Sr. IT Systems Engineer

Betterment•New York City, NY

4d•$121,000 - $143,000•Hybrid

About The Position

Betterment is a leading, technology-driven financial services company that offers investing, savings and retirement solutions for retail investors and investment advisors as well as financial wellness solutions, including a 401(k) for small and medium-sized businesses. Our team is passionate about our mission, to empower people to build wealth with confidence and ease. We’re headquartered in NYC and offer hybrid NY-based positions (four days/ week in-office, with no required office days during the summer and winter holidays). The Senior IT Systems Engineer is a hands-on, senior individual contributor responsible for designing, scaling, and operating Betterment’s core IT systems and infrastructure. This role sits at the intersection of identity, SaaS platforms, endpoint management, and automation, ensuring employees have secure, reliable, and seamless access to the tools they need to do their best work. As a force multiplier within Corporate Technology, this role establishes standards, builds scalable systems, and reduces manual toil through automation and thoughtful system design. The Senior IT Systems Engineer partners closely with Security, People Operations, Finance, and Engineering to ensure IT systems are secure, auditable, and built to scale with the business. This role is based out of our NYC office. Below we've reflected the base salary range we would offer for this position. Actual salaries may vary depending on factors including but not limited to location, experience, and performance. The range listed is just one component of Betterment’s total compensation package for employees. New York City: $121,000 - $143,000 We offer a competitive equity package, health, dental and vision benefits, life and AD&D, short-term and long-term disability insurance, EAP, commuter and parking benefits FSA/HSA, and 401(k) with employer match as well as a flexible PTO policy. This job may also be eligible for variable compensation in the form of a company incentive bonus. For jobs based out of our NYC HQ, we require in office attendance Monday through Thursday, weekly.

Requirements

Bachelor’s degree or equivalent practical experience in Information Systems, Technology, or a related field.
6+ years of experience in IT systems engineering, SaaS administration, or enterprise technology operations.
Deep expertise in macOS administration and endpoint management at scale.
Strong experience with Okta and modern identity standards including SAML, OIDC, SCIM, and RBAC.
Proficiency in scripting and automation using tools such as Python, Bash, or similar.
Demonstrated ability to design, document, and operate scalable IT Systems in a cloud-first environment.
Strong debugging, problem-solving, and systems-thinking skills.
Customer-service mindset with a reliable, detail-oriented, and collaborative approach.

Nice To Haves

Experience with infrastructure-as-code tools such as Terraform.
Familiarity with IT security controls in regulated environments (SOC 2, ISO 27001, SOX).
Experience supporting high-growth organizations through scale or operational maturity transitions.
Strong documentation and process-design discipline.

Responsibilities

IT Systems & Infrastructure Engineering
Design, implement, and maintain identity and access management architecture across the enterprise.
Own end-to-end employee lifecycle automation, integrating HRIS, identity, and downstream SaaS systems.
Administer and optimize core SaaS platforms including Google Workspace, Okta, Slack, Zoom, Lumos, Jamf and other business-critical tools.
Experience administering business system/enterprise apps such as HRIS (ADP, etc.), Finance (Netsuite, Salesforce, ZipHq), Access review/ Spend control (Lumos)
Establish and maintain standards for system configuration, access models, and operational ownership.
Automation & Platform Enablement
Automate repetitive IT workflows using scripting and infrastructure-as-code approaches.
Build scalable, self-service processes that reduce support burden and improve employee experience.
Standardize and codify IT infrastructure and workflows wherever possible to ensure consistency and reliability.
Experience withlow-code automation platforms: Boomi, Workato, Okta Workflows, Zapier
Device & Endpoint Management
Manage and scale macOS endpoint fleets, including configuration, patching, security controls, and policy enforcement.
Own MDM tooling, OS upgrade strategies, and endpoint security posture in partnership with Security.
Support Windows endpoints where required, particularly for Finance and other specialized functions.
Security & Compliance Partnership
Implement and enforce IT security best practices across systems and endpoints.
Partner with Security Engineering and Risk to strengthen MFA, SSO, RBAC, and device trust controls.
Proactively identify, troubleshoot, and remediate IT-related security gaps and operational risks.
Support audit and compliance efforts by ensuring systems are well-documented, controlled, and auditable.
Security-first/minded approach.
Employee Experience & Support
Act as a senior escalation point for IT Support, ensuring predictable availability and high-quality service.
Document IT standards, policies, and troubleshooting guides to promote clarity and consistency.
Improve onboarding, offboarding, and day-to-day employee experiences through reliable systems and automation.