Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 6 days ago

Senior IT Engineer

Range64 open roles

Pay
$120,000 – $190,000 a year
Where
McLean, VA
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior IT EngineerRange · McLean, VA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Range's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

10.7% of postings close within 7 days. Measured by our own scanner across the market. Range postings stay open a median of 59 days.

Share of postings closed within
  1. 2.0%1 day
  2. 4.4%3 days
  3. 10.7%7 days
  4. 16.1%14 days
  5. 34.1%30 days
This job: posted 6 days ago

Range median: 59 days open

The posting

At Range, we're building towards a world where anyone can live the financial life they imagine for themselves. If that sounds like a mission you want to be a part of, let's create it together.

We're building AI-powered wealth management. Investments, taxes, retirement, estate planning, all in one platform instead of scattered across different advisors and apps. We're backed by Google's Gradient Ventures, Cathay Innovation, Scale Venture Partners, and more. We're growing fast while still small enough that everyone's work is visible and impactful.

ABOUT THE ROLE

Range runs IT the way we run engineering: in code, with AI, and with security built in. Our identity, groups, and DNS live in GitHub and ship through CI/CD. We're looking for a Senior IT Engineer to own that system end to end.

We add new Rangers every month across three offices. Your job is to make their first day work, their last day smooth, and everything in between fast and secure. As a registered investment adviser, we hold ourselves to a high bar on access control and auditability. You'll build IT that clears that bar without slowing anyone down.

You'll work closely with our security and infrastructure team and partner with People, Finance, and every department lead.

This role is based at Range's headquarters in McLean, VA, in office Monday–Friday, and supports our New York and Seattle offices with occasional travel.

WHAT YOU'LL OWN

- Employee lifecycle. Onboarding, role changes, and offboarding (planned and same-day) across Google Workspace, SSO-connected apps, VPN, password manager, Slack, and GitHub. Where there are checklists and hand-offs, you will turn them into automated, auditable workflows.

- Identity and access. Run Google Workspace as our identity provider, with SAML/OIDC SSO and SCIM provisioning. Design role- and department-based access, enforce least privilege and time-bound admin rights, and run regular access reviews.

- Apple fleet. Own our macOS fleet through MDM and Apple Business Manager. Manage procurement, inventory, and recovery of hardware across all three offices.

- SaaS management. Run app intake and security review, manage licenses and seats, track spend, and cut sprawl. Know which tools we pay for, who uses them, and what they can access.

- IT as code. Manage Workspace configuration, groups, DNS, and through infrastructure-as-code (Pulumi) in GitHub, with pull-request review and CI.

- Support that scales. Own the IT support channel and escalations. Write self-service docs, and build AI agents and automations that resolve common requests (password resets, access requests, app installs) without a human in the loop.

- Security and compliance. Partner with security on SOC 2 controls, endpoint incident response, and the evidence regulators and auditors ask for.

- Office technology. Keep Wi-Fi, networking, conference rooms, and peripherals working in McLean, New York, and Seattle.

WHO YOU ARE

- An owner. You own problems until they're solved. When an offboarding is immediate, it's your top priority, and you finish it.

- Automation-first. If you've done something twice by hand, you're already scripting it. You'd rather fix the system than close the ticket.

- AI-native. You use AI every day to write scripts, triage requests, and build tools. You see it as the way a small IT function supports a fast-growing company.

- Security-minded. Least privilege is your default. You can explain to a teammate why they're getting admin rights for an hour instead of forever.

- Service-oriented. You're patient and clear with non-technical colleagues, and you care how IT feels to the people using it.

- Calm under pressure. Security incidents, lost laptops, and a same-day departure on a Friday don't rattle you.

- You care about outcomes. Every account, every device, every workflow is built around how Rangers actually experience it.

WHERE YOU OPERATE AT THIS LEVEL

You produce high-quality, impactful work that drives team success. You take full ownership by proactively identifying and addressing challenges while staying focused on solutions. You lead by example with positivity, reframing setbacks as opportunities to learn and grow. You collaborate openly through radical transparency, ensuring alignment and trust among teammates and stakeholders.

NOT FOR YOU IF

- You want to close tickets, not build systems

- You make changes in admin consoles and never write them down, let alone codify them

- You think security is someone else's job

- You need a fully written playbook before you can act

WHAT WE'RE LOOKING FOR

- 5+ years in IT systems administration or corporate engineering

- Deep Google Workspace administration experience

- macOS fleet management with a modern MDM (Jamf, Kandji, Mosyle, or similar) and Apple Business Manager

- Hands-on SSO and identity experience: SAML, OIDC, SCIM, MFA, and RBAC

- Scripting in TypeScript, Python, or Bash, and comfort working in Git with pull requests.

- A track record of automating onboarding, offboarding, and access management

- Strong security fundamentals: least privilege, encryption, endpoint protection, and incident response

- Clear written communication, from runbooks to company-wide announcements

WHAT WILL SET YOU APART

- Infrastructure-as-code in Pulumi or Terraform, applied to identity and SaaS.

- Building IT automations or AI agents (Okta Workflows, Tines, Zapier, or custom)

- SOC 2 or regulated financial services experience (RIA, broker-dealer, bank)

- Networking and VPN experience (Wi-Fi, firewalls, Tailscale/WireGuard, OpenVPN)

- AWS IAM Identity Center or Okta administration

- Supporting multiple offices at a startup

COMPENSATION

Base salary range: $120,000 – $190,000

This is the base salary range we expect in good faith to pay for this role at the time of posting. Where an offer lands within the range depends on the scope and complexity of work the candidate can own independently and demonstrated depth at this level.

OTHER COMPENSATION AND BENEFITS

The range above reflects base salary only. Our offer packages also include equity in the form of stock options, so total compensation for this role will exceed the base salary range.

We do not ask for or consider salary history. You are welcome to ask questions about compensation at any point in the process.

BENEFITS

- Health & Wellness: 100% employer-covered medical insurance for employees (75% for dependents), plus dental and vision coverage

- 401(k): Retirement savings program to support your future

- Paid Time Off: time to reset and recharge + most federal holidays

- Parental Leave: Comprehensive leave policy for growing families

- Meals: Select meals covered throughout the week

- Fitness: Monthly movement stipend

- Equity & Career Growth: Early exercise eligibility and a strong focus on professional development

- Annual Compensation Reviews: Salary and equity refreshes based on performance

- Boomerang Program: After two years at Range, you can take time away to start your own company. We'll hold your spot for 6 months - and pause your equity vesting, which resumes if you return

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Range's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Range's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Range's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.