IT Infrastructure Engineer

At Sierra, we’re building a platform to enable every company in the world to build better, more human customer experiences with AI. We partner with industry leaders such as SoftBank, Uber, Rivian, CLEAR, and Sutter Health. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia. We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and Family. These values are the foundation of our work, and we are committed to upholding them in everything we do. Our co-founders are Bret Taylor and Clay Bavor . Bret currently serves as Board Chair of OpenAI. Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook. Bret was also one of Google's earliest product managers and co-creator of Google Maps. Before founding Sierra, Clay spent 18 years at Google, where he most recently led Google Labs. Earlier, he started and led Google’s AR/VR effort, Project Starline, and Google Lens. Before that, Clay led the product and design teams for Google Workspace.  What you’ll do As an IT Infrastructure Engineer, you’ll play a key role in scaling our internal systems during a critical phase of growth. As the first hire on our internal IT team, you’ll collaborate with our IT Lead, GRC Lead, and Engineering team to build foundational infrastructure, strengthen security, and streamline operations. Identity & Access Management: Lead the migration from Google Workspace Identity to Okta, designing a scalable, secure identity foundation across the organization.  Integrate real-time device posture signals into conditional-access policies using a modern endpoint-compliance solution. Implement an identity-analytics capability to automate orphaned-account discovery, anomalous-login detection, and access-review workflows. Onboarding & Offboarding Workflows: Develop automated user-lifecycle pipelines (provisioning through deprovisioning) to reduce manual provisioning time. Data Loss Prevention: Deploy enterprise DLP and endpoint-based DLP solutions; automate asset tagging and policy enforcement. Systems Integration & Compliance: Build integrations between internal systems and our compliance automation platform to support audits, reporting, and operational efficiency. IT Automation & Scripting: Drive efficiency through automation using Bash, Python, and low-code platforms to streamline routine IT processes. Internal Tools & Integrations: Build and maintain scalable internal tools that integrate with business systems via APIs to support operations and compliance. SaaS & Compliance Workflows: Manage SaaS lifecycle processes with a focus on compliance, security, and operational best practices. Enterprise IT Environment: Operate effectively within enterprise-scale environments, balancing speed with reliability and security. Device Compliance & Conditional Access: Integrate real-time device posture signals into conditional-access policies using a modern endpoint-compliance solution. Identity Analytics & Access Governance: Implement an identity-analytics capability to automate orphaned-account discovery, anomalous-login detection, and access-review workflows. What you’ll bring 4–8 years in IT infrastructure, software engineering, or related roles Familiarity with tools and platforms such as Google Workspace, Okta, Vanta, AWS, and HRIS systems Strong understanding of SAML, SCIM, OAuth/OIDC, REST APIs, and Infrastructure as Code (IaC) practices Proficiency in Python, Bash, JavaScript, and Terraform; experience with React is a plus Ability to operate independently with minimal oversight, bringing a systems-thinking approach to a fast-paced startup environment Even better… Familiarity with IT compliance areas such as access audits, data residency planning, and control implementation Experience working with security tools and integrations,