Founding IT & Security Operations Engineer (Remote)

About Basis Theory

Basis Theory offers a fully programmable vault to create engaging commerce flows, connect with any partner, effortlessly manage compliance, and keep control of payments data. Standing at the intersection of technology and commerce, Basis Theory’s PCI Level 1, SOC2 type 2, and ISO 27001-compliant vault revolutionizes the way fintechs and merchants build their payment infrastructure by providing unparalleled flexibility and customization, enabling businesses to tailor their payment stacks to their unique needs. From emerging fintech startups to established merchants, Basis Theory provides the tools and support necessary for each to craft a payment stack that perfectly aligns with their business model

.Basis Theory is building from first-hand experience at Twilio, Klarna, and Dwolla and has raised over $50 million from top-tier investors, including Bessemer Venture Partners, Costanoa Ventures, Stage 2 Capital, and Kindred Ventures. We are a globally distributed team that operates as a remote-first organization from the monthly stipend for remote working environments to our annual company get together at a new tropical location each year ?

The Job

As part of the Basis Theory Security & IT Team, you will own the systems, devices, and identities that every employee depends on, keeping the company productive while strengthening our security posture. This is the founding hire as we bring IT support together under one team, so you'll have an outsized hand in how we build it: a single front door for requests, a well-run macOS fleet, smooth onboarding and offboarding, and the automation that lets a small team support a fast-growing company.

You will be comfortable wearing more than one hat in a given week. The same identities, devices, and access you manage for productivity are core security controls, so you'll partner closely with the Security team on endpoint hardening, access reviews, and employee self-service, and you should be excited to grow in that direction.

We are a small team supporting a rapidly growing organization. We move fast and ship a lot, so you need to be able to "skate to where the puck is going." We place high value on automation to reduce toil and lower the chance of mistakes. One of our Core Values is "Do Less, More Often." Our ideal candidate wakes up excited about building great processes that keep us safe and let us move quickly.

Basis Theory is a fully remote company spanning North America, South America, and Europe, so it's important that you can work independently, communicate clearly in writing, and use modern collaboration tools effectively.

Responsibilities

• Identity & Access Management: administer single sign-on and provisioning across Google Workspace and Okta; fulfill access requests with least-privilege and clear approvals; manage MFA, password resets, and account unlocks; keep identities clean (deduplication, deactivation) and run periodic access reviews
• Device & Endpoint Management: manage our 100% macOS fleet end-to-end in our MDM: enrollment, configuration baselines, supported suite of applications; handle procurement, break/fix, lock/wipe, and device return.
• Employee Lifecycle: deliver onboarding and offboarding so new joiners are productive on day one and departures are fully and promptly deprovisioned; build and maintain the runbooks and automation behind both.
• IT Service Desk & Operations: run a single, tracked intake with clear categories and service levels; administer the core apps everyone uses; and build self-service and a knowledge base to deflect repeat questions.
• Security Operations: partner with the Security team to harden endpoints and identities, support vulnerability and patch management, produce audit evidence for SOC 2, ISO 27001, and PCI, and provide first response to endpoint and identity alerts.

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

• Automation: Eliminate toil: provisioning, deprovisioning, and access fulfillment; integr
• ate ourHR, identity, and device systems so the function scales without growing the team.

Qualifications

• 5+ years in IT engineering, systems administration, or Security operations, including senior-level ownership.
• Deep experience managing a macOS fleet through an MDM (Iru, Jamf, or similar) in a remote-first organization.
• Strong identity and access background: Google Workspace administration, Okta or a comparable IdP, SSO/SAML/SCIM, and centralized password management, e.g. 1Password
• Fluency in at least one scripting language (e.g., Python, Bash) to automate provisioning and eliminate toil.
• A genuine service mindset and excellent written communication; able to operate independently across time zones.
• Interest and experience using AI tools to drive efficiency, creativity, and impact.