This job has expired

This position was posted on December 5, 2025 and is likely no longer accepting applications. We've kept it here for historical reference. Check out the similar jobs below!

IT Systems Engineer (NYC)

Tempo Automation Holdings, Inc.

Job Overview

Location

New York City

Job Type

Full-time

Full Job Description

📋 Description

• Own the end-to-end health of Tempo’s IT backbone—from laptops and SaaS apps to cloud IAM and zero-trust networking—ensuring 99.9 % uptime for a globally distributed team that never sleeps.
• Architect and continuously refine our identity, device, and access-management stack (Okta, Google Workspace, MDM, MDM-driven certificate deployment, conditional access policies) so that every new hire is productive within 10 minutes of receiving their welcome email.
• Build lightweight, auditable automation (Python, Bash, Terraform, or low-code RPA) that turns repetitive onboarding, off-boarding, and permission-grant tasks into one-click workflows, freeing you and your stakeholders to focus on product and growth.
• Serve as the first responder for all Tier-1 and Tier-2 support requests via Slack, Zoom, and our internal ticketing bot; maintain a <1-hour median resolution time while documenting every fix in a living runbook that the next engineer can execute blindfolded.
• Evaluate, pilot, negotiate, and roll out new vendors (endpoint security, password vaults, MDM, travel security kits, SaaS observability) using a data-driven scorecard that weighs security, UX, cost, and vendor viability; present findings to leadership in crisp, one-page briefs.
• Partner with Finance and Legal to run procurement cycles—from MSA redlines to SOC-2 evidence collection—so that every tool we adopt meets enterprise-grade compliance standards without slowing the business.
• Design and enforce least-privilege access patterns across AWS, GCP, GitHub, Slack, and Notion; conduct quarterly access reviews and spearhead phishing-resistant MFA rollouts (WebAuthn, YubiKeys, passkeys).
• Craft user-friendly security policies and self-service guides that turn non-technical teammates into informed defenders, reducing “how do I…?” questions by 50 % within six months.
• Instrument endpoint and SaaS telemetry (Jamf Pro, Kolide, Obsidian, or similar) to surface anomalies in near real time; build dashboards that let executives see fleet health at a glance.
• Lead incident-response tabletop exercises and live-fire drills for scenarios like device theft, SaaS credential stuffing, and travel laptop compromise, ensuring our runbooks survive the chaos of a 3 a.m. page.
• Mentor future IT hires and contractors, creating a culture where knowledge is shared openly and no single person is a single point of failure.
• Champion a “security-first but friction-light” mindset, balancing the needs of a regulated financial-infrastructure startup with the speed expectations of engineers shipping code multiple times per day.
• Continuously scan the horizon for emerging threats (pass-the-cookie, SaaS token replay, AI-driven phishing) and translate them into actionable mitigations before they hit the headlines.
• Maintain an asset inventory and lifecycle program that keeps our Mac fleet on supported OS versions, patches critical vulns within 24 hours, and retires devices with verifiable data destruction.
• Collaborate with People Ops to turn onboarding into a delightful, repeatable ritual: pre-provisioned laptops, auto-enrolled MDM, pre-approved SaaS access, and a personalized “Welcome to Tempo” IT checklist.
• Own the IT budget line items, forecasting spend 12 months ahead while identifying cost-optimization levers such as license true-ups, enterprise agreements, and device buy-back programs.
• Serve as the bridge between our remote-first culture and the physical realities of offices in NYC and occasional co-working pop-ups—ensuring seamless connectivity, guest Wi-Fi, and secure printing for visitors.
• Contribute to our SOC-2 Type II roadmap by writing controls, gathering evidence, and liaising with auditors so that compliance becomes a by-product of great operations rather than a last-minute scramble.
• Celebrate wins loudly: ship a monthly “IT changelog” that highlights new automations, resolved pain points, and upcoming experiments, turning IT from a cost center into a growth enabler.

🎯 Requirements

• 3+ years administering Okta, Google Workspace, and Apple device fleets (Jamf, Kandji, or Mosyle) in a 100-plus-person, fast-scaling environment.
• Hands-on experience with scripting or IaC (Python, Bash, Terraform, Ansible) to automate user lifecycle tasks and infrastructure changes.
• Deep understanding of modern endpoint-security controls (EDR, MDM-delivered configs, zero-trust network access) and a track record of rolling them out without killing productivity.
• Demonstrated ability to negotiate SaaS and hardware contracts, manage vendor relationships, and run procurement cycles end-to-end.
• Excellent written and verbal communication skills; you can explain DNS over HTTPS to a designer and SOC-2 controls to an engineer in the same breath.

🏖️ Benefits

• Competitive base salary plus generous equity in a well-funded, early-stage layer-1 blockchain with marquee design partners.
• Remote-first culture with quarterly in-person off-sites in global hubs (NYC, Lisbon, Singapore) and a $1,500 annual travel stipend.
• 100 % employer-paid platinum medical, dental, and vision coverage for you and 75 % for dependents; OneMedical and mental-health memberships included.
• 20 days PTO, 10 company holidays, and a “take what you need” sick-leave policy, plus a one-month paid sabbatical after four years.

Skills & Technologies

Remote

Ready to Apply?

Apply Externally

You will be redirected to an external site to apply.

Tempo Automation Holdings, Inc.

Visit Website

About Tempo Automation Holdings, Inc.

Tempo Automation is a San Francisco-based electronics manufacturer that uses proprietary software and automated production lines to accelerate printed circuit board assembly for aerospace, medical, industrial, and automotive customers. The company integrates design-for-manufacturability analysis, quoting, sourcing, fabrication, and assembly into a cloud platform, enabling rapid prototyping and low-to-mid volume production with real-time visibility and quality assurance. Founded in 2013, Tempo operates an advanced smart factory that leverages machine learning and robotics to reduce lead times and improve reliability for mission-critical electronics.

View Company Profile

Get more remote jobs like this

Subscribe to the weekly newsletter for similar remote roles and curated hiring updates.

Weekly remote jobs and featured talent.

No spam. Only curated remote roles and product updates. You can unsubscribe anytime.