Senior IT Systems Engineer

Tennr
New York City Office, US
On-site

Who this role is best for

Candidates with identity governance expertise and automation experience will find this role emphasizes cross-functional collaboration and healthcare domain relevance.

Best fit for

  • Candidates with 6+ years of identity engineering and automation experience in healthcare or regulated environments
    — “6+ years in IT systems engineering, systems administration, identity engineering, or a similar role”
  • Individuals skilled in designing secure, auditable access workflows and role-based entitlement models
    — “Design and maintain role-based access models, entitlement catalogs, and self-service access requests”
  • Candidates with a background in managing non-human identities and AI agents in enterprise settings
    — “Familiarity with AI systems and agents used in internal workflows and the governance of non-human identities”

Things to consider

  • Requires consistent in-office presence, as collaboration happens 4 days per week in the Hudson Square office
    — “collaborate and connect with like-minded, driven individuals in our Hudson Square office 4 days/week”
  • Candidates should be prepared to independently lead complex projects with measurable outcomes
    — “Drive projects independently from conception to completion and measure results through provisioning and revocation times”

How to stand out

  • Highlight experience with identity lifecycle automation and SaaS integration in your resume and interviews
    — “Automate joiner, mover, and leaver workflows for employees and contractors”
  • Emphasize your ability to translate security requirements into actionable IT workflows
    — “Practical understanding of role-based access, least privilege, privileged access, segregation of duties, and audit trails”
  • Showcase your track record of reducing manual work and improving reliability through automation
    — “A track record of independently leading improvements across multiple IT systems, with measurable reductions in manual effort”
  • Demonstrate strong scripting and API integration skills in Python, Bash, or PowerShell
    — “Strong scripting skills in Python, Bash, or PowerShell, with experience designing and operating API integrations”
  • Include examples of prior work with macOS and mobile device management platforms
    — “Strong experience managing macOS devices and mobile device management platforms”
Pace · SteadyCollaboration · HighAutonomy · MediumDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • Improving and automating internal processes
  • Securing and managing access for employees and non-human identities
Typical background
6+ years in IT systems engineering, systems administration, identity engineering

Skills & requirements

Required

IT Systems EngineeringIdentity Governance And Administration (iga)AutomationScriptingAPI IntegrationsAccess ManagementDevice Lifecycle Management

Preferred

Security

Stack & domain

IT Systems EngineeringSystems AdministrationIdentity EngineeringIdentity Lifecycle ManagementAccess Requests And ApprovalsEntitlement ManagementAccess CertificationNon-human IdentitiesDevice Lifecycle ManagementIT AutomationDocumentationChange ManagementIdentity ControlsPrivileged AccessAutomated Audit EvidenceIncident ResponseCollaborationProblem-solvingTeamworkLeadershipCommunicationITSecurityIdentity Management

About the role

Original posting from Tennr via Ashby

COMPANY DESCRIPTION

Today, when you go to your doctor and get referred to a specialist, your doctor sends out a referral and tells you, “They’ll be in touch soon.” So you wait. And wait. Sometimes days, weeks, or even months. Why? Because too often providers are overwhelmed with the painstakingly tedious work required to get paid by insurance companies. Powered by proprietary models, Tennr handles the complex paperwork that gets patients through the door and providers paid, helping operators get patients the right care, at the right time, in the right setting.

ROLE DESCRIPTION

As a Senior IT Systems Engineer, you'll help improve and automate the internal processes that keep Tennr running. Partnering with our Head of Security and teams across the company, you'll own technical improvements to how human and non-human identities are provisioned, granted access, reviewed, and retired. You'll drive improvements from discovery through rollout and ongoing operation, making access secure, auditable, and easy to manage as Tennr grows.

RESPONSIBILITIES

  • Drive the IT and identity improvement roadmap, assessing current workflows and prioritizing automation that strengthens access governance, reduces manual work, and improves the employee experience.
  • Design and maintain scripts and API integrations across identity, devices, and SaaS applications, with testing, monitoring, exception handling, and recovery built in.
  • Automate joiner, mover, and leaver workflows for employees and contractors, connecting People Operations systems, identity providers, and SaaS applications to ensure timely provisioning, access changes, and revocation.
  • Design and maintain role-based access models, entitlement catalogs, and self-service access requests with clear application owners, approvals, expiration, and least-privilege controls.
  • Build and operate access review and certification workflows with Security and application owners, identifying excessive permissions, orphaned accounts, and conflicting access, and tracking remediation through completion.
  • Improve governance of non-human identities, including service accounts, integrations, and AI agents, with clear ownership, scoped permissions, credential lifecycle controls, and auditable access.
  • Improve device lifecycle management through automated enrollment, software deployment, patching, and configuration checks.
  • Turn recurring support issues into lasting process improvements and self-service workflows while keeping employee and office technology reliable.
  • Set technical standards for IT automation, documentation, and change management, and lead adoption across People Operations, Finance, Security, and other teams.
  • Partner with Security on identity controls, privileged access, automated audit evidence, and incident response involving compromised accounts, endpoints, and SaaS applications.
  • Drive projects independently from conception to completion and measure results through provisioning and revocation times, access review completion, removal of stale access, and reductions in manual work.

CANDIDATE QUESTIONS

  • 6+ years in IT systems engineering, systems administration, identity engineering, or a similar role, with a track record of improving identity processes and delivering reliable automation.
  • Hands-on experience implementing or improving IGA capabilities, including identity lifecycle management, access requests and approvals, entitlement management, access certifications, and remediation workflows.
  • Strong experience administering identity providers and integrating SaaS applications through SSO, MFA, SAML/OIDC, and SCIM, including troubleshooting provisioning and deprovisioning failures.
  • Familiarity with AI systems and agents used in internal workflows and the governance of non-human identities, including service accounts, credentials, delegated access, permission boundaries, and accountable ownership.
  • Strong experience managing macOS devices and mobile device management platforms, including deployment, patching, encryption, and endpoint troubleshooting.
  • Strong scripting skills in Python, Bash, or PowerShell, with experience designing and operating API integrations and automation, including authentication, testing, monitoring, exception handling, and recovery.
  • Solid networking fundamentals, including DNS, DHCP, Wi-Fi, VPNs, and troubleshooting office connectivity.
  • A track record of independently leading improvements across multiple IT systems, with measurable reductions in manual effort, errors, or turnaround time.
  • Practical understanding of role-based access, least privilege, privileged access, segregation of duties, and audit trails, with the ability to translate security requirements into usable workflows.
  • Ability to evaluate technical tradeoffs, set direction, and lead projects from discovery through adoption with minimal guidance, communicating clearly across technical and business teams.
  • Experience supporting a healthcare or regulated environment, or contributing evidence to SOC 2 or HIPAA programs, is a plus.

WHY TENNR?

  • Drive Impact: one of our company values is Cowboy, meaning you set the pace. You won’t just talk about things, you’ll get them done. And feel the impact.
  • Develop Operational Expertise: learn the inner workings of scaling systems, tools, and infrastructure
  • Innovate with Purpose: we’re not just doing this for fun (although we do have a lot of fun). At Tennr, you’ll join a high-caliber team maniacally focused on reducing patient delays across the U.S. healthcare system.
  • Build Relationships: collaborate and connect with like-minded, driven individuals in our Hudson Square office 4 days/week
  • Free lunch! Plus a pantry full of snacks.

BENEFITS

  • Beautiful new office at 345 Hudson Street
  • Unlimited PTO
  • 100% paid employee health benefit options
  • Employer funded 401(k) match
  • Competitive parental leave

Source: Tennr careers (Ashby)

Similar roles

More roles at Tennr