IT Systems Engineer

3 hours, 47 minutes ago
Full-time
Mid Level
DevOps and Infrastructure
Thatch

Thatch

Thatch is a health benefits platform that combines financial technology and insurance services. Founded in October 2021 by Chris Ellis and Adam Stevenson, the company is based in San Francisco, with additional offices in New York and Austin. Thatch's mission is to decouple health insurance from employment, allowing businesses to offer personalized healthcare experiences to their employees. The platform serves as a Third-Party Administrator (TPA) and specializes in Individual Coverage Health Reimbursement Arrangements (ICHRA). Thatch simplifies health benefits administration by enabling employers to set tax-free healthcare budgets, which employees can use to select their own health insurance plans and additional benefits like mental health support and wellness programs. The company also provides a Visa debit card for employees to manage their healthcare spending easily. Thatch primarily targets small to mid-sized businesses and startups, offering a streamlined setup process and tools to help employers manage healthcare budgets effectively. With significant investor backing, Thatch is positioned to enhance the healthcare experience for businesses and their teams.

information technology & services
51-200
Founded 2021
$84M raised

Description

  • Own Thatch’s IT and SaaS stack, including Okta, Iru, Mac, iOS, Android, Rippling MDM/SSO, 1Password, Google Workspace, Microsoft Office, Slack, Zoom, Linear, and Notion.
  • Drive endpoint fleet compliance across MDM, EDR, and DLP, including remediation of noncompliant devices.
  • Administer conditional access policies, device trust, managed browser enforcement, and access exceptions.
  • Own privileged access management workflows, including automated requests, approvals, reviews, and time-bound access removal.
  • Manage trusted-device and MFA enrollment and lead remediation campaigns for weak or breached passwords.
  • Manage the employee lifecycle from onboarding through offboarding, including access control, hardware provisioning, and audit documentation.
  • Evaluate and administer SaaS tools for SSO and identity-provider compliance and address shadow IT.
  • Build employee knowledge-base resources and automate repetitive IT and access-management tasks.
  • Partner with IT and Security leadership on company-wide initiatives and security posture.
  • Support employees by resolving issues and maintaining reliable systems and access infrastructure.

Requirements

  • 4–6 years of hands-on corporate IT support or systems engineering experience, ideally involving identity and access infrastructure.
  • Deep understanding of SSO, 2FA, passkeys, conditional access, and password-management systems.
  • Experience administering or implementing a privileged access management tool, or strong understanding of PAM concepts and willingness to build workflows from scratch.
  • Strong knowledge of security principles and demonstrated ability to implement them at scale.
  • Experience driving endpoint fleets to full MDM, EDR, and DLP compliance, preferably with exception-management workflows.
  • Certification in Network+, Security+, JAMF, BetterCloud, Okta, or comparable credentials preferred.
  • Ability to work independently, take ownership from start to finish, and adapt to changing priorities.
  • Strong organizational skills, follow-through, communication, and customer-service orientation.
  • Ability to learn new technologies quickly and solve problems resiliently.

Benefits

  • Estimated compensation of $145,000–$158,000 USD.
  • Fully distributed work environment.
  • Opportunity to own identity, access, compliance, and automation systems at an early-stage technology company.
  • High autonomy and direct collaboration with IT, Security, department leadership, and company founders.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Director, System Engineering & Intelligence, Global

Nscale 501-1000 information technology & services

Nscale is hiring a Senior Director, System Engineering & Intelligence to unify operational systems, asset data, and telemetry across its AI data centres and enable evidence-based readiness and progressively autonomous operations.

ERP Machine Learning MQTT
3 hours, 31 minutes ago

SAM Pro / SaaS License Management Specialist

PHIZENIX 11-50 information technology & services

This SAM Pro / SaaS License Management Specialist will use ServiceNow to optimize software assets, improve SaaS license governance, build integrations, and enhance platform data and reporting.

REST API
1 day, 3 hours ago

Systems Engineer (Remote, Philippines)

Peak Design 11-50 Textiles, Apparel & Luxury Goods

Peak Design is seeking a Systems Engineer to lead integrations, resolve complex technical issues, and improve systems and workflows supporting wholesale, logistics, and operations.

JSON NetSuite REST API Shopify
2 days, 4 hours ago

Senior Systems Engineer

WRA Environmental Consultants 251-1K Professional Services

WRA, an employee-owned environmental consultancy, is hiring a Senior Systems Engineer to build and operate its internal IT and cybersecurity functions while supporting a distributed workforce of approximately 100 employees.

Azure Cybersecurity JIRA macOS PowerShell
2 days, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers