{"id":27594,"url":"https://alion.io/job/obsidian-security-staff-it-systems-engineer","title":"Lead IT Systems Engineer","company":{"id":4018,"name":"Obsidian Security","domain":"obsidiansecurity.com","url":"https://alion.io/company/obsidian-security","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":86,"open_postings":11,"ghost_share":0,"stale_share":0.364,"repost_share":0,"time_to_fill_p50_days":69,"computed_at":"2026-10-12T06:55:09Z"}},"role":"DevOps","role_family":"DevOps","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Palo Alto, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":165000,"max_usd":338000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":489},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"Databricks","optional":false},{"name":"GCP","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitOps","optional":false},{"name":"Google Workspace","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Obsidian","optional":false},{"name":"Okta","optional":false},{"name":"OpenTofu","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SentinelOne","optional":false},{"name":"Snowflake","optional":false},{"name":"SOC 2","optional":false},{"name":"State Management","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false}],"status":"live","first_seen_at":"2026-07-22T20:32:55Z","employer_posted_date":"2026-09-24","last_verified_at":"2026-10-12T06:25:26Z","board_verified":true,"closed_at":null,"days_open":81,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":81},"description":"Obsidian Security is a global leader in cyber security protecting the SaaS and non-human identity layer modern enterprises run on - from Salesforce and Snowflake to the AI agents now deployed inside them. The Obsidian Security platform gives unified visibility into every human and machine identity, app, and integration across their SaaS estate, detects identity-based and supply chain attacks in real time, and enforces least-privilege access before it's exploited. Trusted by major Fortune 500 companies T-Mobile, Workday, Snowflake, and S&P Global, Obsidian ranked No. 95 on the 2025 Deloitte Technology Fast 500™, growing nearly 1000% from 2021-2024 - helping CISOs turn an unmonitored attack surface into one they can govern with confidence. Obsidian has also been recognized by Forbes as America's Best Startup Employers in 2026.\nIn August 2026, Obsidian raised $85 million in Series D financing led by Crescent Cove Advisors, with participation from existing investors including Greylock Partners, Menlo Ventures, Norwest Venture Partners, IVP, Wing Ventures, and GV - pushing Obsidian's valuation to $1.1 billion, crossing into unicorn status. Obsidian is using the funding to deepen its R&D in agentic AI security and extend its platform as the standard for governing what AI agents can access and do inside third-party applications.\nWith global momentum, a growing partner ecosystem including SentinelOne, Databricks, and Google Cloud, and fresh capital from its Series D behind it, Obsidian is scaling rapidly toward long-term growth and IPO readiness.\nWe're hiring an experiencedLead IT Systems Engineer to be the senior technical owner of Obsidian's identity, endpoint, and IT platform foundation, and to help us operate that foundation as code. You will own how identity flows from our HR system into Okta and out to every application, how our device fleet is managed and hardened, and how the configuration behind all of it lives as version-controlled, AI- and human-authored code. You will set the bar for how a modern, security-first IT organization runs in an AI-forward company.\nThis is a high-leverage seat at a pivotal moment. Our identity platform is being stood up with a lifecycle orchestration layer in front of it, and we are moving the whole stack onto an infrastructure-as-code operating model. We are looking for a senior technical owner to set the bar for identity architecture, configuration-as-code, AI-augmented operations, and how a lean IT function leverages AI and automation to grow the function. \nYou will report directly to the VP of Business Systems, Data & IT. You will partner closely with Security, DevOps, HR, Finance, and the go-to-market teams, and you will have an opportunity to lead a lean team across the Business Systems, Data & IT function.\nWhat You'll Do\nOwn the identity foundation\nServe as the senior technical owner of Okta as our primary identity provider, covering Universal Directory, SSO, MFA (Okta Verify FastPass and FIDO2), conditional access, Device Access, and Okta Identity Governance for access certifications and reporting.\nOwn the lifecycle orchestration that turns HR events into access. This includes joiner, mover, and leaver flows from our HRIS through the orchestration layer into Okta, with same-hour offboarding.\nOwn the SSO application catalog across our estate of applications: sequence the integrations, enforce group-based access by role, and make the catalog the definition of what is sanctioned.\nOperate IT as code\nManage core platform configuration as version-controlled code in our corporate GitHub organization. This spans Okta policies, groups, group rules, app assignments, and governance campaigns; Jamf profiles, policies, and smart groups; the GitHub organization itself; and the underlying Google Cloud foundation, using OpenTofu and Terraform.\nBring imperative surfaces under the same discipline. Manage Google Workspace through scripts in git, run keyless through Workload Identity Federation, with verification and drift reporting where true state management is not possible.\nSet the standard for AI-augmented operations\nAuthor configuration with AI assistance from the start. You will set the team standard for what good looks like here.\nUse read-only tooling for live observability, drift triage, and log investigation, with humans gating every production change.\nBuild AI-assisted IT support and self-service workflows on our automation platform so routine requests for access, provisioning, and license changes resolve without a ticket queue and a manual handoff.\nAutomate and harden the fleet\nOwn endpoint management across platforms with device trust and assurance wired into access policies, automated third-party patching, and application allowlisting.\nAdvance zero-trust network access and secrets-management patterns so identity and device health decide access.\nRaise the bar across IT\nSet technical standards for the IT function, document them so they scale beyond your own hands, mentor teammates, and be the person others learn identity and automation from.\nPartner with the VP to shape IT priorities and sequencing, and represent IT's requirements in cross-functional security, compliance, and platform decisions.\nWhat You'll Bring\nWe know few candidates match every line below. If you own most of the required list and are excited by the rest, we want to hear from you.\nRequirements:\n8 or more years building and operating IT systems, identity, or platform infrastructure in production, with clear ownership of the systems you ran.\nDeep, hands-on Okta ownership across SSO, MFA, Universal Directory, Lifecycle Management, and conditional access, ideally including Identity Governance. You have owned an Okta tenant end to end.\nHands-on Jamf Pro expertise managing a production Mac fleet, including configuration profiles, policies, smart groups, and patch workflows.\nProven infrastructure-as-code ownership with Terraform or OpenTofu managing real infrastructure or SaaS configuration in production, shipped through a pull-request-based GitOps workflow such as GitHub Actions.\nDaily use of AI coding tools to ship production work.\nHands-on MDM depth with Jamf or Intune at fleet scale, including device compliance and trust.\nScripting fluency in Python, PowerShell, or a comparable language, and comfort automating against SaaS and platform APIs.\nClear written and verbal communication. You can explain an access policy or automation decision to an engineer and to a business stakeholder with equal clarity.\nPreferred\nExperience with a lifecycle or identity-governance orchestration layer and with HRIS-driven provisioning (Rippling, Workday, or similar).\nGoogle Workspace administration at scale, including GAM7.\nSecrets and non-human credential management (HashiCorp Vault, Doppler, Secret Manager, or equivalent).\nWorkflow and integration automation on an iPaaS or agent platform such as Workato, including human-in-the-loop steps and MCP-style tooling.\nZero-trust network access (Jamf Connect, Zscaler, Tailscale, or similar) and enterprise browser deployments.\nExposure to compliance-driven controls and evidence automation for SOC 2 or ISO 27001 and 27701, and tooling such as Drata.\nGoogle Cloud Platform and familiarity with agentic or MCP tooling for operations.\nB2B SaaS or cybersecurity domain background.\nEmployee Benefits\nOur competitive benefits packages are designed to support our employees' well-being, both at work and at home. Our US based employees enjoy:\nCompetitive compensation with equity and 401k\nComprehensive healthcare with dental and vision coverage\nFlexible paid time off and paid holiday time off \n12 weeks of new parent or family leave\nPersonal and professional development resources\nFor more details on our US benefits, or for information on our international benefits, please see here.\nPay Transparancy\nPlease note that the base pay range is a guideline and for candidates who receive an offer, the base pay will vary based on factors such as work location, as well as the knowledge, skills and experience of the candidate. In addition to a competitive base salary, this position is eligible for equity awards and may be eligible for sales commission or incentive compensation based on the role or function within the company.\nAt Obsidian, we are proud to be an equal-opportunity employer. We value diversity and hire for talent, passion, and compassion. In compliance with federal law, all persons hired will be required to submit satisfactory proof of identity and legal authorization. If you have a need that requires accommodation, please contact \nInformation collected and processed as part of any job applications you choose to submit is subject to Obsidian’s Applicant Privacy Policy.\nBase Salary Range\n$203,000—$224,000 USD\nEmployee Benefits:\nOur competitive benefits packages are designed to support our employees' well-being, both at work and at home. Our US based employees enjoy:\nCompetitive compensation with equity and 401k\nComprehensive healthcare with dental and vision coverage\nFlexible paid time off and paid holiday time off \n12 weeks of new parent or family leave\nPersonal and professional development resources\nFor more details on our US benefits, or for information on our international benefits, please see here.","description_format":"text","description_chars":9314,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Equity","Parental leave","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security"],"lifecycle":[{"event":"open","at":"2026-07-22T20:32:55Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 4","filings_12m":4,"filings_prev_12m":5,"green_card_filings_12m":0,"median_offered_wage_usd":120000,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":1}],"liveness":{"score":34,"band":"fade","label":"Fading","p_open":1,"p_active":0.765,"p_room":0.44,"age_days":81,"expected_fill_days":69,"reasons":["conf:0","velocity","win:tail","crowd:"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/obsidian-security-staff-it-systems-engineer","json_url":"https://alion.io/job/obsidian-security-staff-it-systems-engineer.json","meta":{"generated_at":"2026-10-12T12:46:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19954,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4018},"rest":"https://alion.io/mcp/rest/get_company?id=4018"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fobsidian-security-staff-it-systems-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fobsidian-security-staff-it-systems-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fobsidian-security-staff-it-systems-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/obsidian-security-staff-it-systems-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fobsidian-security-staff-it-systems-engineer"}]}