[Hiring] Security & IT Operations Engineer @Prefect

Role Description

In August, Dagster and Prefect became one company. Behind the scenes, that left us with two of nearly everything: two SOC 2 programs, two ways of managing laptops, overlapping tools and accounts, and a long list of tools that each need one clear owner. We're hiring a Security & IT Operations Engineer to turn all of it into one setup that runs well and gets easier to run every quarter.

You'll own the day-to-day of our security compliance program and our corporate IT. You'll report to our Security & Systems Lead as the first hire on this new team.

Our customers are enterprise data, infrastructure, ML and AI teams, and our products run code inside their data infrastructure. AI has made attacks cheap and fast, so customers look hard at how we protect them, and a well-run security and compliance program is a big part of our answer. You won’t be pushing security uphill here. More engineers volunteered for our new Security Guild than its first sprint had room for. Building on both companies’ existing security work, the guild is implementing shared product security tools and consistent vulnerability management and incident response processes across Prefect and Dagster. That commitment is helping us stay ahead of AI-accelerated attacks.

You’ll enjoy this role if you like a mix of hands-on work and longer-term improvements, and want a meaningful say in how our IT and compliance programs run.

What you’ll own

• Run day-to-day compliance.
• Keep SOC 2 controls, evidence collection, access reviews, policy acknowledgments and training on track.
• Work directly with auditors and control owners, and follow findings through to resolution.
• Help consolidate our compliance programs.
• With our team lead and consultant, choose a GRC platform and set up both programs.
• Help adapt control descriptions across environments and design activities that minimize manual work.
• Own corporate IT.
• Run Google Workspace and our SaaS apps, handle onboarding and offboarding with People Operations, and manage our Mac fleet in Rippling.
• Help employees with laptop and access issues, and improve the setup as you learn where people get stuck.
• Improve access management.
• Work with our identity partner on how access is requested, approved, granted and removed.
• Own the daily processes and keep them documented.
• Protect corporate systems.
• Manage macOS and application updates, investigate endpoint alerts, and track vulnerabilities through remediation.
• Verify fixes and participate in phishing and other corporate incident response with our team lead.
• Automate repetitive work.
• Use scripts, APIs, workflow tools or AI to reduce manual IT and compliance tasks and make common requests self-service.

Where the role can grow

We’re building the Security & Systems function for the combined company, and this role will help shape it. Starting with ownership of day-to-day IT and compliance, you can grow toward broader security operations and engineering—including vulnerability management, corporate incident response, and corporate security engineering—or toward risk management and AI governance. The direction will depend on your strengths, interests, and the company’s needs, with opportunities to take on more program ownership and planning as the function develops.

What you’ll bring

• Hands-on IT and compliance experience, practical technical judgment, and the ability to take ownership.
• Experience owning recurring SOC 2 activities and working directly with external auditors.
• Understanding of how controls work, what evidence demonstrates they’re operating, and how to adapt them across systems and teams.
• Experience administering and securing corporate IT systems, including account management, onboarding/offboarding, and Macs managed through an MDM.
• Comfort with patching, endpoint alerts, remediation tracking, phishing or suspicious account activity, and helping employees troubleshoot problems.
• Ability to automate recurring tasks with scripts, APIs, workflow tools or AI, and can explain something you’ve built.
• Experience driving work across teams: establishing owners and deadlines, working through blockers, and following through until tasks are completed and documented.

Nice to have

• Experience with Google Workspace, Rippling, or a GRC platform such as Vanta, Drata or Thoropass.
• Familiarity with SSO, SCIM provisioning or other ways to automate account access.
• Experience helping implement or migrate an IT or compliance system, or improving a process that involved several teams.

Who this role is not for

• You’re looking to leave hands-on IT support behind.
• You need a settled, fully documented environment from day one.

Benefits

• Base Salary Ranges:
• San Francisco Bay Area and NYC metro: $165,000 - $219,000
• Washington, D.C., Boston, LA metro and Seattle: $150,000 - $194,000
• Denver, Chicago, Atlanta and all other US metros: $149,000 - $193,000
• Actual base salary within each range depends on the candidate's location, experience, and qualifications.
• Equity and benefits are not included in the range above.
• Your recruiter can share more about the salary range for your preferred location during the hiring process.
• Remote-first team with flexible-first culture.
• Equity Stock Options.
• 401(k) with 5% company match (vests immediately!).
• Unlimited PTO.
• Medical, Dental and Vision insurance.
• Generous Parental Leave.
• Life Insurance and Disability benefits.
• $800/month remote work stipend.
• And that's just the start — for more info check out our benefits and perks on our careers page.