System Engineer, Corporate Infrastructure

Grammarly offers a dynamic hybrid working model for this role. This flexible approach gives team members the best of both worlds: plenty of focus time along with in-person collaboration that helps foster trust, innovation, and a strong team culture.

Grammarly is the world’s leading AI writing assistance company trusted by over 40 million people and 50,000 organizations. From instantly creating a first draft to perfecting every message, Grammarly helps people at 96% of the Fortune 500 and teams at companies like Atlassian, Databricks, and Zoom get their point across—and get results—with best-in-class security practices that keep data private and protected. Founded in 2009, Grammarly is No. 14 on the Forbes Cloud 100, one of TIME’s 100 Most Influential Companies, one of Fast Company’s Most Innovative Companies in AI, and one of Inc.’s Best Workplaces.

To achieve our ambitious goals, we’re looking for a System Engineer to join our Corporate Infrastructure team as part of the broader Security organization. This role will build world-class, secure, and reliable corporate infrastructure solutions for Grammarly employees that will scale with our user base.

Grammarly’s engineers and researchers have the freedom to innovate and uncover breakthroughs—and, in turn, influence our product roadmap. The complexity of our technical challenges is growing rapidly as we scale our interfaces, algorithms, and infrastructure. You can hear more from our team on our technical blog.

As a System Engineer, Corporate Infrastructure, you will be a key player in building and enhancing the corporate services across the Grammarly team. You will improve our corporate identity and access management track and its processes to ensure that Grammarly operates securely and efficiently. As the DRI for the corporate identity and access management infrastructure, you will have the chance to learn about the latest technical solutions.

In this role, you will:

• Design and implement secure, scalable corporate infrastructure solutions using cloud platforms such as AWS.
• Build and maintain corporate identity and access management systems, with primary focus on Okta Identity Engine and access governance tools.
• Develop and optimize authentication workflows and authorization processes across our technology stack.
• Maintain a one-click (or ideally, no-click) deployment mindset for end users when building or updating IAM processes.
• Automate routine IAM processes to improve efficiency and reduce manual intervention.
• Create self-service capabilities that empower team members while maintaining appropriate security controls.
• Implement monitoring, metrics, and alerting for identity and access systems to enhance security posture.
• Develop clear technical documentation for infrastructure systems and end user processes.
• Provide technical troubleshooting and support for identity-related issues as needed.
• Balance security requirements with user experience to create solutions that are both secure and intuitive.
• Enhance IAM security and productivity levels by introducing various metrics.
• Enhance self-service features, reporting capabilities, and alerting features through automation.

• 5+ years of experience managing production SaaS environments and corporate infrastructure.
• Experience with identity management systems such as Okta, Azure AD, or AWS IAM.
• Knowledge of access management principles and governance best practices.
• Experience with cloud infrastructure in AWS, Azure, or GCP environments.
• Proficiency in at least one programming language (Python preferred).
• Experience with Opal.dev is a plus.
• Knows API methods and integration between different SaaS.
• Securing communications TCP/IP stack, SSL/TLS, domain records, certificates, PKI, encryption, hashing, OAuth2.
• Experience with ZTNA tools (Cloudflare).
• Strong collaboration and communication skills with the ability to work effectively in a team environment.
• Embodies our EAGER values—is ethical, adaptable, gritty, empathetic, and remarkable.
• Is inspired by our MOVE principles, which are the blueprint for how things get done at Grammarly: move fast and learn faster, obsess about creating customer value, value impact over activity, and embrace healthy disagreement rooted in trust.
• Is able to meet in person for their team’s scheduled collaboration weeks, traveling if necessary to the hub where their team is based.

• Professional growth: We believe that autonomy and trust are key to empowering our team members to do their best, most innovative work in a way that aligns with their interests, talents, and well-being. 
• A connected team: Grammarly builds a product that helps people connect, and we apply this mindset to our own team. Our remote-first hybrid model enables a highly collaborative culture supported by our EAGER (ethical, adaptable, gritty, empathetic, and remarkable) values. We work to foster belonging among team members in a variety of ways. This includes our team member resource groups, Grammarly Circles, which promote connection among those with shared identities including BIPOC and LGBTQIA+ team members, women, and parents. We also celebrate our colleagues and accomplishments with global, local, and team-specific programs. 

At Grammarly, we value our differences, and we encourage all—especially those whose identities are traditionally underrepresented in tech organizations—to apply. Grammarly is an equal opportunity company. We do not discriminate on the basis of race or ethnic origin, religion or belief, color, gender expression or identity, sexual orientation, sexual identity, national origin, citizenship, age, marital status, veteran status, disability status, criminal prosecution, judgment in a criminal case, or any other characteristic protected by law.

For more details about the personal data Grammarly collects during the recruitment process, for what purposes, and how you can address your rights, please see the Grammarly Data Privacy Notice for Candidates here.

#LI-KZ1