IT Engineer

San Franciscofull timeOn Site

Apply on Employer Site

senior

$112k–$154k

H1B: no

Decagon IT Engineer at Decagon supports the San Francisco office by managing identity, access, endpoint administration, and SaaS operations. The role focuses on automation, security, and operational excellence to support a fast-scaling global workforce.

Responsibilities

As part of a lean and highly collaborative IT team, you'll play a critical role in supporting a fast-scaling global workforce while helping drive automation, security, and operational excellence across the business. We're looking for an IT Engineer to be the hands-on IT presence for our San Francisco office.
You'll co-own identity and access management, endpoint administration, and SaaS operations for the company, working the support queue and solving problems at the root so they don't keep coming back — helping build the foundations required to support the next phase of growth.
This role would suit someone who enjoys solving problems, improving processes, and leveraging technology to create scalable solutions.
Serve as the on-site IT support engineer for our San Francisco office — resolving hardware, account, and access issues for employees in person and through the ticket queue
Administer and evolve our core SaaS stack — Okta, Google Workspace, Slack, Notion, and similar tools — as the systems the rest of the company depends on
Own the employee identity lifecycle: onboarding, off-boarding, and access changes, provisioned accurately and on time through Okta
Configure and maintain SSO, SAML, OIDC, and SCIM integrations as we bring on new SaaS applications
Own Mac endpoint management through Rippling MDM including configuration policies, OS/app patching, compliance enforcement
Automate recurring IT and access-management work using Python, Bash, and tools like Workato or similar.
Support security and compliance efforts — least-privilege access, MFA enforcement, and audit-ready documentation for frameworks like SOC 2
Write and maintain clear run-books and architecture documentation so the systems you build are usable by the rest of the team
Identify opportunities to streamline and enhance IT operations at scale

Qualification

6-8+ years of experience in IT systemsWorking knowledge of SSOScripting ability in Python or BashEven better if you have

Required

6-8+ years of experience in IT systems, endpoint, or identity engineering, ideally at a fast-growing company
Hands-on administration experience with Okta
Working knowledge of SSO, SAML, OIDC, and SCIM
Experience managing SaaS platforms such as Google Workspace, Slack, Notion, Rippling and Claude
Experience with Mac endpoint management (Rippling or similar MDM)
Scripting ability in Python or Bash, with real automation you've shipped
Strong troubleshooting instincts across systems that touch identity, networking, and SaaS integrations
Clear written communication — you'll document as much as you build
Comfort with ambiguity and a preference for owning problems end to end
Willingness to work in our San Francisco office 5 days a week and provide in-person support alongside longer-term projects
Even better if you have
Experience with iPaaS platforms like Workato, Zapier, or Tines