobicy.com/jobs?search_keywords=Least%20privilege%20access.md)[Configuration management](https://jobicy.com/jobs?search_keywords=Configuration%20management.md)[IT audit readiness](https://jobicy.com/jobs?search_keywords=IT%20audit%20readiness.md) Sample interview questionsHow would you automate the employee joiner, mover, and leaver lifecycle?I would define the authoritative HR source, map role and department attributes to access policies, and automate provisioning through SCIM or APIs. I would include approval workflows for elevated access, event-driven deprovisioning, logging, exception handling, and periodic access reviews. How do you connect device compliance to access decisions without creating unnecessary friction? I would establish a small set of measurable compliance signals, such as disk encryption, supported OS version, EDR health, screen lock, and certificate status. Conditional access should progressively restrict sensitive resources while providing clear remediation guidance and a documented emergency-access path. What is your approach to managing a macOS fleet at scale? I would use an MDM platform with declarative configurations where possible, standardized baseline profiles, automated enrollment, reliable application packaging, and staged OS update rings. Endpoint telemetry and EDR health would be continuously monitored, with automation for common remediation tasks. How would you reduce risk from service accounts, API keys, and AI agents? I would inventory non-human identities, assign accountable owners, scope permissions narrowly, and replace persistent secrets with workload identity, short-lived tokens, or managed secret systems where possible. I would also implement rotation, usage monitoring, periodic reviews, and automatic expiration for unused credentials. Describe how you decide whether to build, buy, or leave an IT security process unchanged. I compare security impact, reliability, maintenance cost, integration needs, and time to value. I prefer proven tools for commodity controls, build automation when it removes repeated operational work or enables unique workflows, and avoid changes when the existing process is secure, supported, and proportionate to the risk. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Fastly logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/10/127f9e4bbbdb8767bef358a23bf7f73d.jpeg) Fastly Nov 14 New ### [Senior Software Engineer, Edge Security](https://jobicy.com/jobs/162147-senior-software-engineer-edge-security-2.md) Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and… * ![Apollo.io logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/01/f3c639242c4d1f4cb9c0730ac3842a72.jpeg) Apollo.io Nov 14 New ### [Senior Application Security Engineer](https://jobicy.com/jobs/162120-senior-application-security-engineer-4.md) Apollo.io is the leading go-to-market solution for revenue teams, trusted by over 500,000 companies and millions of users globally, from rapidly growing startups to some of the world’s largest enterprises…. * ![GitLab logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/12/WRILS-201207055737-109952.jpg) GitLab Nov 14 New ### [Threat Research Engineer, Security Factory: Threat Research](https://jobicy.com/jobs/162093-threat-research-engineer-security-factory-threat-research.md) GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50… * ![Beyond Finance logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/01/68cd015e123539d873279c7b82f1ca6a.jpg) Beyond Finance Nov 14 New ### [Staff Security Engineer](https://jobicy.com/jobs/155261-staff-security-engineer.md) At Beyond Finance, we’ve made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care,… * ![Sporty Group logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/8e6c246a-221.png) Sporty Group Nov 14 New ### [Offensive Security Engineer](https://jobicy.com/jobs/149060-offensive-security-engineer.md) About the roleMission Strengthen Sporty’s offensive security posture by proactively testing and identifying vulnerabilities across our external perimeter, standalone virtual private servers (VPS), physical office infrastructure, and endpoint defenses. The… * ![Liftoff logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/c47aea9f-221.png) Liftoff Nov 14 New ### [Security Engineer, Detection & Response](https://jobicy.com/jobs/153102-security-engineer-detection-response.md) Liftoff is a leading AI-powered performance marketing platform for the mobile app economy. Our end-to-end technology stack helps app marketers acquire and retain high-value users, while enabling publishers to maximize… * ![ANGI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/09/50cccf084c34089de2274f72e18841d0.jpg) ANGI Nov 13 New ### [Senior Security Engineer, Detection & Response](https://jobicy.com/jobs/161962-senior-security-engineer-detection-response.md) For over 30 years, Angi has powered the future of the home services industry, creating an environment where homeowners and pros benefit from more jobs done well. For homeowners, our… * ![ANGI logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/09/50cccf084c34089de2274f72e18841d0.jpg) ANGI Nov 13 New ### [Senior Security Engineer, Application Security](https://jobicy.com/jobs/161957-senior-security-engineer-application-security.md) For over 30 years, Angi has powered the future of the home services industry, creating an environment where homeowners and pros benefit from more jobs done well. For homeowners, our… * ![Domino Data Lab logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/2b7332248704-221.webp) Domino Data Lab Nov 13 New ### [Staff Software Engineer, Identity and Authorization](https://jobicy.com/jobs/161940-staff-software-engineer-identity-and-authorization.md) Who we are At Domino, we build solutions that help the largest, highly regulated organizations adopt AI to accelerate mission-critical use cases. Our platform integrates a streamlined model and app… * ![Domino Data Lab logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/2b7332248704-221.webp) Domino Data Lab Nov 13 New ### [Senior Software Engineer, Patch Engineering & Vulnerability Remediation](https://jobicy.com/jobs/161935-senior-software-engineer-patch-engineering-vulnerability-remediation.md) Who we are At Domino, we build solutions that help the largest, highly regulated organizations adopt AI to accelerate mission-critical use cases. Our platform integrates a streamlined model and app… [Browse all jobs](https://jobicy.com/jobs.md)