Back to jobs

IT Systems Engineer

New York, New York, United States

About Us

  • Insurance brokers sit at the intersection of care, cost, and access — yet remain one of the most underleveraged assets in the $5T healthcare value chain. They guide millions of Americans through plan selection, coverage questions, and care navigation, yet still rely on spreadsheets, manual workflows, and outdated tools that limit their growth and impact.
  • Gyde is reimagining this. We’re building the first AI-native insurance brokerage platform—a system that learns from every client interaction to automate operations, power intelligent voice and chat experiences, and predict the right coverage and products for every individual or business.
  • Our approach combines acquisition and AI: we acquire traditional brokerages and transform them into next-generation, data-driven organizations. Through Gyde’s platform, agencies run more efficiently, serve clients more personally, and scale faster than ever before.
  • Join us if you’re excited to:
    • Redefine how millions of people access and understand their healthcare coverage, by building systems that turn unstructured data, human conversations, and fragmented processes into intelligence.
    • Build AI systems that improve how people access healthcare
    • Design production-grade voice, chat, and predictive models for a highly regulated domain
    • Launch technologies that augment human judgment and make complex decisions transparent and scalable
    • Help reinvent an entire industry from the inside out
  • We’re creating the future of brokerage — where every interaction, insight, and decision is powered by intelligence.
  • Our founding team boasts pedigrees from Oscar, Stripe, Vista Equity Partners, and Alpine. Lightspeed led Gyde’s $60M financing, with participation from Optum Ventures, Crystal Venture Partners, Virtue, MVP Ventures, and multiple endowment funds, among others. Hear why on LSVP Investment Memo.

Role Summary

You are the systems engineer behind every agency we bring into Gyde — and the person they reach when something breaks. When we acquire an agency, its people need accounts, laptops, and access working on day one, and you own that experience end to end: before, during, and after cutover. But you don't just run that playbook by hand — you engineer it. Every provisioning step, compliance check, and access change is something you'd rather express as code and automate than repeat.

You'll sit on the Infrastructure team, report to the Head of Infrastructure, and turn the Infra Engineer's integration runbooks into repeatable, automated systems — while staying close enough to real users to know exactly where the friction is.

There is real operations work here, and more of it as we scale: device fleets across multiple entities, MFA and SSO resets, and account lifecycle across Entra/Okta and Google Workspace/M365. What defines this role is how you approach that work. You treat each recurring operational task as a bug to fix at the root and a candidate for automation — not a ticket to close and forget. It's also high-trust: we operate in a HIPAA-aware environment, so you handle identity verification, device loss, and access changes with care, every time.

The ideal hire has run end-user IT in a fast-moving, multi-tenant or MSP-style environment, is fluent with scripting and configuration-as-code, stays calm under a cutover deadline, and is happiest when they've automated away last month's busywork.

Key Responsibilities

  • Engineer the agency-integration experience, don't just run it. Own onboarding, cutover, hypercare, and day-to-day support for acquired agencies as the primary IT point of contact — and continuously convert that work into scripted, repeatable systems so each integration is faster and more hands-off than the last.
  • Manage endpoints and devices as code. Image, enroll, ship, and lifecycle-manage laptops (provisioning through RMA and offboarding retrieval); operate the MDM (Hexnode) day to day, and codify policies, baselines, and compliance remediation instead of clicking through consoles.
  • Automate the identity and access lifecycle. Provision, modify, and deprovision accounts across Entra/Okta, Google Workspace/M365, and core SaaS; run JML workflows with same-day deprovisioning as a non-negotiable, and drive toward automated, HRIS-triggered lifecycle so it happens reliably without manual steps.
  • Turn integration runbooks into repeatable tooling. Take the Infra Engineer's runbooks, schedule and run cutover waves with agency leadership, capture friction, and feed fixes back as automation and version-controlled process; own status comms during rollouts and incidents.
  • Build security hygiene into the system. Enforce endpoint baselines, disk encryption, MFA enrollment, and screen-lock policies through managed, auditable configuration; support phishing reporting and basic user security education; flag anomalies (impossible travel, unmanaged devices, shadow IT) to Security/Infra; keep HIPAA-aware habits by default.

What you bring / core competencies

  • Automation & Configuration-as-Code. You script and version-control your work (PowerShell, Python, Graph API, or similar), and you'd rather define infrastructure and policy as code than manage it by hand. You see a recurring task and instinctively reach for a way to make it disappear.
  • Identity & Access Management. Confident across an IdP (Entra/Okta), Google Workspace/M365, MFA, SSO, and conditional access, with clean JML hygiene. You reason about least privilege and entitlements, and you don't need to be told when an offboarding has to happen same-day.
  • Endpoint & MDM Operations. You've owned a device fleet, not just touched one — imaging, enrollment, lifecycle, inventory reconciliation, and policy/compliance troubleshooting in an MDM (Hexnode or comparable), ideally managed as code.
  • End-User Support & Troubleshooting. You diagnose and resolve laptop, SaaS, connectivity, and access issues quickly and explain them plainly to non-technical users — and you treat a recurring issue as a signal to fix or automate something upstream, not a task to close.
  • Communication & Stakeholder Management. Calm, clear, and credible with non-technical agency users and leadership, especially under cutover pressure. You can explain what's happening and what's next without jargon.
  • Operational Rigor & Security Mindset. You follow and improve runbooks, document recurring quirks, and handle HIPAA-aware verification and device-loss scenarios without being prompted. You build process and tooling, not just habit.

Technical / Functional Requirements

  • 4–6 years in end-user IT, IT operations, systems engineering, or an MSP environment.
  • Hands-on scripting and automation (PowerShell, Python, or similar) and comfort managing configuration as code. This is a core requirement for this role, not a bonus.
  • Hands-on administration of an IdP (Entra ID or Okta) plus Google Workspace and/or Microsoft 365.
  • MDM experience including policy and compliance management (Hexnode a plus; Intune, Jamf, or Kandji acceptable).
  • Comfortable imaging/provisioning laptops and managing the device lifecycle end to end.
  • Solid working grasp of MFA, SSO/conditional access, VPN, and AVD or a comparable remote-desktop setup.

Nice to have

  • Config-as-code / IaC tooling for identity or endpoints (e.g., Terraform, Okta Workflows, Entra Lifecycle Workflows, or Intune-as-code).
  • Experience supporting a HIPAA or otherwise regulated environment.
  • Multi-tenant, MSP, or M&A / agency-integration IT experience.
  • Hexnode and Azure Virtual Desktop (AVD) specifically.

What we offer

Gyde offers a competitive benefits package to all employees.  

  • Top of the market compensation
  • Flexible (Unlimited) Paid Time Off
  • Medical, Dental, and Vision benefits for you and your family
  • Retirement Plan (e.g., 401K) 
  • Parental Leave

 

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Education

Select...
Select...
Select...
Select...

U.S. Standard Demographic Questions

We invite applicants to share their demographic background. If you choose to complete this survey, your responses may be used to identify areas of improvement in our hiring process.
Select...
Select...
Select...
Select...
Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Gyde’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

We use Greenhouse’s AI-powered Talent Matching tool to compare your application against our job requirements.

Learn more