Lead IT Systems Engineer

dbt Labs is seeking a strategic and hands-on Lead IT Systems Engineer to join our Enterprise Security and Technology (ES&T) team. In this high-impact L4 role, you'll be the technical lead on a small team of engineers and own the strategy and execution of our enterprise systems—ensuring our identity, collaboration, and access platforms are secure, scalable, and people-friendly.

What you'll do:

As the Lead IT Systems Engineer, you'll combine technical leadership with hands-on execution to scale and secure dbt Labs' enterprise infrastructure. You'll work across identity, access, collaboration, and cloud systems—building solutions that support a growing, remote-first workforce.

Organizational Context:

This role is highly-cross functional and sits within our Security organization, which includes Enterprise Security and Technology (ES&T) and Enterprise Business Systems teams. As a Lead IT Systems Engineer, you'll be positioned at the intersection of security infrastructure and business enablement, with visibility across the entire organization.

Growth Opportunities:

For the right candidate, this role offers multiple growth trajectories, including:

• Deeper technical specialization in identity and access management architecture
• Expansion into broader security engineering leadership
• Development into a technical management path overseeing systems and security teams
• Cross-functional growth into security architecture or cloud security positions

We're committed to supporting your professional development in alignment with both your career goals and organizational needs.

Responsibilities:

• Provide technical leadership and mentorship to a team of systems engineers—setting technical direction, reviewing work, and developing team members' technical skillsets.
• Architect and maintain identity systems using Okta Identity Engine and Okta Workflows. Implement and manage secure infrastructure access using Teleport, including JIT access, least privilege, and RBAC.
• Administer and automate enterprise SaaS platforms such as Google Workspace, Slack, Zoom, Notion, and Jamf.
• Manage endpoint provisioning and compliance for a MacOS-first environment.
• Build automated workflows for user and system lifecycle management using scripting and APIs (e.g., Python, Bash).
• Provision and manage cloud infrastructure resources (in AWS, GCP, and Azure) in support of internal tooling and engineering projects.
• Define and manage infrastructure as code using Terraform or similar tools (for example, Pulumi, AWS CloudFormation, Azure Bicep, or Google Cloud Deployment Manager) to provision, secure, and govern cloud resources and identity integrations, including Okta (for example, with the Okta Terraform provider and CI-driven change management).
• Collaborate with engineering and platform teams to ensure timely, secure access to cloud resources for development and infrastructure needs.
• Enhance and manage DLP tooling and access governance across collaboration and productivity platforms.
• Support and lead incident management processes for those related to access or enterprise tooling.
• Create and maintain system documentation, SOPs, and architecture diagrams.
• Evaluate and recommend new tools and services that improve automation, security, and team scale.

You're a good fit if you have:

• 6 years of experience in enterprise systems engineering, with demonstrated success in technical leadership, architectural decision-making, and team direction.
• Proven ability to establish technical vision and roadmaps for identity management systems, particularly with Okta Identity Engine and Okta Workflows.
• Experience designing and implementing secure access frameworks using Teleport, with emphasis on architecture planning, governance models, and security principles.
• Strategic expertise in multi-cloud infrastructure (AWS, GCP, Azure) with focus on architectural decisions, resource planning, and security integration.
• Hands-on experience with Infrastructure as Code tools such as Terraform, Pulumi, AWS CloudFormation, Azure Bicep, or Google Cloud Deployment Manager, including managing Okta via the Terraform and CI-driven change management.
• Track record of successful collaboration with engineering leadership to align infrastructure strategy with organizational objectives.
• Leadership experience in SaaS platform integration and strategy (Google Workspace, Slack, Zoom, Notion, Jamf).
• Ability to design endpoint management strategies for MacOS environments that balance security requirements with user experience.
• Technical leadership in automation development, including code review, architectural guidance, and API integration strategy.
• Experience developing and implementing DLP frameworks, governance policies, and enterprise security strategies.
• Leadership in incident response processes, including process development and team coordination.
• Exceptional stakeholder management and ability to translate technical concepts for cross-functional leadership audiences.

Ready to lead?

If you're a systems leader passionate about identity, access, cloud infrastructure, and secure collaboration—we'd love to meet you.