Systems Engineer, Corporate Security

Ramp

Staff Systems Engineer on Corporate Security team at Ramp, building systems for identity and endpoint management. Focused on automation and securing AI access across devices.

Posted 4/28/2026full-timeNew York City • New York • 🇺🇸 United StatesSeniorLead💰 $206,000 - $283,000 per yearWebsite

Tech Stack

Tools & technologies

AzureJamfMacOS

About the role

Key responsibilities & impact

Own endpoint security and fleet management. Build and maintain the security and compliance of every Mac and PC across all offices and remote employees through Jamf and Intune — device trust enforcement, configuration management, patching, and vulnerability remediation at scale.
Own identity and access infrastructure. Architect, build, and operate Ramp's identity platform — Okta, platform SSO, device-bound authentication, and entitlement governance. You'll ensure every employee, contractor, and system authenticates securely, and that new tools and vendors can be connected safely without opening gaps.
Build AI agents that automate security operations. Design and deploy AI-driven automation to replace manual, repetitive security work: vulnerability triage and remediation prioritization, identity threat detection, compliance posture enforcement, and audit evidence collection. You'll turn reactive processes into autonomous workflows.
Define AI agent identity governance. As Ramp deploys AI agents into production, you'll define how those agents authenticate, what data and systems they can access, and how their activity is audited. This is net-new, fast-growing work at the intersection of security and AI.
Partner on corporate security hardening. Work closely with the Corporate Security program team to harden Ramp's core platforms (Okta, Google Workspace, Microsoft 365), manage endpoint defense tooling (CrowdStrike, Push Security), and support public sector and compliance requirements (FedRAMP, SOC 2).
Unblock cross-functional teams. A stable, well-architected identity and endpoint layer directly enables engineering teams to ship faster. You'll keep the foundation solid so others can build on it without hitting security friction.

Requirements

What you’ll need

7+ years of experience in systems engineering, security engineering, or IT security — with deep, hands-on expertise in identity and access management (Okta, Azure AD/Entra ID, or equivalent) and endpoint management (Jamf, Intune, or equivalent).
Strong technical depth across macOS and Windows fleet management: MDM configuration, device trust, compliance enforcement, patching, and declarative device management.
Experience designing and operating SSO, MFA, and zero-trust authentication architectures at scale — platform SSO, device-bound SSO, passwordless authentication.
Demonstrated ability to build automation that replaces manual processes. You default to scripting, building, and automating rather than running playbooks. Experience with AI/ML tooling for security automation is a strong plus.
Familiarity with compliance frameworks (SOC 2, FedRAMP, NIST 800-53, ISO 27001) and experience supporting audit readiness from the endpoint and identity side.
Ability to operate independently with minimal oversight. You find the problem, scope the fix, ship it, and move on. You don't wait for tickets — you see what's broken and go fix it.
Clear, concise communication. You can explain complex identity and endpoint decisions to PMs, engineering leads, and executives without hiding behind jargon.

Benefits

Comp & perks

100% medical, dental & vision insurance coverage for you
Partially covered for your dependents
One Medical annual membership
401k (including employer match on contributions made while employed by Ramp)
Flexible PTO
Fertility HRA (up to $10,000 per year)
Parental Leave
Unlimited AI token usage
Pet insurance
Centralized home-office equipment ordering for all employees
Health and Wellness stipend
In-office perks: lunch, snacks, drinks, and more
Budget for intra-office travel
Relocation support to NYC or SF (as needed)

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

identity and access managementendpoint managementMDM configurationcompliance enforcementpatchingSSOMFAzero-trust authenticationautomationAI/ML tooling

Soft Skills

independent operationproblem-solvingcommunication

Certifications

SOC 2FedRAMPNIST 800-53ISO 27001