Security & IT Operations Engineer

The role

In August, Dagster and Prefect became one company. Behind the scenes, that left us with two of nearly everything: two SOC 2 programs, two ways of managing laptops, overlapping tools and accounts, and a long list of tools that each need one clear owner. We're hiring a Security & IT Operations Engineer to turn all of it into one setup that runs well and gets easier to run every quarter.

You'll own the day-to-day of our security compliance program and our corporate IT. You'll report to our Security & Systems Lead as the first hire on this new team.

Our customers are enterprise data, infrastructure, ML and AI teams, and our products run code inside their data infrastructure. AI has made attacks cheap and fast, so customers look hard at how we protect them, and a well-run security and compliance program is a big part of our answer. You won’t be pushing security uphill here. More engineers volunteered for our new Security Guild than its first sprint had room for. Building on both companies’ existing security work, the guild is implementing shared product security tools and consistent vulnerability management and incident response processes across Prefect and Dagster. That commitment is helping us stay ahead of AI-accelerated attacks.

You’ll enjoy this role if you like a mix of hands-on work and longer-term improvements, and want a meaningful say in how our IT and compliance programs run.

What you’ll own

• Run day-to-day compliance. Keep SOC 2 controls, evidence collection, access reviews, policy acknowledgments and training on track. Work directly with auditors and control owners, and follow findings through to resolution.

• Help consolidate our compliance programs. With our team lead and consultant, choose a GRC platform and set up both programs. Help adapt control descriptions across environments and design activities that minimize manual work.

• Own corporate IT. Run Google Workspace and our SaaS apps, handle onboarding and offboarding with People Operations, and manage our Mac fleet in Rippling. Help employees with laptop and access issues, and improve the setup as you learn where people get stuck.

• Improve access management. Work with our identity partner on how access is requested, approved, granted and removed. Own the daily processes and keep them documented.

• Protect corporate systems. Manage macOS and application updates, investigate endpoint alerts, and track vulnerabilities through remediation. Verify fixes and participate in phishing and other corporate incident response with our team lead.

• Automate repetitive work. Use scripts, APIs, workflow tools or AI to reduce manual IT and compliance tasks and make common requests self-service.

Recently completed projects include consolidating Mac device management into Rippling, running access reviews that support both SOC 2 programs, and working with teams to assign tool owners and retire duplicates.

Where the role can grow

We’re building the Security & Systems function for the combined company, and this role will help shape it. Starting with ownership of day-to-day IT and compliance, you can grow toward broader security operations and engineering—including vulnerability management, corporate incident response, and corporate security engineering—or toward risk management and AI governance. The direction will depend on your strengths, interests, and the company’s needs, with opportunities to take on more program ownership and planning as the function develops.

What you’ll bring

We’re looking for hands-on IT and compliance experience, practical technical judgment, and the ability to take ownership. Your experience may be deeper in one area, but you should be comfortable across both.

• You’ve owned recurring SOC 2 activities and worked directly with external auditors, or bring auditing experience. You understand how controls work, what evidence demonstrates they’re operating, and how to adapt them across systems and teams.

• You’ve administered and secured corporate IT systems, including account management, onboarding/ offboarding and Macs managed through an MDM. You’re comfortable with patching, endpoint alerts, remediation tracking, phishing or suspicious account activity, and helping employees troubleshoot problems.

• You’re comfortable automating recurring tasks with scripts, APIs, workflow tools or AI, and can explain something you’ve built. A small, useful improvement is a good example.

• You drive work across teams: establish owners and deadlines, work through blockers, and follow through until tasks are completed and documented. You know when to resolve something yourself and when to escalate.

Nice to have

• Experience with Google Workspace, Rippling, or a GRC platform such as Vanta, Drata or Thoropass.

• Familiarity with SSO, SCIM provisioning or other ways to automate account access.

• Experience helping implement or migrate an IT or compliance system, or improving a process that involved several teams.

Who this role is not for

• You’re looking to leave hands-on IT support behind. Helping someone with a laptop or access problem is part of the job, alongside larger projects and automation work.

• You need a settled, fully documented environment from day one. We’re still bringing two companies’ systems together, and you’ll help work out how the combined setup should run.

What You'll Get in Return:

Base Salary Ranges:

• San Francisco Bay Area and NYC metro: $165,000 - $219,000

• Washington, D.C., Boston, LA metro and Seattle: $150,000 - $194,000

• Denver, Chicago, Atlanta and all other US metros: $149,000 - $193,000

Actual base salary within each range depends on the candidate's location, experience, and qualifications. Equity and benefits are not included in the range above. Your recruiter can share more about the salary range for your preferred location during the hiring process.

Perks and Benefits:

• Remote-first team with flexible-first culture

• Equity Stock Options

• 401(k) with 5% company match (vests immediately!)

• Unlimited PTO

• Medical, Dental and Vision insurance

• Generous Parental Leave

• Life Insurance and Disability benefits

• $800/month remote work stipend