Enterprise Engineer
Job Description
Enterprise Engineer
Location: San Francisco, California
Job Type: Full Time
Reports To: Head of Enterprise Security & Engineering
About the Company
LMArena is an engineering-first startup redefining how the world evaluates large language models. Created in 2023 by UC Berkeley researchers, our neutral, community-driven benchmarking platform attracts over one million monthly users—pairwise comparing leading models from OpenAI, Google, Anthropic, and more—to deliver real-time insights into the rapidly evolving LLM landscape. LMArena is scaling fast to build the next generation of AI testing infrastructure and set the industry standard for model evaluation.
This Enterprise Engineer will be the tip of the spear on a small team that owns end-to-end IT, identity & access, device management, SaaS application management and security, and drive a culture of security best practices. This is a deeply hands-on role—you’ll be setting up systems yourself, while also defining policies and vendor relationships that will scale as we grow.
Key Responsibilities:
Identity & Access Management + SaaS Estate Management
Support user onboarding/offboarding via Okta (SCIM, Okta Workflows)
Experience with Okta Workflows, or similar low/no-code API automation tooling (n8n, zapier, etc)
Enforce MFA using FIDO2 hardware keys, and assist with key enrollments (Yubikeys)
Experience with Okta Identity Governance, or similar idP governance solutions
Familiar with SaaS lifecycle management reporting and automation tools (ie automate reporting and remediation of unused SaaS licenses across SaaS estate)
Comfortable troubleshooting authentication policies, global session policies, and device assurance policies within Okta
Experience with group rules (to manage birthright access) and group based permissions.
Email and Collaboration Suite
Assist with Google Workspace administration (management of user, group, OU, email, and Drive sharing/permissions)
Help with file sharing (Google Drive) organization and collaboration by ensuring that all internal/external sharing follows the principle of least privilege.
Comfortable troubleshooting email delivery issues (GWS email reporting, DNS Authentication: SPF/DKIM/DMARC, Postmaster Tools)
Adept at using GWS’ investigation tool to investigate sign-in logs, o-auth logs, API logs, etc
Experience with Chrome browser and Chrome web store management
Familiar with GWS API controls and are able to configure and manage 3rd-party app access following the principles of least privilege.
Network and A/V Infrastructure
Comfortable troubleshooting basic networking and connectivity issues
Can assist in the configuration and troubleshooting of remote connectivity for remote workers (VPN, SSE, SASE)
Familiar with Zoom, Teams, and Google Meet platforms, and can support Zoom Room, Teams Room, and Meet Room in-office deployments
Ensure secure, reliable connectivity for both remote and on-site employees
Assist with visitor-badge systems and hybrid-work connectivity
Endpoint, MDM, and EDR
Assist in the creation and management of MDM device configurations and compliance policies
Comfortable with Windows, macOS, iOS, and Android MDM enrollment and management
Knowledge of BYOD management and full management strategies, including Android (work/school profiles) and iOS’ account-drive user enrollment
Experience with deployment and management of Crowdstrike Falcon: USB device control, discovery module, and exposure management
Manage OS and 3rd party patching
Assist with the deployment and management of Okta Device Assurance policies (dynamic SCEP/device certificates) to ensure that only compliant devices (screen lock, encryption, password, fully patched) are able to access applications integrated with Okta.
Security Operations and Vendor Management
Assist the Head of Enterprise Security with vendor selection, procurement, and day-to-day engagement for all IT/security tools
Monitor and respond to security incidents while establishing proactive defenses to prevent future breaches
Partner with the Head of Enterprise Security to develop, deploy, and enforce security policies (acceptable use, incident response runbooks
What We’re Looking For
Required:
~3-5 years of combined IT + security experience
Proven “startup-scrappy” mindset: hands-on with device builds, scripting, troubleshooting—and comfortable wearing many hats
Deep practical experience with Okta (SCIM, SSO), Google Workspace administration, and hardware-key MFA (YubiKey/FIDO2)
Solid track record deploying MDM/endpoint tooling and EDR (e.g. CrowdStrike) in mixed environments
Passion for Enterprise Engineering and Security as evidenced by personal projects, home-labbing
Excellent communicator who can engage directly with executives, engineers, and external partners
Highly Desirable:
Prior experience in a high-growth SaaS startup
Hands-on network and A/V build-out experience (wired/wireless, PoE, badge systems)
Familiarity with security frameworks or compliance (SOC 2, ISO 27001 readiness)
Bachelor’s in Information Systems, MIS, Computer Science, or related field
Why You’ll Love It Here:
Impact & Ownership: As the company’s first Enterprise Engineering hire, you will have the ability to shape the role and help contribute to a start-up at the “ground-floor”
Fast-paced Growth: Work closely with founders, see your initiatives roll out immediately, and scale with us.
Autonomy: Pick the tools and vendors you trust; we’ll support you with budget and a seasoned consulting partner.
Hybrid Flexibility: Remote-first environment with a new office coming online—shape our office experience.
What we offer:
The cash compensation for this position has not yet been finalized. Actual compensation will depend on job-related knowledge, skills, experience, and candidate location.
Competitive salary and meaningful equity
Comprehensive healthcare coverage (medical, dental, vision)
The opportunity to work on cutting-edge AI with a small, mission-driven team
A culture that values transparency, trust, and community impact
Come help build the space where anyone can explore and help shape the future of AI.
Company Information
Location: Not specified
Type: Not specified