Back to jobs
New

Senior IT Platform Engineer

San Mateo, California

About Us

Beast Industries is a multifaceted media and entertainment company founded by Jimmy Donaldson, popularly known as MrBeast, the most watched person in the world. Renowned for revolutionizing digital content creation, Beast Industries encompasses a diverse portfolio of ventures that extend far beyond its origins on YouTube. With a mission to entertain, inspire, and create significant social impact, Beast Industries operates across various domains including digital media, philanthropy, consumer products, and innovative business initiatives. At Beast Industries, we believe in the transformative power of digital media and its potential to entertain, educate, and effect positive change. Our commitment to innovation, creativity, and philanthropy drives us to explore new frontiers, create unforgettable experiences, and build a legacy that inspires future generations.

Senior IT Platform Engineer

Beast Industries  ·  San Mateo, CA (on-site 4 days/week at Step)  ·  Full-time  ·  Reports to the Director of IT

Identity & Application Lifecycle

ABOUT THE ROLE

Beast Industries is the company behind MrBeast, Feastables, Beast Games, and a growing family of businesses that now includes Step, the fintech platform helping the next generation build credit and manage money. We're unifying identity across that whole family. Hundreds of SaaS applications and hundreds of employees are converging onto a single Okta instance while regulated, compliance-sensitive systems stay properly isolated.

You'll be the engineer working deep inside that platform. You'll know how users and applications get onboarded, provisioned, secured, and retired across every Beast company, and you'll run point for Step. That means the HRIS-driven provisioning that feeds it, the SSO and SCIM integrations for its app stack, and the dual-instance boundary that keeps its regulated systems separate from the rest of the business. This is a hands-on engineering role, not an administrator seat. You'll think in APIs, scripts, and pipelines, and you'll build automation so lifecycle events run themselves.

You'll also anchor the West Coast for the Beast IT team, working from Step's San Mateo office about four days a week. The office runs on you being there. You're the face of IT for the region, the first call when something breaks, and the person who makes sure exec visits and events go off without a hitch.

WHAT YOU'LL DO

Identity platform engineering

  • Run the user lifecycle end to end. Design and operate automated joiner, mover, and leaver flows for new hires, department changes, contractors, rehires, offboarding, and MFA enrollment, driven by HRIS events across multiple payroll and HR platforms.
  • Drive the application lifecycle. Onboard, integrate, maintain, and decommission apps across an inventory of several hundred SaaS applications, dozens of them federated for SSO and SCIM coverage growing, including our multi-workspace Slack environment. SAML, SCIM, and SWA configurations are your daily work.
  • Engineer identity automation. Manage groups, group rules, and sign-on and authentication policies, and build the automation that keeps them honest. Work fluently within the dual-instance architecture that isolates regulated fintech systems like KYC, brokerage, and banking integrations from the general business stack.
  • Run point for Step. Be the go-to engineer for how Step connects to the central Beast stack. Scope new integrations, keep the production ones healthy, and take first swing when something between Step and Beast breaks.
  • Document like an engineer. Maintain runbooks, architecture diagrams, and knowledge base articles, and keep the application inventory accurate enough to be a real system of record.

Site support and operations

  • Own the San Mateo queue. Triage, resolve, and escalate against SLAs in Serval, our Slack-native ITSM platform. The queue is yours, including the numbers behind it.
  • Run the site. New hire desks ready before day one, device provisioning and depot, peripheral and asset inventory. Small problems compound when nobody watches them. You watch them.
  • Keep the rooms working. Conference rooms, Zoom Rooms, Rally Bars, town hall AV. Meetings start on time because you made sure they would, and when an all-hands goes sideways, you're the one who gets it back.
  • Take care of the people. Walk-up questions, patient help for the less technical, showing a new hire how things work here, spotting the person quietly struggling with a tool and fixing it before they file a ticket. The general care and feeding of an office full of users is real work, and it's yours.
  • Be the face of IT for the West Coast. You're the on-site escalation point for the region and the white-glove support for exec visits and company events, occasionally available after hours when the moment calls for it.

WHAT WE'RE LOOKING FOR

  • 5+ years in IT systems, identity, or infrastructure engineering with deep hands-on Okta administration. Groups, policies, SSO/SAML, SCIM, lifecycle management. Comfortable on macOS and Windows alike.
  • Proven automation in Okta Workflows or equivalent (e.g. Tines, Serval), including building against APIs directly when the platform runs out of buttons.
  • Strong scripting and API skills in Python, PowerShell, or JavaScript for bulk operations, data transformation, and integrations.
  • Federation fluency. You've integrated SaaS apps via SAML, OIDC/OAuth, and SCIM enough times that the edge cases don't surprise you.
  • HRIS-driven provisioning experience with real joiner/mover/leaver automation in production, not just a proof of concept.
  • DevOps discipline. Version control, CI/CD concepts, infrastructure as code, and cloud platforms (AWS and/or GCP).
  • Endpoint awareness. Working knowledge of MDM (Intune, FleetDM preferred) and device trust.
  • AV fluency. Comfortable deploying and troubleshooting conference room systems like Zoom Rooms and Logitech Rally Bar.
  • A real service streak. You're happy being the person people find when something breaks, and you're as sharp with an exec's dead laptop as with a broken SCIM integration.
  • Comfort in a regulated, multi-entity environment. Fast-moving doesn't excuse sloppy. You know how to move quickly inside compliance boundaries.
  • Proven use of AI tooling for IT work such as Claude (Cowork and Code) and GenSpark.

NICE TO HAVE

  • Certifications or deep admin experience in Okta, Google Workspace, Slack, or Jira. Okta Workflows or Consultant certifications especially welcome.
  • Tenant migrations or SaaS consolidation at scale. You've merged, split, or collapsed identity platforms before and have the scars to prove it.
  • Experience supporting developer environments. GitHub and CI administration, developer tool provisioning, and enough context to speak an engineer's language.
  • Fintech and compliance tooling familiarity. KYC, brokerage, fraud and identity decisioning, audit-trail separation.
  • Google Workspace and Microsoft 365 dual-domain administration.
  • Slack Enterprise Grid or multi-workspace SCIM experience.
  • Security tooling exposure.

SUCCESS IN THE FIRST SIX MONTHS

  • Automated lifecycle workflows cover the core joiner, mover, and leaver events and routine identity changes need no human hands.
  • The application inventory is accurate and maintained with provisioning and deprovisioning documented per app.
  • The San Mateo queue runs against its SLAs and the office treats IT as something that just works. Desks ready before day one, rooms that start on time, an escalation path people trust.

WHAT MAKES THIS ROLE DIFFERENT

Identity engineers rarely get this mix. Deep, hands-on work across a multi-company identity platform with a fintech compliance boundary running through the middle of it, at a company whose name everyone you know recognizes. You'll ship work that would be committee-bound anywhere else, and because you're in the office with the people who use it, you'll see it land firsthand.

The target total compensation ranges from $115,000– $172,500, including an employee equity plan grant, bonus, plus comprehensive benefits.
Equity grants are issued in good faith, subject to company policies, board approval, and individual eligibility.

Benefits

The Perks, Why Work On the MrBeast Team

We are redefining what entertainment and storytelling look like at global scale. Every piece of content we publish reaches millions and influences culture in real time. This is your opportunity to lead the team that decides how those moments come to life across every screen.

  • Competitive Salary
  • Generous Medical (Blue Cross Blue Shield), Dental, Vision and company-paid Life Insurance 
  • Company contributions to employee Health Savings Accounts (HSA) 
  • 401k Plan with Safe Harbor company-matching
  • Flexible vacation policy and paid company holidays
  • Company-provided technology package 
  • Relocation assistance where applicable, including travel and company-provided housing for the first 90 days

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Education

Select...
Select...
Select...
Select...
Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in MrBeast’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.