About the RoleAs our IT Engineer, you'll own the systems that let all of GlossGenius move at the speed the business demands: Okta, Google Workspace, Slack, Iru MDM, Slite, 1Password, and Claude Enterprise, plus the AI-powered workflows that turn manual operations into automated ones. This role exists because the team at GlossGenius is only as fast as the infrastructure underneath them, and right now there's real opportunity to build that infrastructure to be a force multiplier instead of a bottleneck. You'll be the technical owner Security, Engineering, and People route access and systems decisions through, fixing the class of problem rather than the instance, inside a HIPAA and SOC2 environment where evidence and rollback are built in from the start. This is a build role, not a maintenance one: you'll define how IT and AI-powered tooling scale together as GlossGenius continues to scale.
You will report to our IT Manager. You must be commutable to our NYC headquarters and will operate in an in-person environment.
This role is expected to be in-office 5 days per week, with flexibility as needed.What You'll Do- Architect Okta identity lifecycle with group rules, SCIM, and Expression Language so access moves without manual touch
- Own the Iru-managed endpoint fleet from zero-touch provisioning through offboarding
- Build AI-powered self-service, including Claude Enterprise workflows, that deflects requests before they reach a human
- Automate recurring workflows into scripted, audit-logged processes that scale past your own capacity
- Keep us SOC2 and HIPAA compliant, owning access reviews and deprovisioning evidence
- Partner with the People team and functional leaders to identify where AI can compress time-to-productivity for new hires
- Document the source of truth in Slite so a small team can support a workforce that keeps growing
What We're Looking For- 3+ years in IT engineering, identity, or endpoint systems, whether through deep ownership or strong hands-on exposure
- Rebuilt workflows around AI: identified repeatable work, automated it, and redirected your time toward judgment-intensive problems that actually require a human
- Make decisions and move: you don't wait for perfect information, you set a direction, ship something, and iterate based on what you learn
- Okta experience across group rules, SCIM, or Expression Language, from ownership to working exposure
- Exposure to MDM policy and macOS endpoint lifecycle, ready to grow into full ownership
- Familiarity with least-privilege controls or audit evidence for SOC2, HIPAA, or a similar framework, or strong exposure to the concepts
- Comfortable influencing Security, Engineering, or People, or eager to build that skill
- Curious about where talent operations and IT infrastructure intersect, and energized by the idea of building tools that accelerate hiring and onboarding
Benefits & PerksCompetitive health & dental insurance options, effective on your first day of employment
- Flexible PTO
- In-office lunch twice per week for NYC and SF employees, plus late night dinner stipends
- Access to Wellhub, a corporate wellness platform with discounted gym memberships, fitness classes, and mental health resources
- Annual stipend for professional development and continued learning
- High performers at 5 years receive a $5,000 bonus to use however you recharge best
- 401k benefit: employees are eligible to contribute starting day 1 of employment
- Dependent Care FSA
- Paid parental leave
- Fertility and adoption benefits via Carrot and Kindbody
The base salary for this role is between $90,000 to $120,000 + equity + benefits. The compensation package offered is dependent upon many factors including skills, experience, location, and education. The range is subject to change and may be modified in the future. Additionally, this role is currently eligible to participate in GlossGenius's equity plan as well as a range of health & wellbeing, retirement savings, and other benefits within our total rewards offering.
