Systems Engineer, Enterprise Infrastructure

Grammarly team members in this role must be based in the United States, and they must be able to collaborate in person 2 weeks per quarter, traveling if necessary to the hub(s) where the team is based.

The opportunity 

Grammarly is the world’s leading AI writing assistance company, trusted by over 30 million people and 70,000 professional teams daily. From instantly creating a first draft to perfecting every message, Grammarly’s product offerings help people at 96% of the Fortune 500 get their point across—and get results. Grammarly has been profitable for over a decade because we’ve stayed true to our values and built an enterprise-grade product that’s secure, reliable, and helps people do their best work—without selling their data. We’re proud to be one of Inc.’s best workplaces, a Glassdoor Best Place to Work, one of TIME’s 100 Most Influential Companies, and one of Fast Company’s Most Innovative Companies in AI.

To achieve our ambitious goals, we’re looking for a System Engineer to join our Enterprise Infrastructure team. This role will substantially impact the security of Grammarly's product offerings and services. User Trust is our top priority, so our new System Engineer’s impact will be dramatic. Every day of their work at Grammarly, their decisions and actions will have a straightforward impact on the millions of users who trust personal content and rely on Grammarly product offerings daily. They can drive changes across the corporate identity and access management workflows. They will have the opportunity to advocate for security and process improvements while balancing these changes with the speed of growth.

This experienced System Engineer will improve our corporate identity and access management track and its processes to ensure that Grammarly operates securely and efficiently. As the DRI for the corporate identity and access management infrastructure, this person will have the chance to learn about the latest technical solutions. 

Grammarly’s engineers and researchers have the freedom to innovate and uncover breakthroughs—and, in turn, influence our product roadmap. The complexity of our technical challenges is growing rapidly as we scale our interfaces, algorithms, and infrastructure. You can hear more from our team on our technical blog.

Your impact

As a System Engineer Enterprise Infrastructure, you will be responsible for maintaining and expanding enterprise infrastructure and services: Furthermore, in this role, you will:

• Design and enhance the corporate environment across external and internal SaaS and PaaS.
• Build and manage Enterprize's corporate access management platforms. Corporate identity (Okta Identity Engine), access management platforms (Opal. dev).
• Ensure that corporate IAM complies with the "optimal" level of CISA's Zero Trust Maturity Model and participates in organizational changes that drive the transition to that "optimal" level.
• Follow the Access Management Maturity Level guidelines to meet the least privileged access model.
• Design and support the global IAM processes.
• Develop infrastructure and end user documentation.
• Collaborate with other teams to address and improve identity and access management issues.
• Have a one-click (or ideally "no-click") deployment mindset for end users while building or updating IAM processes. 
• Cooperate with the Cloud Infrastructure team to maintain AWS infrastructure.
• Provide L3 troubleshooting and support.
• Enhance IAM security and productivity levels by introducing various metrics.
• Enhance the self-service features, reporting, and alerting via automation.

We’re looking for someone who

• Embodies our EAGER values—is ethical, adaptable, gritty, empathetic, and remarkable.
• Is inspired by our MOVE principles, which are the blueprint for how things get done at Grammarly: move fast and learn faster, obsess about creating customer value, value impact over activity, and embrace healthy disagreement rooted in trust.
• Is able to collaborate in person 2 weeks per quarter, traveling if necessary to the hub where the team is based.
• Has a solid experience with Okta (access management, app integration, automation, passwordless).
• Has solid experience with Terraform (managing resources, deploying infrastructure).
• Has experience in organizing custom approaches in Access Management.
• Has solid experience in AWS (Lambda, ECS).
• Has solid experience with Python automating routine tasks, reports, and lambdas.
• Has strong project management skills.
• Has strong analytical, diagnostics, and troubleshooting skills. 
• Has an ability to solve complex problems at a scale.

It will be a plus to have the following:  

• Experience Writing code by using Golang, PowerShell, Bash.
• Experience with Google Cloud Platform and Microsoft Azure platforms.
• Experience building compliant processes ISO, SOC2, FedRAMP, SOX, NIST, CISA’s Zero Trust Maturity Model.
• Experience with Opal.dev.
• Knows API methods and integration between different SaaS.
• Securing communications TCP/IP stack, SSL/TLS, domain records, certificates, PKI, encryption, hashing, OAuth2.
• Experience with ZTNA tools (Cloudflare).
• Knowledge of networking, security, DNS, Unix/Linux operations, and troubleshooting.

Support for you, professionally and personally

• Professional growth: We believe that autonomy and trust are key to empowering our team members to do their best, most innovative work in a way that aligns with their interests, talents, and well-being. We support professional development and advancement with training, coaching, and regular feedback.
• A connected team: Grammarly builds a product that helps people connect, and we apply this mindset to our own team. Our remote-first hybrid model enables a highly collaborative culture supported by our EAGER (ethical, adaptable, gritty, empathetic, and remarkable) values. We work to foster belonging among team members in a variety of ways. This includes our employee resource groups, Grammarly Circles, which promote connection among those with shared identities, such as BIPOC and LGBTQIA+ team members, women, and parents. We also celebrate our colleagues and accomplishments with global, local, and team-specific programs. 

Compensation and benefits

Grammarly offers all team members competitive pay along with a benefits package encompassing the following and more: 

• Excellent health care (including a wide range of medical, dental, vision, mental health, and fertility benefits)
• Disability and life insurance options
• 401(k) and RRSP matching 
• Paid parental leave
• Twenty days of paid time off per year, eleven days of paid holidays per year, and unlimited sick days 
• Home office stipends
• Caregiver and pet care stipends
• Wellness stipends
• Admission discounts
• Learning and development opportunities

Grammarly takes a market-based approach to compensation, which means base pay may vary depending on your location. Our US and Canada locations are categorized into compensation zones based on each geographic region’s cost of labor index. For more information about our compensation zones and locations where we currently support employment, please refer to this page. If a location of interest is not listed, please speak with a recruiter for additional information.

Base pay may vary considerably depending on job-related knowledge, skills, and experience. The expected salary ranges for this position are outlined below by compensation zone and may be modified in the future. 

We encourage you to apply

At Grammarly, we value our differences, and we encourage all—especially those whose identities are traditionally underrepresented in tech organizations—to apply. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, ancestry, national origin, citizenship, age, marital status, veteran status, disability status, political belief, or any other characteristic protected by law. Grammarly is an equal opportunity employer and a participant in the US federal E-Verify program (US). We also abide by the Employment Equity Act (Canada).

Please note that EEOC is optional and specific to US-based candidates.

#LI-PM1