Systems Engineer, Corporate Security

Builds and runs security controls for Ramp's internal environment as a Systems Engineer on the Corporate Security team, reporting to the Corporate Security lead. The scope covers the device fleet, identity and access, and the AI tools staff use. The engineer manages patching and configuration baselines as code, automates fixes for missing or unhealthy EDR, DLP and VPN agents, sets Okta SSO, MFA, device trust and conditional access policy, cleans up identity posture issues such as stale accounts and over-scoped OAuth grants, and puts controls around the enterprise Claude and OpenAI deployments, favouring code and agentic automation over manual work.

Ramp wants three to five years in endpoint engineering, IAM or corporate security, macOS management at scale with Jamf, Kandji or Fleet, Okta knowledge, scripting and EDR experience. Hybrid from New York.