jobapplier

Systems Engineer (Corporate Security)

Ramp

Skills

Required

  • Engineer/Endpoint Engineering / Identity Access & Management / Corporate Security
  • Platform
  • authentication
  • identity provider
  • Okta
  • SSO
  • authenticator policies
  • SCIM provisioning
  • EDR
  • endpoint vulnerability management
  • CrowdStrike

Preferred

  • tooling / access review and governance platforms
  • AI
  • macOS
  • Identity posture management
  • ISPM
  • Cloudflare
  • Zero Trust
  • proxy / DNS / network-layer enforcement
  • Python / Go / Bash
  • Terraform

Join Ramp, a fast-growing fintech company, as a Systems Engineer in Corporate Security. In this hands-on role, you will build and operate security controls across our internal environment, including device configuration, authentication policies, and AI tool usage. You will work closely with IT, Security Engineering, and AI DevX, and report to the Corporate Security lead. Benefits include comprehensive medical, dental, and vision insurance, a 401(k) with employer match, unlimited PTO, and more.

Responsibilities

  • Concevoir et mettre en œuvre des contrôles de sécurité pour l'environnement interne de l'entreprise, y compris la gestion des appareils, l'authentification et l'accès.
  • Automatiser les processus de configuration des appareils et de correction des vulnérabilités, en utilisant des outils d'infrastructure en tant que code.
  • Collaborer avec les équipes IT, de sécurité et de développement pour intégrer et automatiser les systèmes de sécurité.
  • Hands-on macOS management at scale: MDM (Jamf, Fleet, Kandji, or equivalent) and macOS update mechanisms
  • Scripting ability in Python, Go, or Bash, and experience automating against platform APIs
  • Infrastructure-as-code and CI/CD experience (Terraform, GitHub Actions)

Requirements

  • Ability to evaluate tradeoffs between technical enforcement, policy, and user friction, and to explain those tradeoffs clearly
  • 3–5 years of experience in Client Platform Engineer/Endpoint Engineering, Identity Access & Management, or Corporate Security
  • Working knowledge of an identity provider (Okta or similar): SSO, authentication and authenticator policies, SCIM provisioning, and conditional access
  • Experience with EDR and endpoint vulnerability management (CrowdStrike or similar)

Preferred

  • Identity posture management (ISPM) tooling, or access review and governance platforms
  • Osquery and Fleet, or other query-based fleet visibility tooling
  • Cloudflare Zero Trust, or other proxy, DNS, or network-layer enforcement, including TLS inspection
  • Exposure to AI and LLM security concerns: agent authorization, tool calls, model gateways, data leakage through AI tooling
  • Windows fleet management alongside macOS
  • Compliance frameworks (SOC 2, PCI) as they apply to endpoints and access

Pay

USD 144,000 - 199,000

Every job at Ramp