Job description

OUR MISSION Reflection is a research lab making intelligence open and accessible for everyone to use, customize, and build on. We build open models that let anyone control their intelligence and help shape the future of AI. Our mission: make intelligence open and accessible to all. ROLE OVERVIEW We’re looking for an IT Engineer who cares about helping people as much as solving technical problems. You’ll be based in our San Francisco office five days a week, supporting employees across Reflection and taking day-to-day responsibility for the office’s technology. We're growing fast and much of our environment was set up by engineers for engineers. You'll inherit rough edges and fix them. Direct support is a central part of this role. So is improving the systems behind it. You’ll get to know the people you support, how they work, and where technology gets in their way. When problems recur, you’ll address the underlying cause through better configuration, workflows, or automation. You’ll work with your team on priorities and architecture, Security on controls, and Workplace on office infrastructure. WHAT YOU'LL DO - Resolve employee IT issues. Help people remotely and in person with devices, applications, access, and workplace technology. Build relationships with the people you help. When something breaks, look past the immediate fix to the root cause. - Manage the endpoint lifecycle. Our fleet is primarily Mac, with some Windows, and you’ll manage both. Provision, configure, secure, patch, and retire devices. Keep improving MDM policies, software deployment, and compliance. - Operate identity and core SaaS systems. Administer Okta, Google Workspace, Slack, and the rest of our SaaS stack. Maintain SSO, provisioning, and access policies. Keep onboarding and offboarding reliable. - Automate repetitive work. Build workflows in Serval and write scripts against APIs to take manual steps out of provisioning, access changes, and device management. - Partner with Security. Implement and maintain controls for device posture, phishing-resistant authentication, least privilege, and endpoint protection. - Keep workplace technology dependable. Own the reliability of conference rooms, AV, and the office network in San Francisco. Work with Workplace and outside vendors on buildouts and meeting-space improvements. - Make IT run without heroics. Keep documentation useful and asset records accurate. Build consistent processes for hardware, software, procurement, and vendors as we grow. WHAT WE'RE LOOKING FOR - 5+ years of experience in IT engineering, systems administration, or a similarly broad corporate IT role. - Strong experience supporting people directly, from engineers to executives to non-technical colleagues. You communicate clearly and keep people informed until the issue is resolved. - Hands-on experience managing macOS devices through MDM, including configuration, software deployment, patching, and troubleshooting. - Experience administering identity and SaaS platforms - You have administered Okta or a comparable IdP: app integrations, SSO, SCIM provisioning, group rules, and MFA or conditional-access policies - Experience using scripts, APIs, or workflow automation to remove manual work. - Strong troubleshooting skills across endpoints, identity, applications, office networking, and conference rooms. - Sound judgment about when to act independently, escalate an issue, or involve others in a decision. You document changes so the rest of the team can support them. Additional Experience We Value - Scaling IT through rapid growth at a startup or highly technical organization. - Delivering office buildouts with network, AV, and infrastructure vendors. - Managing Windows devices through MDM. - Deploying endpoint security, device trust, or phishing-resistant authentication such as hardware security keys. - Supporting IT controls for SOC 2, ISO 27001, or NIST-aligned security programs. - Administering Google Cloud Platform or Amazon Web Services at the organization level, including IAM, policies, and account structure. WHAT WE OFFER: We believe that to make intelligence open and accessible to all, you need to start at the foundation. Joining Reflection means building from the ground up as part of a talent-dense team. You will help define our future as a company, and help define the future of open foundational models. We want you to do the most impactful work of your career with the confidence that you and the people you care about most are supported. - Top-tier compensation: Salary and equity structured to recognize and retain our talent globally. - Stock options: Everyone who joins and contributes to Reflection's success gets to share in the upside through stock options. - Health & wellness: Comprehensive medical, dental, vision, and life, with an annual wellness allowance. - Meals: Lunch and dinner are provided in the office daily. - Life & family: 22 weeks paid parental leave for all new birthing and non-birthing parents, including adoptive and surrogate journeys. - Vacation days: Unlimited paid time off in the U.S. and 30 days in the U.K. - Sponsorship support: We sponsor visas to help exceptional talent join our team and support long-term immigration pathways where applicable. - Team building: We have regular off-sites, happy hours, and team celebrations. Export Control Notice: This position may require access to technology or source code subject to the U.S. Export Administration Regulations. Any offer of employment for this role may be conditioned on the Company's ability to provide the candidate with access to such technology or source code in compliance with applicable U.S. export control laws, which may require the Company to seek government authorization. Candidate and Employee Privacy Notice: We collect and process personal data about applicants for the purposes described in our Candidate and Employee Privacy Notice cdn.sanity.io

Requirements

Must-haves

You’ll work with your team on priorities and architecture, Security on controls, and Workplace on office infrastructure.
Operate identity and core SaaS systems. Administer Okta, Google Workspace, Slack, and the rest of our SaaS stack. Maintain SSO, provisioning, and access policies. Keep onboarding and offboarding reliable.
Automate repetitive work. Build workflows in Serval and write scripts against APIs to take manual steps out of provisioning, access changes, and device management.
Partner with Security. Implement and maintain controls for device posture, phishing-resistant authentication, least privilege, and endpoint protection.
Keep workplace technology dependable. Own the reliability of conference rooms, AV, and the office network in San Francisco. Work with Workplace and outside vendors on buildouts and meeting-space improvements.
Make IT run without heroics. Keep documentation useful and asset records accurate. Build consistent processes for hardware, software, procurement, and vendors as we grow.
5+ years of experience in IT engineering, systems administration, or a similarly broad corporate IT role.
Strong experience supporting people directly, from engineers to executives to non-technical colleagues. You communicate clearly and keep people informed until the issue is resolved.
Hands-on experience managing macOS devices through MDM, including configuration, software deployment, patching, and troubleshooting.
Experience administering identity and SaaS platforms
You have administered Okta or a comparable IdP: app integrations, SSO, SCIM provisioning, group rules, and MFA or conditional-access policies
Experience using scripts, APIs, or workflow automation to remove manual work.
Strong troubleshooting skills across endpoints, identity, applications, office networking, and conference rooms.
Sound judgment about when to act independently, escalate an issue, or involve others in a decision. You document changes so the rest of the team can support them.
Additional Experience We Value
Scaling IT through rapid growth at a startup or highly technical organization.
Delivering office buildouts with network, AV, and infrastructure vendors.
Managing Windows devices through MDM.
Deploying endpoint security, device trust, or phishing-resistant authentication such as hardware security keys.
Supporting IT controls for SOC 2, ISO 27001, or NIST-aligned security programs.
Administering Google Cloud Platform or Amazon Web Services at the organization level, including IAM, policies, and account structure.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

airest

Platform: ashby
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

Paid Time Off

Parental Leave

Wellness