IT Engineer✦ anywhere

IT EngineerAbout the companyHi, we re Ondo Finance. Our mission is to provide institutional-grade, blockchain-enabled investment products and services. We have both a technology arm that develops decentralized finance technology, and an asset management arm that creates and manages tokenized funds. We were the first company to tokenize exposure to US Treasuries, and have since expanded into several other assets. We are also focused on incubating protocols that can support both tokenized real-world assets and traditional crypto.Founded by folks from Goldman Sachs Digital Assets Team, we re backed by some of the best investors in the world including Founders Fund, Coinbase Ventures, Pantera Capital, Tiger Global, and more. We are currently the leaders in the space in terms of AUM and are well capitalized to continue growing the firm. We re fully remote, with team members across the U.S.

About the roleWe are seeking a motivated, systems-oriented IT Engineer to join our Corporate IT team. This role combines hands-on IT operations and Tier 1–2 support with ownership of identity, access, endpoint management, and employee lifecycle workflows.You will work closely with the IT Operations Engineer and Security team to operate and continuously improve a modern, SaaS-first, highly automated IT environment. This is a junior but high-impact role designed for someone who wants to grow into identity-driven, automation-focused IT.

ResponsibilitiesIdentity, Access & SaaS Operations Support day-to-day administration of IAM platforms such as Okta (or similar IdPs), including user lifecycle workflows, access provisioning, group management, and MFA. Assist with SSO and SCIM integrations between IAM systems and SaaS platforms such as Google Workspace, Slack, Notion, and other internal tools. Help enforce least-privilege access principles and support periodic access reviews and audits. Execute secure and timely access provisioning and deprovisioning aligned with documented lifecycle processes. Endpoint & Device Management Support macOS endpoint management using Addigy, Iru, or similar platforms. Assist with device enrollment, compliance monitoring, troubleshooting, and lifecycle workflows. Coordinate device preparation, shipping, replacements, and secure device recovery for offboarding employees. Help maintain endpoint security standards and configuration baselines. Employee Lifecycle & Automation Execute and coordinate end-to-end onboarding and offboarding processes, including: Account provisioning and access configuration Device setup and logistics Role-based access enforcement Secure deactivation and asset recovery Assist in building and maintaining low-code / no-code automations (e.g., Okta Workflows) to reduce manual effort and increase reliability. Ensure lifecycle processes are documented, repeatable, and auditable. Identify opportunities to improve lifecycle efficiency and reduce operational risk. Tier 1 & 2 IT Support Provide day-to-day IT support across identity, SaaS applications, access issues, and macOS endpoints. Serve as an escalation point for more complex access, integration, or device issues. Perform structured troubleshooting and root-cause analysis rather than applying temporary fixes. Identify recurring operational problems and contribute to durable, system-level improvements. Vendor Lifecycle & IT Operations Support vendor onboarding, evaluation, and renewals. Assist with SaaS access reviews and vendor offboarding. Help maintain visibility into vendor usage, contracts, and lifecycle status. Contribute to improving procurement and asset tracking processes.

Requirements 2–3 years of experience in IT support, IT operations, or systems-focused roles.

Experience providing Tier 1–2 IT support in a SaaS-heavy environment. Solid understanding of identity and access management fundamentals, including SSO, SCIM, MFA, and RBAC. Hands-on experience with IAM platforms such as Okta, Azure AD, or similar.

Experience supportin