Senior IT Systems Engineer

Location: New York City Office COMPANY DESCRIPTION Today, when you go to your doctor and get referred to a specialist, your doctor sends out a referral and tells you, “They’ll be in touch soon.” So you wait. And wait. Sometimes days, weeks, or even months. Why? Because too often providers are overwhelmed with the painstakingly tedious work required to get paid by insurance companies. Powered by proprietary models, Tennr handles the complex paperwork that gets patients through the door and providers paid, helping operators get patients the right care, at the right time, in the right setting. ROLE DESCRIPTION As a Senior IT Systems Engineer, you'll help improve and automate the internal processes that keep Tennr running. Partnering with our Head of Security and teams across the company, you'll own technical improvements to how human and non-human identities are provisioned, granted access, reviewed, and retired. You'll drive improvements from discovery through rollout and ongoing operation, making access secure, auditable, and easy to manage as Tennr grows. RESPONSIBILITIES - Drive the IT and identity improvement roadmap, assessing current workflows and prioritizing automation that strengthens access governance, reduces manual work, and improves the employee experience. - Design and maintain scripts and API integrations across identity, devices, and SaaS applications, with testing, monitoring, exception handling, and recovery built in. - Automate joiner, mover, and leaver workflows for employees and contractors, connecting People Operations systems, identity providers, and SaaS applications to ensure timely provisioning, access changes, and revocation. - Design and maintain role-based access models, entitlement catalogs, and self-service access requests with clear application owners, approvals, expiration, and least-privilege controls. - Build and operate access review and certification workflows with Security and application owners, identifying excessive permissions, orphaned accounts, and conflicting access, and tracking remediation through completion. - Improve governance of non-human identities, including service accounts, integrations, and AI agents, with clear ownership, scoped permissions, credential lifecycle controls, and auditable access. - Improve device lifecycle management through automated enrollment, software deployment, patching, and configuration checks. - Turn recurring support issues into lasting process improvements and self-service workflows while keeping employee and office technology reliable. - Set technical standards for IT automation, documentation, and change management, and lead adoption across People Operations, Finance, Security, and other teams. - Partner with Security on identity controls, privileged access, automated audit evidence, and incident response involving compromised accounts, endpoints, and SaaS applications. - Drive projects independently from conception to completion and measure results through provisioning and revocation times, access review completion, removal of stale access, and reductions in manual work. CANDIDATE QUESTIONS - 6+ years in IT systems engineering, systems administration, identity engineering, or a similar role, with a track record of improving identity processes and delivering reliable automation. - Hands-on experience implementing or improving IGA capabilities, including identity lifecycle management, access requests and approvals, entitlement management, access certifications, and remediation workflows. - Strong experience administering identity providers and integrating SaaS applications through SSO, MFA, SAML/OIDC, and SCIM, including troubleshooting provisioning and deprovisioning failures. - Familiarity with AI systems and agents used in internal workflows and the governance of non-human identities, including service accounts, credentials, delegated access, permission boundaries, and accountable ownership. - Strong experience managing macOS devices and mobile device management platforms, including deployment, patching, encryption, and endpoint troubleshooting. - Strong scripting skills in Python, Bash, or PowerShell, with experience designing and operating API integrations and automation, including authentication, testing, monitoring, exception handling, and recovery. - Solid networking fundamentals, including DNS, DHCP, Wi-Fi, VPNs, and troubleshooting office connectivity. - A track record of independently leading improvements across multiple IT systems, with measurable reductions in manual effort, errors, or turnaround time. - Practical understanding of role-based access, least privilege, privileged access, segregation of duties, and audit trails, with the ability to translate security requirements into usable workflows. - Ability to evaluate technical tradeoffs, set direction, and lead projects from discovery through adoption with minimal guidance, communicating clearly across technical and business teams. - Experience supporting a healthcare or regulated environment, or contributing evidence to SOC 2 or HIPAA programs, is a plus. WHY TENNR? - Drive Impact: one of our company values is Cowboy, meaning you set the pace. You won’t just talk about things, you’ll get them done. And feel the impact. - Develop Operational Expertise: learn the inner workings of scaling systems, tools, and infrastructure - Innovate with Purpose: we’re not just doing this for fun (although we do have a lot of fun). At Tennr, you’ll join a high-caliber team maniacally focused on reducing patient delays across the U.S. healthcare system. - Build Relationships: collaborate and connect with like-minded, driven individuals in our Hudson Square office 4 days/week - Free lunch! Plus a pantry full of snacks. BENEFITS - Beautiful new office at 345 Hudson Street - Unlimited PTO - 100% paid employee health benefit options - Employer funded 401(k) match - Competitive parental leave