IT Engineer

About LiveKit

LiveKit is building the infrastructure layer for the voice-driven era of computing. Our platform gives developers everything they need to build, test, deploy, scale, and observe agents in production. Founded in 2021, LiveKit powers voice AI applications for OpenAI, xAI, Salesforce, Coursera, Spotify, and thousands of others, collectively facilitating billions of calls each year.

About You

This is an engineering role with a support component, not the other way around. The bulk of the job is building and owning systems: the identity model in Okta, endpoint baselines in Workspace ONE, governance across Google Workspace and the wider SaaS estate, and the automation that determines how much manual work IT has to absorb in the first place. You'll also carry escalations and some direct support — at our size there's no clean wall between the two, and the person in this role needs to stay close enough to the queue to know which problems are worth engineering away.

You'll work in an Okta, Workspace ONE, Google Workspace, and Slack stack, partnered closely with Security, Engineering, People, and Finance. Internal systems are in audit scope for SOC 2, ISO 27001, and PCI, so the controls you build have to hold up under an auditor's review, not just function day to day.

You'll thrive as an IT Engineer if you:

obsess with crafting code that is fast, reliable and practical for the problem

are known as the go-to person for tackling tough technical problems

work hard and can build and ship fast

can clearly explain complex technical concepts to others

are a fast learner, frequently picking up new languages and tools

What You'll Do

As an IT Engineer at LiveKit, you will:

Own identity and access engineering in Okta — group strategy, app assignments, SSO configuration, lifecycle automation, and access request patterns that are secure without being miserable to use

Run endpoint engineering across a macOS-first fleet in Workspace ONE — provisioning, configuration baselines, patching, encryption posture, inventory hygiene, and compliance reporting

Administer Google Workspace and Slack at scale: user lifecycle, groups, shared drives, permissions, roles, and the governance patterns that keep them from drifting

Bring the SaaS estate under real governance — who owns each tool, who has access, what it costs, and what happens to all three when someone changes teams or leaves

Build the automation that keeps IT load from scaling with headcount — onboarding, deprovisioning, access reporting, device compliance, and whatever else you catch yourself doing twice

Translate security, compliance, and engineering requirements into IT controls that generate their own audit evidence instead of a quarterly scramble

Serve as the technical escalation point for complex issues across identity, access, endpoints, and internal infrastructure — and then engineer the class of problem out of existence

Who You Are

4+ years in IT engineering, IT operations, systems administration, endpoint engineering, or identity engineering — ideally somewhere fast-moving and remote-first

You've administered Okta or a comparable identity provider as the owner: SSO, groups, app assignments, lifecycle workflows, real access management decisions

Hands-on with modern MDM — Workspace ONE or equivalent — including provisioning, configuration enforcement, patching, encryption, and inventory