IT Engineer - Remote at LiveKit

About LiveKit

LiveKit is building the foundational infrastructure for the voice-driven computing era. Our platform provides developers with all necessary tools to build, test, deploy, scale, and observe agents in production. Founded in 2021, LiveKit powers voice AI applications for major companies like OpenAI, xAI, Salesforce, Coursera, and Spotify, facilitating billions of calls annually.

About You

This is primarily an engineering role with a critical support component. Your main focus will be on building and owning robust internal systems, including the identity model within Okta, endpoint baselines in Workspace ONE, and comprehensive governance across Google Workspace and the broader SaaS environment. A significant part of your contribution will involve developing automation to minimize manual IT workload. While engineering focused, you will also handle escalations and direct support, as we believe staying close to user issues is essential for identifying problems worth solving through engineering. You will operate within an Okta, Workspace ONE, Google Workspace, and Slack stack, collaborating closely with our Security, Engineering, People, and Finance teams. Given that our internal systems are subject to SOC 2, ISO 27001, and PCI audits, the controls you implement must be resilient and auditor-proof.

You are an ideal IT Engineer candidate if you:

• Obsess over crafting code that is fast, reliable, and practical for solving complex problems.
• Are recognized as the go-to expert for tackling challenging technical issues.
• Demonstrate a strong work ethic, capable of building and shipping solutions rapidly.
• Can clearly articulate complex technical concepts to diverse audiences.
• Are a fast learner, frequently mastering new languages and tools.

What You'll Do - Key Responsibilities

• Identity & Access Engineering: Lead identity and access management in Okta, including group strategy, application assignments, SSO configuration, lifecycle automation, and secure, user friendly access request patterns.
• Endpoint Engineering: Manage our macOS-first fleet using Workspace ONE, covering provisioning, configuration baselines, patching, encryption posture, inventory hygiene, and compliance reporting.
• Google Workspace & Slack Administration: Administer these platforms at scale, managing user lifecycles, groups, shared drives, permissions, roles, and implementing governance to prevent drift.
• SaaS Estate Governance: Establish comprehensive governance for our SaaS tools, defining ownership, access, costs, and managing changes when team members transition or depart.
• Automation Development: Build critical automation solutions to prevent IT load from scaling with headcount, focusing on onboarding, deprovisioning, access reporting, device compliance, and other repetitive tasks.
• Compliance & Security Controls: Translate security, compliance (SOC 2, ISO 27001, PCI), and engineering requirements into IT controls that automatically generate audit evidence.
• Technical Escalation & Problem Solving: Serve as the primary technical escalation point for complex issues across identity, access, endpoints, and internal infrastructure, with the ultimate goal of engineering such problems out of existence.