About the RoleAs part of a lean and highly collaborative IT team, you'll play a critical role in supporting a fast-scaling global workforce while helping drive automation, security, and operational excellence across the business. We're looking for an IT Engineer to be the hands-on IT presence for our San Francisco office.
You'll co-own identity and access management, endpoint administration, and SaaS operations for the company, working the support queue and solving problems at the root so they don't keep coming back - helping build the foundations required to support the next phase of growth.
This role would suit someone who enjoys solving problems, improving processes, and leveraging technology to create scalable solutions.
In this role, you will- Serve as the on-site IT support engineer for our San Francisco office - resolving hardware, account, and access issues for employees in person and through the ticket queue
- Administer and evolve our core SaaS stack - Okta, Google Workspace, Slack, Notion, and similar tools - as the systems the rest of the company depends on
- Own the employee identity lifecycle: onboarding, off-boarding, and access changes, provisioned accurately and on time through Okta
- Configure and maintain SSO, SAML, OIDC, and SCIM integrations as we bring on new SaaS applications
- Own Mac endpoint management through Rippling MDM including configuration policies, OS/app patching, compliance enforcement
- Automate recurring IT and access-management work using Python, Bash, and tools like Workato or similar.
- Support security and compliance efforts - least-privilege access, MFA enforcement, and audit-ready documentation for frameworks like SOC 2
- Write and maintain clear run-books and architecture documentation so the systems you build are usable by the rest of the team
- Identify opportunities to streamline and enhance IT operations at scale
Your background looks something like this- 5-7 years of experience in IT systems, endpoint, or identity engineering, ideally at a fast-growing company
- Hands-on administration experience with Okta
- Working knowledge of SSO, SAML, OIDC, and SCIM
- Experience managing SaaS platforms such as Google Workspace, Slack, Notion, Rippling and Claude
- Experience with Mac endpoint management (Rippling or similar MDM)
- Scripting ability in Python or Bash, with real automation you've shipped
- Strong troubleshooting instincts across systems that touch identity, networking, and SaaS integrations
- Clear written communication - you'll document as much as you build
- Comfort with ambiguity and a preference for owning problems end to end
- Willingness to work in our San Francisco office 5 days a week and provide in-person support alongside longer-term projects
Even better if you have- Experience with iPaaS platforms like Workato, Zapier, or Tines
- Exposure to AWS, GCP, or Azure administration
- Familiarity with SOC 2, ISO 27001, or similar compliance frameworks
- Experience with infrastructure-as-code (Terraform or similar)
- Okta certifications
- Experience within high-growth technology businesses
Compensation$112k - $154k + Equity
BenefitsWe proudly offer the following benefits for our full-time employees:
- Medical, Dental, and Vision benefits for you and your family
- Life Insurance and Disability Benefits
- Retirement Plan (e.g., 401K, pension)
- Parental Leave
- Fertility and family building benefits through Carrot
- Monthly stipend to support your wellness, lifestyle, and work-life balance
- Daily lunches and snacks in the office to keep you at your best
- Take what you need vacation policy (subject to local requirements; UK employees receive 25 days of statutory leave)
These benefits are described in more detail in Decagon's policies, may vary by location, and can change at any time according to applicable compensation and benefits plans.
