Sr. IT Systems Engineer
Betterment · New York, United States · 6mo ago
About Betterment
Betterment is a leading, technology-driven financial services company that offers investing, savings and retirement solutions for retail investors and investment advisors as well as financial wellness solutions, including a 401(k) for small and medium-sized businesses. Our team is passionate about our mission, to empower people to build wealth with confidence and ease. We’re headquartered in NYC and offer hybrid NY-based positions (four days/ week in-office, with no required office days during the summer and winter holidays).
About the Role
The Senior IT Systems Engineer is a hands-on, senior individual contributor responsible for designing, scaling, and operating Betterment’s core IT systems and infrastructure. This role sits at the intersection of identity, SaaS platforms, endpoint management, and automation, ensuring employees have secure, reliable, and seamless access to the tools they need to do their best work.
As a force multiplier within Corporate Technology, this role establishes standards, builds scalable systems, and reduces manual toil through automation and thoughtful system design. The Senior IT Systems Engineer partners closely with Security, People Operations, Finance, and Engineering to ensure IT systems are secure, auditable, and built to scale with the business.
This role is based out of our NYC office. Below we've reflected the base salary range for this position. Actual salaries may vary depending on factors including but not limited to location, experience, and performance. The range listed is just one component of Betterment’s total compensation package for employees.
- New York City: $121,000 - $140,000
This job may also be eligible for variable compensation in the form of a company incentive bonus.
A Day in the Life:
IT Systems & Infrastructure Engineering
- Design, implement, and maintain identity and access management architecture across the enterprise.
- Own end-to-end employee lifecycle automation, integrating HRIS, identity, and downstream SaaS systems.
- Administer and optimize core SaaS platforms including Google Workspace, Okta, Slack, Zoom, Lumos, Jamf and other business-critical tools.
- Experience administering business system/enterprise apps such as HRIS (ADP, etc.), Finance (Netsuite, Salesforce, ZipHq), Access review/ Spend control (Lumos)
- Establish and maintain standards for system configuration, access models, and operational ownership.
Automation & Platform Enablement
- Automate repetitive IT workflows using scripting and infrastructure-as-code approaches.
- Build scalable, self-service processes that reduce support burden and improve employee experience.
- Standardize and codify IT infrastructure and workflows wherever possible to ensure consistency and reliability.
- Experience with low-code automation platforms: Boomi, Workato, Okta Workflows, Zapier
Device & Endpoint Management
- Manage and scale macOS endpoint fleets, including configuration, patching, security controls, and policy enforcement.
- Own MDM tooling, OS upgrade strategies, and endpoint security posture in partnership with Security.
- Support Windows endpoints where required, particularly for Finance and other specialized functions.
Security & Compliance Partnership
- Implement and enforce IT security best practices across systems and endpoints.
- Partner with Security Engineering and Risk to strengthen MFA, SSO, RBAC, and device trust controls.
- Proactively identify, troubleshoot, and remediate IT-related security gaps and operational risks.
- Support audit and compliance efforts by ensuring systems are well-documented, controlled, and auditable.
- Security-first/minded approach.
Employee Experience & Support
- Act as a senior escalation point for IT Support, ensuring predictable availability and high-quality service.
- Document IT standards, policies, and troubleshooting guides to promote clarity and consistency.
- Improve onboarding, offboarding, and day-to-day employee experiences through reliable systems and automation.
What We’re Looking For
- Bachelor’s degree or equivalent practical experience in Information Systems, Technology, or a related field.
- 6+ years of experience in IT systems engineering, SaaS administration, or enterprise technology operations.
- Deep expertise in macOS administration and endpoint management at scale.
- Strong experience with Okta and modern identity standards including SAML, OIDC, SCIM, and RBAC.
- Proficiency in scripting and automation using tools such as Python, Bash, or similar.
- Demonstrated ability to design, document, and operate scalable IT Systems in a cloud-first environment.
- Strong debugging, problem-solving, and systems-thinking skills.
- Customer-service mindset with a reliable, detail-oriented, and collaborative approach.
Nice to Have
- Experience with infrastructure-as-code tools such as Terraform.
- Familiarity with IT security controls in regulated environments (SOC 2, ISO 27001, SOX).
- Experience supporting high-growth organizations through scale or operational maturity transitions.
- Strong documentation and process-design discipline.
Join a team built on these core values
We change lives
Be a part of a community of innovators working to transform financial outcomes for real people. Your work will make an impact, always laddering up to our mission; to empower people to build wealth with confidence and ease.
We set audacious goals
We set them for the company, our customers, and ourselves, and we won’t stop until we reach them. We don’t just show up; we give our all, then celebrate our wins.
We value all perspectives
When we collaborate, we're at our best. We believe diverse perspectives lead to better outcomes and strive to uphold our supportive and inclusive community.
We simplify financial services
We’re financial services pioneers, always finding new ways to improve, optimize, and enhance. Constant improvement is in our DNA.
Our Commitment to Your Total Well-being:
- We offer a competitive suite of benefits, including medical, dental, and vision coverage; life and AD&D insurance; short- and long-term disability; infertility support and WPATH-aligned transgender health benefits; an Employee Assistance Program (EAP); transit benefits and FSA and HSA options
- Ownership: Equity for all employees, including new hire and refresher grants.
- Time: Flexible paid time off, paid parental leave, and a fully paid four-week sabbatical in your sixth year.
- Growth: Company-paid professional coaching for all employees.
- Wealth: Day-one 401(k) match plus matching on qualified student loan payments.
What happens next
We’ll take a few weeks to review all applications. If we’d like to spend more time with you, we’ll reach out to arrange next steps, which will include 3-4 sets of meetings with your future colleagues.
In the interview process, we’ll look to learn more about your skills, experiences, capabilities, and motivators. Many of our questions will be aimed at understanding how you might operate here at Betterment. Depending on the role, we may ask you to complete a case study exercise or technical assessments, as we want to collect a robust set of data points to better inform our decisions.
On average, it takes us around 3-5 weeks to make a hiring decision, depending on your availability and sense of urgency. As a best practice, we aim to interview at least 2-3 final round candidates before making a hiring decision. Please note that, as we usually receive an overwhelming number of applications for open positions, we’re unable to offer individual feedback during the interview process.
We recognize that interviewing for a new role is a big deal. We appreciate you considering Betterment as the next step in your career, and our Recruiting Team is here to support and advocate for you through the interview process!
Betterment is dedicated to providing accommodations to candidates upon request. If you need accommodations at any point throughout the interview process, please reach out to your recruiter.
Please note that in any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.
Come join us!
We’re an equal opportunity employer and comply with all applicable federal, state, and local fair employment practices laws. We strictly prohibit and do not tolerate discrimination against employees, applicants, or any other covered persons because of race, color, religion, creed, national origin or ancestry, ethnicity, sex, gender (including gender nonconformity and status as a transgender or transsexual individual), sexual orientation, marital status, age, physical or mental disability, citizenship, past, current or prospective service in the uniformed services, predisposing genetic characteristic, domestic violence victim status, arrest records, or any other characteristic protected under applicable federal, state or local law.