SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Arena is a platform for evaluating how AI models perform in real-world scenarios, founded by researchers from UC Berkeley's SkyLab. The company helps tens of millions of users evaluate frontier AI systems and provides transparent, rigorous evaluations to leading AI labs, enterprises, and independent researchers.
You will own the technical direction of Arena's IT and security function as a hands-on senior engineer. This is not a management role—you will do the work directly, not delegate from a distance. The foundations are already in place: identity is centralized with automated provisioning, the fleet is managed with endpoint protection deployed, and remote access runs through a zero-trust layer. Your mission is to deepen these systems, extend them to areas not yet covered, and document what currently exists only in people's heads.
Key responsibilities include:
- Design the identity and access model using Okta as the center of gravity: SSO, SCIM, group and role design, lifecycle automation for joiners/movers/leavers, and access reviews that satisfy auditors.
- Own endpoint strategy across a heavily Apple fleet using Intune, Apple Business Manager, and CrowdStrike Falcon, covering enrollment, compliance baselines, patching, and the full lifecycle.
- Set security posture across enterprise and production systems, including source control, cloud data and analytics platforms, hosting, and managed infrastructure.
- Extend the access model to production systems, where entitlement decisions have larger blast radius and require rigorous audit evidence.
- Automate manual work in the current request queue using Okta Workflows, Google APIs, Python, PowerShell, or Bash.
- Deepen operational readiness by writing runbooks, escalation paths, and documentation so colleagues can operate independently.
- Own onboarding and offboarding end-to-end, including compliance evidence trails.
- Partner with the security function on device trust, conditional access, and privileged access.
You will support engineers, researchers, and executives while maintaining judgment about production and developer access—balancing over-granting (quietly expensive) against under-granting (stops engineers working).
REQUIREMENTS:
- Deep, current, hands-on experience: you can describe what you built or configured at keyboard level in the last three months.
- Proven track record owning a function (not just a queue): you have made architectural decisions about identity and endpoint management, defended them, and lived with the consequences. You can name a decision you got wrong and changed.
- Real identity depth with Okta or comparable platform: you understand what determines group membership, what happens to movers (not just joiners/leavers), and how your model scales with rapid company growth.
- Automation instinct: you can name a category of work you eliminated and explain what you deliberately kept manual.
- Endpoint management at scale across mixed platforms (Intune, Jamf, or equivalent) plus endpoint security agent fleet management.
- Security depth in this domain: least privilege, conditional access, device trust, privileged access, and what auditors require.
- Judgment about production and developer access, having held that line somewhere.
- Hands-on with AI tooling in your own work: you use AI to build, script, and troubleshoot, and understand where it belongs in enterprise environments.
- Comfort inheriting partly-built, partly-undocumented systems and improving them rather than rebuilding.
- Calm under competing demands; ability to distinguish real emergencies from loud ones.
BONUS EXPERIENCE:
- Compliance evidence work (SOC 2, ISO 27001 access reviews, asset inventory, offboarding records)
- Supporting rapid headcount growth
- Zero-trust or conditional-access architecture
- Governing AI tool adoption (access, data handling, sanctioned vs. shadow usage)
- Cloudflare One administration
- Hardware-key MFA rollouts (YubiKey, FIDO2)
- AV, networking, or office buildout
- Linux and cloud platforms (GCP, AWS, Azure)
