IT Systems Engineer — Identity & Automation

About Stuut

Stuut is the AI coworker that runs order-to-cash for the world’s leading enterprises. Across order management, credit, collections, payments, cash application, disputes and deductions, Stuut does the work end to end and keeps going until the cash hits the bank.

Over 150 companies, spanning the mid-market to the Fortune 50, including Honeywell, ZoomInfo and PerkinElmer, use Stuut to unlock up to 40% more cash flow and cut DSO by 47%. More than $3 billion has moved through the platform to date.

Founded in New York by Tarek Alaruri and Ben Winter, Stuut has raised $93 million from Insight Partners, Andreessen Horowitz, M12, Microsoft’s Venture Fund, and others. Learn more at stuut.ai.

About the role

Stuut is growing quickly, and our employee technology needs to keep pace. We’re looking for a hands-on IT Systems Engineer who can make joining the company, getting access, changing roles, and leaving the company smooth, secure, and predictable.

Your priority will be the employee lifecycle: making sure people have a working laptop and the right access when they start, resolving issues quickly, and building integrations and automation that prevent the same problems from recurring. You’ll connect our people systems, identity services, business applications, and device management into reliable workflows—not just work through a queue of manual requests.

This is a hands-on individual contributor role combining systems administration, integration troubleshooting, automation, and thoughtful employee support. You’ll partner closely with People Operations, Security, Engineering, and team managers. You won’t be expected to own production infrastructure or be the expert in every application.

You’ll also own the day-to-day IT controls that support SOC 2 and our broader security and compliance program. That means building secure practices into everyday operations and keeping evidence current—not scrambling before an audit. You’ll partner with Security on requirements and priorities, rather than being expected to run the entire compliance program.

What You'll Do

• Own onboarding, role changes, and offboarding end to end. Coordinate equipment, accounts, group memberships, application access, and employee communication. Verify that new hires can actually work—not simply that an account was created.

• Build and maintain identity and application integrations. Configure and troubleshoot SCIM provisioning, single sign-on, attribute mappings, and role-based access across our HR, identity, and SaaS platforms.

• Make provisioning dependable. Identify failed syncs, account mismatches, timing dependencies, expired integration credentials, and licensing blockers. Build clear exception handling for last-minute hires and applications that don’t support automated provisioning.

• Automate repetitive IT work. Use native integrations, workflow tools, APIs, webhooks, and practical scripting to reduce manual steps. Make automation documented, observable, and maintainable by someone other than you.

• Deliver responsive, approachable support. Help employees with access, laptops, collaboration tools, and everyday office technology. Communicate clearly, follow issues through to resolution, and turn recurring requests into lasting fixes.

• Manage the device lifecycle. Coordinate purchasing, enrollment, configuration, security updates, inventory, replacements, and returns, with an emphasis on a low-friction experience in a Mac-centric environment.

• Keep access secure and accountable. Apply least-privilege access, support access reviews, and verify timely deprovisioning, session revocation, data ownership transfers, and equipment recovery in partnership with the appropriate owners.

• Operate IT security and compliance controls. Maintain device encryption, endpoint protection, patch compliance, MFA coverage, and appropriate administrative access. Track gaps and exceptions through remediation with Security, without creating unnecessary friction for employees.

• Support SOC 2 audit readiness year-round. Maintain accurate asset and access records, document onboarding and offboarding completion, carry out periodic access reviews, and provide evidence that controls are operating consistently. Investigate failed compliance checks and resolve the underlying issues—not just clear dashboard alerts.

• Support security response and employee awareness. Help triage suspected phishing, lost devices, and compromised accounts; follow established response procedures and escalate promptly. Partner with People Operations and Security on security training and policy acknowledgments.

• Build lightweight processes that scale. Maintain practical runbooks, self-service guidance, application ownership records, and support expectations. Work with People Operations on reliable handoffs and with vendors when integrations break.
  

What You Bring

• Typically 3–6 years of relevant experience in corporate IT, IT systems engineering, or SaaS administration, or equivalent hands-on experience. You’ve taken ownership of systems and improved how they operate.

• Strong, hands-on SCIM and identity lifecycle experience. You’ve implemented or repaired provisioning and deprovisioning integrations—not just administered users through a console. You understand the difference between signing in, creating an account, and granting access.

• Experience with SSO and modern identity standards, including SAML and OAuth/OIDC, and with group-based access, MFA, and troubleshooting authentication failures.

• Experience connecting HR systems, identity providers, collaboration suites, and business applications. Our environment includes Rippling and Google Workspace; comparable experience matters more than knowing every vendor we use.

• The ability to read API documentation, investigate logs, and write or adapt scripts to solve operational problems. You don’t need to be a software engineer, but you should be comfortable working beyond an admin UI.

• Practical experience with endpoint management and laptop deployment, especially macOS, alongside sound security and asset-management practices.

• Experience supporting SOC 2 or a comparable security compliance program, including operating IT controls, collecting audit evidence, completing access reviews, and resolving findings. You understand how to turn a policy requirement into a repeatable, verifiable process.

• A service-minded approach: you respond with urgency, explain things without jargon, handle sensitive information carefully, and close the loop without repeated follow-up.

• Comfort in a rapidly growing company, where priorities change and you need to balance getting someone unblocked today with preventing tomorrow’s issue.

Especially Useful

• Experience improving onboarding during rapid hiring or supporting employees across multiple offices.

• Experience with compliance automation platforms, automated evidence collection, and SaaS license management.

• Experience using AI-assisted tools and secure integrations to improve IT operations, with good judgment about permissions and employee data.

What Success Look Like

• New hires arrive with equipment ready and the access they need, with clear ownership of any exceptions.

• Departures and role changes trigger timely, verified access changes—not a collection of unchecked tasks.

• Provisioning failures are caught and resolved before employees have to chase them.

• Repeated manual work and avoidable support requests decline as automation and documentation improve.

• Employees know where to get help and trust IT to follow through.

• IT security controls operate consistently, audit evidence stays current, and compliance gaps have clear owners and are resolved on time.

US Compensation

• Top-of-market salary and equity package

• Benefits (for U.S.-based full-time employees)

• Medical, dental & vision insurance coverage for you

• 401(k) & Match

• Equity

• Flexible PTO

• Parental Leave

Stuut is an equal opportunity employer committed to building a team with diverse backgrounds, perspectives, and experiences. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status, genetic information, or any other characteristic protected by applicable law.

We are also committed to providing reasonable accommodations throughout the application and interview process. If you need any accommodations, please do not hesitate to reach out.