Senior IT Engineer

About the role

Range is building an AI‑powered wealth‑management platform and needs a senior IT engineer to own the end‑to‑end employee IT lifecycle. The role is based in McLean, VA, working onsite Monday‑Friday, and supports the New York and Seattle offices.

Key responsibilities

• Design, automate and audit onboarding, role changes, and off‑boarding across Google Workspace, SSO apps, VPN, password manager, Slack and GitHub.
• Run Google Workspace as the identity provider, implementing SAML/OIDC SSO, SCIM provisioning, role‑based access, least‑privilege controls and regular access reviews.
• Manage the macOS fleet via MDM and Apple Business Manager, handling procurement, inventory and device recovery for three offices.
• Oversee SaaS intake, security reviews, license management, spend tracking and tool sprawl reduction.
• Implement IT‑as‑code using Pulumi (or Terraform) in GitHub with pull‑request review and CI pipelines.
• Provide IT support, write self‑service docs and build AI agents/automations for common requests.
• Partner with security on SOC 2 controls, endpoint incident response and compliance evidence.
• Maintain office technology – Wi‑Fi, networking, conference rooms and peripherals across locations.

Required profile

• Owner‑mindset: see problems through to resolution, especially urgent off‑boarding.
• Automation‑first: script repetitive tasks and prefer system fixes over ticket closure.
• AI‑native: use AI daily for scripting, triage and tool building.
• Security‑focused: enforce least‑privilege and understand regulatory audit needs.
• Service‑oriented: clear, patient communication with non‑technical colleagues.
• Calm under pressure: handle security incidents, lost devices and same‑day departures without stress.

Required skills

• Deep Google Workspace administration.
• macOS fleet management with MDM (Jamf, Kandji, Mosyle) and Apple Business Manager.
• SSO and identity protocols: SAML, OIDC, SCIM, MFA, RBAC.
• Scripting in TypeScript, Python or Bash; comfortable with Git pull‑requests.
• Infrastructure‑as‑code experience with Pulumi or Terraform.
• Automation tools such as Okta Workflows, Tines, Zapier or custom solutions.
• Security fundamentals: least‑privilege, encryption, endpoint protection, incident response.
• Networking/VPN knowledge: Wi‑Fi, firewalls, Tailscale, WireGuard, OpenVPN.

What we offer

• Base salary $120,000–$190,000 USD per year.
• Equity stock options.
• 100% employer‑covered medical insurance (75% for dependents) plus dental and vision.
• 401(k) retirement plan.
• Paid time off plus federal holidays.
• Parental leave, meals, fitness stipend.
• Annual compensation reviews and professional development focus.