Systems Engineer, Corporate Security

About the role

Ramp’s Corporate Security team protects the internal environment, including device fleet, identity access, and AI tool usage. As a Systems Engineer you will build and operate automated controls across these systems, writing code and creating agentic loops rather than manual processes.

Key responsibilities

• Maintain OS and software update policies, monitor the device fleet, and integrate new applications into the patching cadence.
• Build automation for endpoint security remediation (EDR, DLP, VPN) to detect and fix missing or unhealthy agents.
• Manage device configuration baselines as code, including drift detection and hardening standards.
• Configure Okta authentication, SSO, MFA, device trust, and conditional access policies.
• Remediate identity posture gaps such as stale accounts, orphaned service principals, and over‑scoped OAuth grants.
• Implement and operate controls for enterprise AI usage, including identity‑aware access, logging, retention, and DLP where appropriate.
• Automate across platforms via APIs, build reporting on control coverage, and document operational procedures.

Required profile

• 3–5 years of experience in client platform/endpoint engineering, identity access management, or corporate security.
• Hands‑on macOS management at scale using MDM solutions (Jamf, Fleet, Kandji, or equivalent).
• Working knowledge of an identity provider such as Okta, including SSO, MFA, SCIM provisioning, and conditional access.
• Ability to evaluate trade‑offs between technical enforcement, policy, and user friction and communicate them clearly.

Required skills

• macOS device management (Jamf, Fleet, Kandji)
• Okta identity management
• Scripting in Python, Go, or Bash
• Automation via platform APIs
• Endpoint detection and response tools (CrowdStrike or similar)
• osquery/Fleet for fleet visibility (nice to have)
• Cloudflare Zero Trust or similar network‑layer enforcement
• Infrastructure‑as‑code tools (Terraform, GitHub Actions)

What we offer

• Flexible PTO and home‑office equipment ordering
• Health, dental, and vision coverage (100% for employee)
• 401(k) with employer match
• Parental leave up to 16 weeks at 100% pay
• Relocation assistance to NYC or SF
• Weekly coffee stipend and in‑office perks