Security & IT Operations Engineer

About Prefect

Prefect builds automation for an unpredictable world. The last decade of automation was about protecting workflows from unpredictability; in the agentic era, unpredictability is the point. Our mission is to give people confidence in automated work, whether that work is a mission-critical data pipeline or a fleet of AI agents.

In August 2026, Prefect and Dagster, competitors for eight years, joined forces to build the next generation of automation infrastructure. Today, our ecosystem includes Dagster, the data platform; Prefect, the agent platform; and FastMCP, the leading open-source developer framework for the MCP ecosystem. Together, our open-source and commercial products are trusted by Fortune 500 companies, data innovators, and high-growth technology companies around the world.

We think of our culture as the operating system of the company. We’ve carefully created a supportive, high-performance environment that empowers our team to do the best work of their careers, have meaningful impact, and continue growing personally and professionally. We’re a remote-first team that values high standards, ownership, and thoughtful collaboration.

The role

In August, Dagster and Prefect became one company. Behind the scenes, that left us with two of nearly everything: two SOC 2 programs, two ways of managing laptops, overlapping tools and accounts, and a long list of tools that each need one clear owner. We're hiring a Security & IT Operations Engineer to turn all of it into one setup that runs well and gets easier to run every quarter.

You'll own the day-to-day of our security compliance program and our corporate IT. You'll report to our Security & Systems Lead as the first hire on this new team.

Our customers are enterprise data, infrastructure, ML and AI teams, and our products run code inside their data infrastructure. AI has made attacks cheap and fast, so customers look hard at how we protect them, and a well-run security and compliance program is a big part of our answer. You won’t be pushing security uphill here. More engineers volunteered for our new Security Guild than its first sprint had room for. Building on both companies’ existing security work, the guild is implementing shared product security tools and consistent vulnerability management and incident response processes across Prefect and Dagster. That commitment is helping us stay ahead of AI-accelerated attacks.

You’ll enjoy this role if you like a mix of hands-on work and longer-term improvements, and want a meaningful say in how our IT and compliance programs run.

What you’ll own

• Run day-to-day compliance. Keep SOC 2 controls, evidence collection, access reviews, policy acknowledgments and training on track. Work directly with auditors and control owners, and follow findings through to resolution.
• Help consolidate our compliance programs. With our team lead and consultant, choose a GRC platform and set up both programs. Help adapt control descriptions across environments and design activities that minimize manual work.
• Own corporate IT. Run Google Workspace and our SaaS apps, handle onboarding and offboarding with People Operations, and manage our Mac fleet in Rippling. Help employees with laptop and access issues, and improve the setup as you learn where people get stuck.
• Improve access management. Work with our identity partner on how access is requested, approved, granted and removed. Own the daily processes and keep them documented.
• Protect corporate systems. Manage macOS and application updates, investigate endpoint alerts, and track vulnerabilities through remediation. Verify fixes and participate in phishing and other corporate incident response with our team lead.
• Automate repetitive work. Use scripts, APIs, workflow tools or AI to reduce manual IT and compliance tasks and make common requests self-service.

Recently completed projects include consolidating Mac device management into Rippling, running access reviews that support both SOC 2 programs, and working with teams to assign tool owners and retire duplicates.

Where the role can grow

We’re building the Security & Systems function for the combined company, and this role will help shape it. Starting with ownership of day-to-day IT and compliance, you can grow toward broader security operations and engineering—including vulnerability management, corporate incident response, and corporate security engineering—or toward risk management and AI governance. The direction will depend on your strengths, interests, and the company’s needs, with opportunities to take on more program ownership and planning as the function develops.

What you’ll bring

We’re looking for hands-on IT and compliance experience, practical technical judgment, and the ability to take ownership. Your experience may be deeper in one area, but you should be comfortable across both.

• You’ve owned recurring SOC 2 activities and worked directly with external auditors, or bring auditing experience. You understand how controls work, what evidence demonstrates they’re operating, and how to adapt them across systems and teams.
• You’ve administered and secured corporate IT systems, including account management, onboarding/ offboarding and Macs managed through an MDM. You’re comfortable with patching, endpoint alerts, remediation tracking, phishing or suspicious account activity, and helping employees troubleshoot problems.
• You’re comfortable automating recurring tasks with scripts, APIs, workflow tools or AI, and can explain something you’ve built. A small, useful improvement is a good example.
• You drive work across teams: establish owners and deadlines, work through blockers, and follow through until tasks are completed and documented. You know when to resolve something yourself and when to escalate.

Nice to have

• Experience with Google Workspace, Rippling, or a GRC platform such as Vanta, Drata or Thoropass.
• Familiarity with SSO, SCIM provisioning or other ways to automate account access.
• Experience helping implement or migrate an IT or compliance system, or improving a process that involved several teams.

Who this role is not for

• You’re looking to leave hands-on IT support behind. Helping someone with a laptop or access problem is part of the job, alongside larger projects and automation work.
• You need a settled, fully documented environment from day one. We’re still bringing two companies’ systems together, and you’ll help work out how the combined setup should run.

What You'll Get in Return:

Base Salary Ranges:

• San Francisco Bay Area and NYC metro: $165,000 - $219,000
• Washington, D.C., Boston, LA metro and Seattle: $150,000 - $194,000
• Denver, Chicago, Atlanta and all other US metros: $149,000 - $193,000

Actual base salary within each range depends on the candidate's location, experience, and qualifications. Equity and benefits are not included in the range above. Your recruiter can share more about the salary range for your preferred location during the hiring process.

Perks and Benefits:

• Remote-first team with flexible-first culture
• Equity Stock Options
• Generous Parental Leave
• Life Insurance and Disability benefits
• $800/month remote work stipend

And that's just the start — for more info check out our benefits and perks on our careers page.

Belongingness at Prefect:

Belongingness at Prefect is our commitment to ensuring mutual power, access, and opportunity among all groups and individuals who make up our community. We operationalize belongingness through actions large and small on a daily basis, but always with the goal that all groups and individuals can contribute as their most authentic self to the evolution of our product, our team, and our community.

Belongingness is also our commitment to bridge with individuals or groups not yet established in our community, acknowledge differences in a way that affirms distinct identities, and allows for a new, more expansive group identity to form.

Equal Opportunity at Prefect:

All applicants will be considered for employment without attention to race, religion, color, sex (including pregnancy, sexual orientation and gender identity/expression), national origin, disability or any other status protected under applicable federal, state, or local laws.

Delaney is a real live person (👋🏻) and is looking forward to learning more about you through your application.