Sr. IT Systems Engineer

About the Role

The Senior IT Systems Engineer is a hands-on, senior individual contributor responsible for designing, scaling, and operating Betterments core IT systems and infrastructure. This role sits at the intersection of identity, SaaS platforms, endpoint management, and automation, ensuring employees have secure, reliable, and seamless access to the tools they need to do their best work.

As a force multiplier within Corporate Technology, this role establishes standards, builds scalable systems, and reduces manual toil through automation and thoughtful system design. The Senior IT Systems Engineer partners closely with Security, People Operations, Finance, and Engineering to ensure IT systems are secure, auditable, and built to scale with the business.

This role is based out of our NYC office. Below weve reflected the base salary range we would offer for this position. Actual salaries may vary depending on factors including but not limited to location, experience, and performance. The range listed is just one component of Betterments total compensation package for employees.

New York City: $121,000 - $143,000

We offer a competitive equity package, health, dental and vision benefits, life and AD&D, short-term and long-term disability insurance, EAP, commuter and parking benefits FSA/HSA, and 401(k) with employer match as well as a flexible PTO policy. This job may also be eligible for variable compensation in the form of a company incentive bonus. For jobs based out of our NYC HQ, we require in office attendance Monday through Thursday, weekly.

What Youll Do

IT Systems & Infrastructure Engineering

• Design, implement, and maintain identity and access management architecture across the enterprise.
• Own end-to-end employee lifecycle automation, integrating HRIS, identity, and downstream SaaS systems.
• Administer and optimize core SaaS platforms including Google Workspace, Okta, Slack, Zoom, Lumos, Jamf and other business-critical tools.
• Experience administering business system/enterprise apps such as HRIS (ADP, etc.), Finance (Netsuite, Salesforce, ZipHq), Access review/ Spend control (Lumos).
• Establish and maintain standards for system configuration, access models, and operational ownership.

Automation & Platform Enablement

• Automate repetitive IT workflows using scripting and infrastructure-as-code approaches.
• Build scalable, self-service processes that reduce support burden and improve employee experience.
• Standardize and codify IT infrastructure and workflows wherever possible to ensure consistency and reliability.
• Experience with low-code automation platforms: Boomi, Workato, Okta Workflows, Zapier.

Device & Endpoint Management

• Manage and scale macOS endpoint fleets, including configuration, patching, security controls, and policy enforcement.
• Own MDM tooling, OS upgrade strategies, and endpoint security posture in partnership with Security.
• Support Windows endpoints where required, particularly for Finance and other specialized functions.

Security & Compliance Partnership

• Implement and enforce IT security best practices across systems and endpoints.
• Partner with Security Engineering and Risk to strengthen MFA, SSO, RBAC, and device trust controls.
• Proactively identify, troubleshoot, and remediate IT-related security gaps and operational risks.
• Support audit and compliance efforts by ensuring systems are well-documented, controlled, and auditable.
• Security-first/minded approach.

Employee Experience & Support

• Act as a senior escalation point for IT Support, ensuring predictable availability and high-quality service.
• Document IT standards, policies, and troubleshooting guides to promote clarity and consistency.
• Improve onboarding, offboarding, and day-to-day employee experiences through reliable systems and automation.

What You Bring

• Bachelors degree or equivalent practical experience in Information Systems, Technology, or a related field.
• 6+ years of experience in IT systems engineering, SaaS administration, or enterprise technology operations.
• Deep expertise in macOS administration and endpoint management at scale.
• Strong experience with Okta and modern identity standards including SAML, OIDC, SCIM, and RBAC.
• Proficiency in scripting and automation using tools such as Python, Bash, or similar.
• Demonstrated ability to design, document, and operate scalable IT Systems in a cloud-first environment.
• Strong debugging, problem-solving, and systems-thinking skills.
• Customer-service mindset with a reliable, detail-oriented, and collaborative approach.

Nice to Have

• Experience with infrastructure-as-code tools such as Terraform.
• Familiarity with IT security controls in regulated environments (SOC 2, ISO 27001, SOX).
• Experience supporting high-growth organizations through scale or operational maturity transitions.
• Strong documentation and process-design discipline.

Dont meet every single requirement? Research shows that women and people of color are less likely to apply for roles unless they meet every listed qualification. At Betterment, were committed to building a diverse, inclusive, and authentic workplace. If youre excited about this role but your experience doesnt align perfectly with every qualification, we encourage you to apply anyway. You may be the right candidate for this role or another opportunity with us.