Want to know if this job is worth applying to?
San Francisco | United States (Remote)
Remote only
Ema builds AI Employees for HR, IT and Finance. Our AI Employees take on the busy work across the employee experience, from recruiting, onboarding and benefits to IT support, invoice processing and payroll, so people can spend their time on work that needs them. Founded by former executives from Google, Coinbase, Flipkart, and Okta, our team includes engineers from premier tech companies and graduates of Stanford, MIT, UC Berkeley, CMU, and IITs.
We are backed by industry leading investors including Accel, Naspers/Prosus, Creaegis, Section32, and angels like Sheryl Sandberg and Dustin Moskovitz. Headquartered in Silicon Valley and with offices in London, Bangalore and Vancouver, Ema is at the frontier of what Agentic AI can do in production. We ship real systems that run real business processes at scale.
About the role
Ema is building the Universal AI Employee, and we expect our own operations to run the same way. We're hiring our first dedicated IT Engineer to own corporate IT end to end: identity, devices, SaaS and compliance across 200+ devices in the US, UK, Canada and India.
This isn't a help desk role. You'll run IT while systematically automating it, using agentic tooling to remove manual work rather than absorb it. Success is measured by how little of the job is still manual after a year, and how good every employee's IT experience is.
Treat every recurring task as an automation candidate, building workflows with Python, Bash, APIs, Okta Workflows and AI coding tools
Own the joiner, mover and leaver lifecycle with People Ops via Rippling → Okta → SCIM, moving it from tickets to policy-driven automation, including access reviews
Administer Okta, Google Workspace, Slack and Atlassian; configure SSO (SAML/OIDC), SCIM and MFA across all apps
Manage the Mac fleet in Kandji: enrollment, automated OS patching, encryption baselines and continuous drift detection
Maintain SaaS inventory and usage programmatically, and reclaim unused licenses automatically
Generate evidence for SOC 2, ISO 27001 and AI governance frameworks continuously, as a byproduct of automated operations
Maintain runbooks, a knowledge base and an integration registry; provide Tier 1/2 support within defined SLAs
Be the go-to for Finance and HR on tool access, licensing, renewals and billing
90 days: Onboarding and offboarding are automated end to end; SaaS inventory is live and license reclamation is running
6 months: Most recurring IT work is automated, audit evidence is always ready, and InfoSec is off IT tickets
A strong instinct to eliminate repetitive work, with hands-on use of AI coding tools
2–4 years in IT systems, endpoint or identity engineering
Hands-on Okta (or similar IdP) and Google Workspace administration
Working knowledge of SSO, SAML, OIDC and SCIM
Mac endpoint management experience (Kandji or similar)
Python or Bash scripting, with at least one shipped automation you can walk us through
Strong troubleshooting across identity, SaaS and networking
Precise documentation, clear written communication and sound judgment on security and compliance risk
Okta Workflows or an iPaaS (Workato, Tines, Zapier)
SOC 2 / ISO 27001 experience
AWS/GCP admin or Terraform
Okta or Kandji certifications
First owner of corporate IT at an agentic AI company. You build it, not inherit it.
Automate an entire corporate function with the same kind of agentic tooling we build for customers.
Work closely with InfoSec, with a clear path into security engineering.
Compensation offered will be determined by factors such as location, level, job-related knowledge, skills, and experience. Certain roles may be eligible for variable compensation, equity, and benefits.
Ema Unlimited is an equal opportunity employer and is committed to providing equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, or genetics.
