Senior IT Engineer

Altruist is a hyper-growth fintech company on a mission to make financial advice better, more affordable, and accessible to everyone. Our team is building a revolutionary platform that reduces barriers to entry into wealth creation and management for financial advisors and their clients. Using Altruist, advisors can work more efficiently and reduce costs, enabling them to help more people.

If you're passionate about your craft and are looking for big, meaningful problems to solve, then you'll love what we're doing. At Altruist, you'll have the opportunity to do exciting work on products ranging from complex enterprise business software to a beautiful consumer app experience and user acquisition platform.

This role is hybrid, with three days per week in our San Francisco FiDi office.

About the role

Altruist is building the modern custodian for independent financial advisors, and we’re growing quickly. The internal systems people depend on - identity, devices, corporate applications, and the networks and automation connecting them - need to work at a scale well beyond where we are today.

This is a senior generalist role. You’ll design and implement solutions across our internal technology, serve as the escalation point for our hardest problems, and mentor junior teammates through to resolution.

We’re looking for an engineer with broad technical range, an AI-native approach to the work, and strong instincts for where to invest technical effort.

What you’ll do

• Own the design, implementation, and operation of our core internal systems - identity, endpoints, corporate applications, and networking
• Lead technical projects end to end - scoping, design, pilot, rollout, and handoff
• Implement and maintain SASE and zero trust controls across the environment
• Build automation and integrations that remove manual work, including AI-assisted and agentic workflows and expanded self-service
• Evaluate and implement new tools and platforms, including migrations off systems that no longer fit
• Serve as the senior escalation point for complex or high-impact issues
• Strengthen security and reliability across the environment - access controls, patching, and monitoring - and support access reviews and audit requests
• Define technical standards, documentation, and runbooks that make the work repeatable

What you'll bring

Required

• 7-10 years in IT engineering, corporate infrastructure, or a related discipline, with demonstrated ownership of systems end to end in a large or fast-growing organization
• Endpoint engineering across macOS and Windows, including MDM and fleet-scale configuration management
• Identity platform experience - Okta and/or Google Workspace preferred, though any IdP works - including SSO, SCIM, and lifecycle automation
• Corporate networking and secure access - Wi-Fi, VPN, DNS, DHCP, VLANs, firewall fundamentals - plus hands-on experience with SASE, conditional access, and device trust
• An AI-native approach to the work - you already use AI to write code, troubleshoot, and automate, with a clear sense of where it adds value - backed by real scripting ability (Python, Bash, PowerShell) and comfort with APIs
• Strong people skills and a service mindset - you take complex escalations yourself and handle them with patience, clarity, and genuine care for the person on the other end

Nice to have

• Experience in financial services or another regulated environment, including SOC 2, FINRA/SEC, or similar control frameworks and audit cycles
• Experience supporting a fleet of 500+ endpoints, or a company through a period of rapid headcount growth
• Experience standing up or replacing a core IT system - an IdP, MDM, or ITSM platform - rather than only operating one
• Experience building internal tooling or AI-assisted workflows for IT operationsInfrastructure-as-code or configuration management experience (Terraform, Ansible, or similar)
• Exposure to M&A integration, office buildouts, or other IT work driven by company growth

Details

• Location: San Francisco, CA - hybrid, 3 days/week in office
• Schedule: Full-time, with occasional scheduling flexibility needed around planned deployments
• Requirements: Background check and security awareness training prior to system access