IT Engineer

LiveKit builds the infrastructure layer for voice-driven computing. Its platform gives developers what they need to build, test, deploy, scale and observe AI agents in production. Founded in 2021, LiveKit now powers voice applications for OpenAI, xAI, Salesforce, Coursera, Spotify and thousands of others, together handling billions of calls a year.

**What kind of role this is**

Worth being clear up front: this is an engineering job with a support component, not a helpdesk job with an engineering title. Most of the work is building and owning systems — the identity model, endpoint baselines, SaaS governance, and the automation that decides how much manual work IT ends up absorbing.

You will still carry escalations and some direct support. At LiveKit's size there is no clean wall between the two, and whoever holds this role needs to stay close enough to the queue to know which problems are worth engineering away entirely.

The stack is Okta, Workspace ONE, Google Workspace and Slack, working alongside Security, Engineering, People and Finance. Internal systems sit in audit scope for SOC 2, ISO 27001 and PCI, so controls need to survive an auditor's review rather than merely function day to day.

**The work**

- Owning identity and access engineering in Okta: group strategy, app assignments, SSO, lifecycle automation, and access request patterns that are secure without being painful
- Endpoint engineering across a macOS-first fleet in Workspace ONE, covering provisioning, configuration baselines, patching, encryption posture, inventory and compliance reporting
- Administering Google Workspace and Slack at scale, including user lifecycle, groups, shared drives, permissions and the governance that stops them drifting
- Bringing the SaaS estate under real governance: who owns each tool, who has access, what it costs, and what happens to all three when someone changes team or leaves
- Building automation so IT load stops scaling with headcount, across onboarding, deprovisioning, access reporting and device compliance
- Turning security and compliance requirements into controls that produce their own audit evidence instead of a quarterly scramble
- Acting as technical escalation point across identity, access, endpoints and internal infrastructure

**Who they are looking for**

- 4+ years in IT engineering, IT operations, systems administration, endpoint engineering or identity engineering, ideally somewhere fast-moving and remote-first
- Ownership-level experience of Okta or a comparable identity provider, covering SSO, groups, app assignments and lifecycle workflows
- Hands-on with modern MDM such as Workspace ONE, including provisioning, configuration enforcement, patching and encryption
- Strong Google Workspace administration and real macOS endpoint depth
- A record of building or improving operational workflows, automation and internal controls rather than just running someone else's
- Genuinely strong writing: explaining decisions clearly and documenting systems so the next person is not reverse-engineering them
- Comfort prioritising under ambiguity, and a bias toward building things that reduce future work
- A desire to stay hands-on. This is an individual contributor role, not a management track

**Useful but not required**

- Compliance experience across SOC 2, ISO 27001, PCI, access reviews or control implementation
- Device security posture work: EDR, disk encryption, patch compliance, vulnerability management
- Scripting with Bash, Python, Google Apps Script, Okta Workflows or direct APIs
- Designing IT processes for a globally distributed team across time zones, including international hardware logistics

**What LiveKit offers**

- Competitive salary and equity, though no figures are published in the listing
- Health, dental and vision cover
- Flexible vacation policy
- Remote working with the equipment you need
- Working alongside engineers building in the open

The listing states the role is remote but does not name eligible countries, so confirm geographic scope with the recruiting team before investing time in an application.