IT Systems Engineer

The role

The IT Systems Engineer will build and scale systems for Gallatin employees. This role involves endpoint engineering, identity and access management, SaaS administration, security, compliance, and employee support.

What you will do

• Own the lifecycle of macOS, Windows, and mobile environments.
• Build and maintain Jamf Pro policies, profiles, packages, scripts, smart groups, compliance controls, and Self Service workflows.
• Implement and operate Windows device management through Microsoft Intune in GCC High.
• Design Google Workspace mobile application management controls.
• Automate provisioning, application deployment, patching, security baselines, inventory, and compliance reporting.
• Own identity lifecycle workflows across Okta, Google Workspace, Microsoft 365 GCC High, Slack, and other platforms.
• Automate onboarding, role changes, access reviews, and offboarding using APIs, scripts, and workflow tools.
• Design access controls around least privilege, device trust, role-based access, and data sensitivity.
• Administer and integrate core productivity, collaboration, engineering, and business applications.
• Establish guardrails for enterprise AI tools and AI-enabled SaaS applications.

Required qualifications

• Experience as an IT Systems Engineer, Endpoint Engineer, Systems Administrator, or in a similarly broad technical role.
• Strong hands-on Okta administration, including SSO, MFA, application integrations, lifecycle management, and access policies.
• Strong hands-on management of macOS, Windows, and mobile devices using Jamf Pro, Microsoft Intune, and Google Workspace.
• Experience operating Microsoft 365 and Intune in GCC High or another regulated Microsoft cloud environment.
• Ability to independently design, implement, operate, and improve production IT systems.
• Strong troubleshooting skills across operating systems, networks, identity platforms, and cloud applications.
• Automation skills using Bash, PowerShell, Python, APIs, or workflow platforms.
• Understanding of identity lifecycle management, device trust, least privilege, conditional access, and role-based access.
• Strong communication, documentation, and judgment in fast-moving environments.
• Comfort operating in a small team where ownership is broad.

Nice to have

• Endpoint privilege management and application control.
• Enterprise browser management, secure web gateways, or SaaS security posture management.
• macOS Platform SSO or Windows Hello for Business.
• PKI, device certificates, and certificate lifecycle management.
• Configuration-as-code or infrastructure-as-code for corporate IT systems.

Benefits

• generous equity grant
• full healthcare coverage
• 401k
• unlimited PTO
• perks of working in a high-caliber, mission-driven environment

Before you apply

• This position may require the ability to obtain and maintain a U.S. government security clearance.
• The successful candidate must be able to work in a classified environment when necessary.
• U.S. citizenship is a requirement for all positions at Gallatin.
• Proof of citizenship will be required prior to employment if selected.

About the company

Gallatin is rebuilding logistics infrastructure for the national security missions of the United States and allied partners. They build AI systems that determine how logistics decisions are made.