Senior Systems Engineer, IAM Operations

Crusoe is on a mission to accelerate the abundance of energy and intelligence. As the only vertically integrated AI infrastructure company built from the ground up, we own and operate each layer of the stack — from electrons to tokens — to power the world's most ambitious AI workloads. When you join Crusoe, you join a team that is building the future, faster.We're in the midst of the greatest industrial revolution of our time. The demand for AI compute is boundless, and power is a bottleneck. We're solving that — with an energy-first approach that makes AI infrastructure better for the world and faster for the people innovating with AI.We're looking for problem-solving, opportunity-finding teammates with a sense of urgency, who believe in the scale of our ambition and thrive on a path not fully paved — people who want to grow their careers alongside a team of experts across energy, manufacturing, data center construction, and cloud services.If you want to do the most meaningful work of your career, help our customers and partners advance their AI strategies, and be part of a high-performing team that believes in each other, come build with us at Crusoe.About This RoleWe're looking for a Senior Systems Engineer to own day-to-day identity and access management operations at Crusoe. This is a hands-on role focused on keeping our Okta ecosystem running smoothly and securely. You will oversee user lifecycle management, onboard applications to Okta for SSO, manage our governance platform (Lumos), and support our SaaS application stack.You'll be the go-to for onboarding, offboarding, and access automation, acting as a Tier 2 escalation point for the Service Desk while building the automations that keep IAM operations scalable as Crusoe grows.What You’ll Be Working OnOwning end-to-end user lifecycle management in Okta, including onboarding, offboarding, hires, rehires, and contractor conversionsManaging sensitive offboarding scenarios, including closing out lingering user sessions on personal devices across Slack, Google Workspace, and other platformsManaging core SaaS application administration (e.g., Slack, Claude, Port.io, DocuSign), ensuring seamless user provisioning, role-based access control (RBAC), and automated license reclamation to optimize software spendBuilding access request workflows and approval automations in our governance platform to streamline access delivery and enforce least-privilege principlesBuilding, executing, and supporting periodic user access reviews and entitlement certifications across core SaaS platforms to maintain compliance and audit readinessAdministering Okta security features, including FastPass multifactor authentication and device trust, to strengthen access across the environmentBuilding automations for application provisioning and repetitive IAM tasks using Okta Workflows and no-code platforms, including custom SCIM solutions where native support falls shortTraining and empowering Service Desk team members on new security policies, IAM best practices, and major system changes, actively involving them in projects to ensure smooth operational handoffsActing as a Tier 2 escalation point for the Service Desk on complex access, authentication, and application integration issuesPartnering with the API team to define clear requirements for custom automations, leveraging Okta Workflows knowledge to bridge the gap between IAM and engineeringTroubleshooting authentication failures, API errors, and access-related incidents, using REST APIs and scripting to resolve issues or run bulk operationsDocumenting SOPs and runbooks that keep IAM operations consistent and scalable as the team growsWhat You’ll Bring to the Team5+ years of experience in Systems Engineering, IT Operations, or Identity & Access Management (IAM), with hands-on Okta administration experience.Hands-on experience with Identity Governance platforms (e.g., Lumos, Okta Identity Governance, or similar governance frameworks) to manage access requests, entitlements, and periodic access reviews.Proven experience managing user lifecycle automation, including onboarding, offboarding, hires, rehires, and contractor conversions.Deep familiarity with Okta security features, such as FastPass multifactor authentication (MFA) and device trust.Familiarity with SCIM provisioning, including building custom solutions when native support is unavailable.Working knowledge of no-code or low-code automation tools, particularly Okta Workflows.Strong troubleshooting skills across authentication issues, REST APIs, and scripting languages (e.g., Python, PowerShell) for bulk operations.Experience supporting multi-platform enterprise environments, including Google Workspace and Slack.Clear communication skills and comfort partnering cross-functionally with API, engineering, and Service Desk teams.Bonus PointsExposure to identity governance platforms such as Lumos, Opal, or similar toolsExperience with application integrations using OIDC or SAMLTerraform or other infrastructure-as-code experienceOkta Administrator or Consultant certificationBenefits:Competitive compensation and equity packagesRestricted Stock UnitsPaid time off, paid holidays & leave of absence programsComprehensive health, dental & vision insuranceEmployer contributions to HSA accountPaid parental leavePaid life insurance, short-term and long-term disabilityProfessional development & tuition reimbursementMental health & wellness supportCommuter benefits (parking & transit)Cell phone stipend401(k) Retirement plan with company match up to 4% of salaryVolunteer time offGlobal travel insurance & emergency assistanceDaily meals allowanceAdditional perks & programs specific to locationCompensation RangeCompensation will be paid in the range of up to $165,000 - $200,000 + Bonus. Restricted Stock Units are included in all offers. Compensation to be determined by the applicant's knowledge, education, and abilities, as well as internal equity and alignment with market data.Crusoe is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.LocationSan Francisco, CA - USEmployment TypeFull timeLocation TypeOn-siteDepartmentIT, Compliance, and Security