IT Systems Engineer
At a glance
Mid-level Systems Administration role at Tempo. Remote, United States · full-time · no salary stated · we estimate $93,558–$148,500 across the United States.
Tempo has not published a salary for this role. The figure below is our estimate, not theirs.
remoteroles summary, based on the employer's posting.
What you'll do
- Automate employee access from the HR system through Okta and connected SaaS tools, closing provisioning and offboarding gaps
- Maintain single sign-on and SCIM connections across the company’s SaaS applications
- Run Jamf Pro enrollment, device settings, updates and certificate delivery for company Macs
- Configure endpoint protection, investigate alerts and expand SIEM detections using version-controlled rules
- Build toward Terraform-managed IT systems, handle complex access escalations and prepare unified evidence for SOC 2 audits
What you bring
- At least four years working in IT engineering roles
- Hands-on Okta experience with SSO, SCIM, SAML or OIDC integrations, lifecycle policies and Workflows
- Production Jamf Pro experience covering Mac enrollment, configuration, updates and certificates
- Experience operating an endpoint detection platform, including policy tuning, deployment through MDM and alert review
- You can script and work with APIs, Git-based configuration, CI/CD and Terraform or an equivalent tool
Who this fits
This suits a hands-on IT systems engineer who builds and automates infrastructure rather than focusing on help desk support. The role is remote within the United States.
From the employer
Tempo is a layer-1 blockchain purpose-built for stablecoins and real-world payments, born from Stripe’s experience in global payments and Paradigm’s expertise in crypto tech.
Tempo’s payment-first design provides a scalable, low-cost predictable backbone that meets the needs of high-volume payment use cases. Our goal is to move money reliably, cheaply, and at scale. Our north star is simplicity for users: fintechs, traditional banks, merchants, platforms, and anyone else looking to move their payments into the 21st century.
We're building Tempo with design partners who are global leaders in AI, e-commerce, and financial services: Anthropic, Coupang, Deutsche Bank, DoorDash, Mercury, Nubank, OpenAI, Revolut, Shopify, Standard Chartered, Visa, and more.
We’re a team of crypto-optimists, building the infrastructure needed to bring real, substantial economic flows onchain. We like to move fast and swing for the fences — join us!
The Role
You'll own and build Tempo's corporate IT infrastructure — identity, device management, endpoint security, and the automation that ties it all together. This is a hands-on engineering role, not a help desk seat. You'll bring software-engineering rigor to IT systems and help secure a company operating at the frontier of crypto.
Responsibilities
Architect and automate the full identity lifecycle — HRIS → Okta → SaaS apps — eliminating manual provisioning and off boarding gaps
Complete and maintain SSO/SCIM integrations across the entire SaaS stack
Own Jamf Pro end to end: PreStage enrollment, configuration profiles, software updates, certificate distribution
Deploy and tune endpoint security (SentinelOne) — policy management, MDM-driven deployment, alert triage
Expand SIEM coverage and write detection/alerting rules with a detection-as-code approach
Build toward infrastructure-as-code management of all IT tooling (Terraform, GitHub Actions)
Resolve hard identity, device, and access escalations that get past first-line support
Drive SOC 2 readiness — unified audit trails across identity, device, and security systems
Qualifications
4+ years in IT engineering roles
Hands-on Okta administration: SSO, SCIM, SAML/OIDC integrations, lifecycle policies, Okta Workflows. Understands HRIS-as-source-of-truth (Rippling or similar)
Production Jamf Pro experience: PreStage enrollment, configuration profiles, software update management, certificate distribution. macOS-first
Deployed and operated an EDR platform (SentinelOne or comparable) — policy tuning, MDM deployment, alert triage
Strong scripting (Python/Bash/Go preferred), comfortable with REST APIs, webhooks, JSON, auth flows, and event-driven workflows
Git-based config management, CI/CD pipelines (GitHub Actions), Terraform or equivalent
Solid grasp of DNS, certificates/PKI, ZTNA (Tailscale or similar), and modern access control models
Nice-to-Haves
Crypto/blockchain security exposure — multisig/hardware-wallet workflows (Fireblocks or similar), phishing/lookalike-domain campaigns, high-value signer threat models
Detection-as-code: SIEM detections as version-controlled rules (Panther Python models, Sigma, or equivalent)
Apple platform depth beyond basic Jamf — DDM, MDM protocol internals, notarization/signing/packaging, macOS security frameworks (TCC, system extensions)
Mapped controls to SOC 2, ISO 27001, NIST CSF, or CIS — understands what audit-ready evidence looks like
Built Slack-driven workflows, bots, or self-service internal tooling
Public open-source contributions to IT/security tooling
Systems Administration work from LinkedIn, X, Reddit and Upwork, in one list.
Each morning you get everything that fits, strongest first.
Systems AdministrationRemote
Find me workBy the team behind remoteroles.