IT Systems Engineer

VGS is the world's leader in payment tokenization. Large banks, aspiring fintechs, and growing merchants embed our universal token vault into their technology stack to manage the complexities of payment data tokenization across processors and networks, open banking, card issuance, omnichannel loyalty, PCI compliance, payment orchestration, and more.  We empower our clients and partners by tokenizing sensitive payment data, limiting compliance scope, and consolidating payments to unlock revenue and business opportunities. 

VGS provides processor-agnostic tokenization solutions via secure universal token vaults, iframes, mobile SDKs, tokenization proxies, APIs, and data orchestration tooling to support payment acceptance, card issuance, PII and bank account tokenization, and other payments value-added services. Some of the use cases we enable include multi-processor Network Tokenization, Account Updater, payment orchestration, secure settlement file processing, 3DS, and Risk provider connectivity.

As an IT Systems Engineer, you will be responsible for designing, implementing, and maintaining VGS’ IT infrastructure and enterprise applications while managing and optimizing our collaboration tools and platforms. Examples of some of VGS’ tooling include Google Workspace, Slack, Jira, the Meraki networking platform, and other similar solutions. This role encompasses full stack IT subject matter expertise, from system administration and support to enterprise application integration and automation of IT services. It requires a strategic approach that provides an excellent opportunity to contribute to VGS’ long-term success while growing your career and experience. The IT Systems Engineer is critical in ensuring the IT team's service delivery, stability, security, and efficiency while aligning IT initiatives with business objectives.

What you will be doing at VGS...

• Employee Experience & Collaboration Tools Management:
• Take ownership of the technical administration and optimization of collaboration tools, including Google Workspace, Slack, Okta, GitHub, Atlassian Suite, etc., ensuring these tools align with defined standards and enhance overall employee collaboration.
• Manage and architect technology deployments within the office, such as networking services (both wireless and physical/plant network infrastructure), along with the associated configurations.
• Identify gaps and shortcomings in our collaboration tools and platforms that impact user experience and develop solutions to address these issues.
• Work closely with the IT Operations Manager to define success metrics and benchmarks for collaboration tools and employee experience.
• Envision and implement innovative ideas to enhance the overall user experience for our workforce through technology solutions.
• Shape a workplace environment that fosters productivity, collaboration, and job satisfaction by leveraging advanced technical solutions and best practices.
• Build solutions that meet the strict security and governance requirements of VGS and the communities we serve. Work closely with the information security and governance function of VGS to understand the required features of technical solutions and provide evidence that those solutions are functioning correctly.




• Identity & Access Management and Security:
• Design, implement, and manage Identity and Access Management (IAM) solutions using Okta, focusing on SSO, SAML, OAuth, and SCIM protocols in accordance with VGS’ comprehensive security and control requirements.
• Develop, test, and maintain Okta Workflows to automate and streamline identity lifecycle processes.
• Administer Okta Environment, including curating Zones Policies, building SAML and OIDC integrations for third-party SaaS and internal apps via the OIN or from scratch, and creating authorization servers with custom scopes and claims.
• Collaborate with cross-functional stakeholders such as Security, GRC, Engineering, and the People Team to increase automation and improve the posture of internal systems.
• Develop and implement procedures, and controls to ensure the integrity and compliance of IAM solutions.
• Work with Legal and the Security and Governance to ensure collaboration tools adhere to data compliance standards and fulfill eDiscovery requests using vendor tools or custom code/APIs.
• Serve as an escalation point for fellow IT team members on issues requiring deeper technical expertise in various knowledge domains (e.g., Okta, Okta Workflows, endpoint issues, automation, scripting, etc.).




• System Administration, Integration, and Automation:
• Oversee the administration and support of enterprise tools and SaaS applications, ensuring high availability and performance.
• Develop and manage integrations between enterprise applications to ensure seamless data flow and interoperability.
• Identify and automate routine tasks, including onboarding and offboarding processes, to enhance operational efficiency.
• Build policies and scripts using vendor APIs to support company-owned devices and SaaS services.
• Leverage Python, Bash, etc., to automate routine tasks and integrate with APIs.
• Create and maintain detailed technical and procedural documentation, sharing knowledge and best practices within the team and the broader organization.
• Collaborate with the IT Operations Manager to define success metrics and benchmarks for system administration, integration, and automation projects.
• Develop and maintain documentation for supported applications, processes, and training material for internal employees and IT staff.
• Provide operational support, including account management, workflow, log analysis, troubleshooting, and service optimization, ensuring operational excellence.

What we are looking for from you (Requirements)

• Education and Professional Experience:
• Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent experience.
• Minimum of 3 years of experience in Enterprise Identity and Access Management. Hands-on experience with Okta is preferred.
• Prior experience as a System Administrator, Network Administrator, or IT Systems Engineer at scale
• Experience with cloud IaaS such as AWS, Google Cloud, or Azure and/or equivalent experience scaling local or hybrid clouds using technologies such as VMWare VCenter/VMotion, KVM with KVM Live Migration, and similar
• Experience with enterprise application integration and automation tools.
• Hands-on experience supporting users in a heterogeneous environment, including but not limited to Windows, Mac and Linux workloads.
• Experience in scaling the administration and management of large fleets, using technologies such as configuration management and MDM platforms.
• Familiarity with SaaS applications and their identity and access management requirements.




• Communication, Leadership, and Customer Focus:
• Able to leverage best practices from the broader industry, building solutions that delight our internal users and do not surprise fellow system administrators or DevOps professionals.
• Strong communication and interpersonal skills can explain complex IT concepts to non-technical stakeholders.
• Ability to manage multiple tasks and projects simultaneously in a fast-paced environment.
• The ability to break down complex problems into easily digestible tasks.
• A demonstrated ability to identify operational bottlenecks and devise and implement effective solutions.
• Strong customer service orientation, with a focus on delivering high-quality IT services to internal stakeholders.




• Preferred Qualifications:
• Certifications in JAMF, Okta, and other relevant fields.
• Previous experience with security and compliance concepts and frameworks.
• Proven track record in IT project management and managing and delivering large-scale IT projects on time and within budget.
• Familiarity with common industry standard IT compliance requirements and experience responding to internal and external auditors.
• Relevant technical certifications from a reputable body, such as ITIL, AWS/GCP/Azure certifications from approved sources, CompTIA, CCNA, etc.

What you get from us...

• Flexible work hours and flexible PTO

• Competitive health benefits

• VGS stock options

• 401k plan, with employer matching 4% and immediate vesting (available only for US employees)

• Life & disability insurance

• Pre-tax flexible spending accounts, dependent and healthcare FSA (available only for US employees)

• Global parental leave program

• Employee Assistance Program

• Home Internet reimbursement

• New hire home office set up allowance

• Professional learning reimbursement

At VGS, we have a remote-first philosophy because we believe flexibility leads to great work and a healthy work-life balance. That said, if you live within 30 miles of one of our office locations, you’ll be on a hybrid schedule with some in-person time—because we know there’s real value in coming together.

We’re not about being in the office every day—but we are about connection, collaboration, and the energy that comes from a great brainstorm, a team lunch, or celebrating a big win in person.

We consider applicants without regard to race, color, national origin, sex, age, religion, sexual orientation, gender identity, veteran status, marital status, physical or mental disability, or other protected classes under all local, state, and federal laws and ordinances (AA/EOE/W/M/Vet/Disabled).

Qualified applicants with arrest and conviction records will be considered for the position in accordance with the San Francisco Fair Chance Ordinance.

VGS will not be able to provide any kind of employment sponsorship at this time.