Sr. IT Systems Engineer

About the role

This position operates at the critical intersection of identity, SaaS platforms, endpoint management, and automation. The Sr. IT Systems Engineer serves as a hands-on architect and operator of Betterment's core IT systems, ensuring secure, reliable, and seamless access to tools that enable the business. In this role, you will translate business needs into durable infrastructure, establish scalable standards, and drive automation that reduces manual effort. You will collaborate closely with Security, People Operations, Finance, and Engineering to keep systems stable, auditable, and aligned with business objectives. The position is based in our New York City office under a hybrid schedule that includes four days per week onsite and flexible seasonal policies.

Daily responsibilities

You will design, implement, and evolve identity and access management architecture across the enterprise, integrating directory services, authentication, and authorization controls. This includes owning end-to-end employee lifecycle automation, connecting HRIS data with identity platforms and downstream SaaS systems to ensure timely provisioning and deprovisioning. You will administer and optimize core SaaS platforms used daily across the organization, such as Google Workspace, Okta, Slack, Zoom, Lumos, and Jamf. Additional scope includes managing business systems like HRIS, Netsuite, Salesforce, and ZipHq, with particular attention to finance operations and access review, spend control, and security monitoring. You will establish and maintain standards for system configuration, access models, and operational ownership, ensuring these practices scale securely as the business grows.

Automation and platform enablement form a central part of the role. You will automate repetitive IT workflows using infrastructure-as-code and scripting, while building self-service processes that lower support burden and improve employee experience. You will standardize and codify infrastructure and workflows wherever possible to enhance consistency and reliability. Proficiency with low-code automation platforms such as Boomi, Workato, Okta Workflows, and Zapier is expected to support these efforts.

Device and endpoint management is another key area. You will manage and scale macOS endpoint fleets, handling configuration, patching, security controls, and policy enforcement in partnership with Security. You will own MDM tooling, OS upgrade strategies, and overall endpoint security posture. Where required, you will also support Windows endpoints, particularly for Finance and other specialized functions. Collaboration with Security Engineering and Risk will strengthen MFA, SSO, RBAC, and device trust controls across systems and devices.

Compliance and documentation are integral to this position. You will maintain audit-ready records and processes that support internal and external compliance reviews, ensuring that configurations, access decisions, and changes are well-documented and traceable.

What you bring

You will enter this role with hands-on experience administering business systems such as HRIS, Netsuite, Salesforce, and ZipHq, demonstrating familiarity with finance workflows and data integrity. You have practical experience managing Lumos, Jamf, and endpoint management practices for both macOS and Windows devices. You understand access review, spend control, and security monitoring using tools like Lumos, and you know how to design, implement, and maintain identity and access management architecture at enterprise scale. Your background includes automating IT workflows and creating self-service solutions that reduce manual effort for teams and improve reliability.

Growth and impact

This role offers the opportunity to shape the foundation of Betterment's IT infrastructure and security posture. You will directly influence employee productivity, system resilience, and security outcomes through thoughtful design and consistent execution. If you are motivated by building scalable systems, reducing operational friction, and partnering across technical and business teams, this position aligns with your goals.

Practical notes

Details on benefits, eligibility, and policies are confirmed Information such as location, compensation range, and schedule may vary based on individual factors and performance. Please review the official application for the most current and complete information.

What you'll do

• Meet the bar IT Systems Engineer.