IT Engineer

About Cyngn, Inc.

Based in Mountain View, CA, Cyngn is a publicly-traded autonomous technology company. We deploy self-driving industrial vehicles -specifically autonomous tuggers -  to factories, warehouses, and other facilities throughout North America. To build this emergent technology, we are looking for innovative, motivated, and experienced leaders to join us and move this field forward. If you like to build, tinker, and create with a team of trusted and passionate colleagues, then Cyngn is the place for you.

Key reasons to join Cyngn:

We are small and big.

With under 100 employees, Cyngn operates with the energy of a startup. On the other hand, we’re publicly traded. This means our employees not only work in close-knit teams with mentorship from company leaders—they also get access to the liquidity of our publicly-traded equity.

We build today and deploy tomorrow.

Our autonomous vehicles aren’t just test concepts—they’re deployed to real clients right now. That means your work will have a tangible, visible impact.

We aren’t robots. We just develop them.

We’re a welcoming, diverse team of sharp thinkers and kind humans. Collaboration and trust drive our creative environment. At Cyngn, everyone’s perspective matters—and that’s what powers our innovation.

About the role

You build IT infrastructure rather than just keep it running. This is a hands-on, fully onsite role in Mountain View, and you will be the second member of a two-person IT function supporting engineering, operations, and business teams.

That structure is the pitch and the catch. You own real systems from day one — identity, device fleet, network, and the automation that holds them together. You will also still unjam a printer, because two people means everyone is hands-on.

What separates this from a help desk job is the mandate: your job is to reduce support volume, not absorb it. We want someone who sees the same ticket three times and writes the script, policy, or doc that stops the fourth.

Cyngn builds autonomous driving technology for industrial vehicles, so you will support a mixed environment of corporate laptops, Linux engineering workstations, lab hardware, and test infrastructure. If you have only ever supported a pure SaaS office, this will stretch you in a good way.

What you'll do

• Administer and improve identity and access as a system: design and maintain groups, roles, policies, and MFA enforcement in JumpCloud and Google Workspace, and keep SaaS access consistent across Slack and the rest of the stack
• Administer and improve the device fleet: MDM policy, imaging and provisioning pipelines, patch and compliance reporting across macOS, Windows, and Ubuntu
•  Automate the repetitive work — onboarding and offboarding, access provisioning, inventory reconciliation, reporting — with scripting and the APIs of the tools we already run
• Administer and contribute towards the office and engineering network: improve security and user experience
• Support engineering infrastructure, including Linux workstations and shared compute resources  
• Ensure compliance of corporate endpoints and SasS services
• Own Tier 1 + 2 service desk tickets
• Evaluate and implement new tooling: run the trial, make the recommendation, own the rollout
• Write and maintain documentation and runbooks so recurring issues become self-service
• Conduct POCs of new solutions for the company
• Manage hardware and software inventory, license assignments, and renewal tracking

Occasional after-hours or weekend availability may be needed for planned work such as office moves, equipment refreshes, network changes, or system maintenance.

Priorities: 3-12 Month Goals

First 3 Months

• Take full ownership of onboarding and offboarding across macOS, Windows, and Ubuntu, and implement zero-touch where feasible
•  Own the service desk, serve as the first point of contact for all support tickets and escalations
•  Fully understand and master the IT asset lifecycle end to end: procurement, assignment, recovery, and retirement 

By 4-6 Months

• Implement a patch management program that covers all personnel workstations
•  Fully audit internal company resources and harden security posture
• Document and clean up network segmentation, including the boundary between corporate and engineering environments
•  Build out the internal knowledge base and measurably reduce the top  recurring ticket drivers

By 6-12 Months

• Automate and standardize IT operations across onboarding/offboarding, endpoint provisioning, software deployment, and routine administrative workflows, ensuring appropriate approvals, auditability, and alignment with established policies.
• Mature endpoint compliance and vulnerability management by maintaining consistent patching, security baselines, monitoring, and risk-based remediation across macOS, Windows, and Ubuntu.
• Strengthen identity and access management through least-privilege enforcement, periodic access reviews, and improved provisioning/deprovisioning processes, consistent with established authorization and separation-of-duties requirements.
• Validate and improve existing backup, disaster recovery, and business continuity procedures for critical internal IT systems through documented testing, remediation of identified gaps, and alignment with established recovery objectives.
• Drive measurable improvements in IT operational efficiency, reliability, and security, independently delivering at least one approved infrastructure or security initiative while maintaining appropriate documentation and audit evidence.

Qualifications

• 4-6 years in IT, with at least 2 years beyond frontline support in a systems, infrastructure, or IT engineering capacity
• Deep hands-on administration across macOS, Windows, and Linux, including Ubuntu in an engineering environment
• Production experience administering an identity or directory platform — JumpCloud— including group design, SSO integrations, and conditional access or MFA policy
•   Strong Google Workspace administration, beyond creating and deleting users
• Working networking knowledge you can apply without supervision: VLANs, routing, firewall rules, DNS, DHCP, VPN, and Wi-Fi design and troubleshooting
• Scripting for automation in Bash, PowerShell, or Python, and comfort working against vendor APIs
•  Experience with MDM and endpoint management, including policy design and compliance reporting
• Track record of improving an environment rather than only maintaining it — point to something you built, automated, or migrated
• Clear written communication and strong documentation habits
• Bachelor's degree in computer science, information technology, or a related field, or equivalent hands-on experience
• Comfortable in a fast-paced, cross-functional environment with shifting priorities

Bonus Qualifications

• Virtualization or containerization in production: Docker or Proxmox
• Infrastructure-as-code or configuration management (Terraform, Ansible, Jamf scripting)
• Experience supporting a compliance or audit program, particularly ISO 27001 or SOC 2 control evidence
• Experience in a hardware, robotics, manufacturing, or lab environment
• Cloud infrastructure exposure (AWS, GCP)
• Certifications such as CompTIA Network+ or Security+, or a vendor equivalent

Benefits & Perks

• Health benefits (Medical, Dental, Vision) through Aetna, Kaiser Permanente, and Guardian, with multiple plan tiers to choose from
• Ancillary benefits including accident, critical illness, and hospital indemnity plans (Voya)
• Company-paid basic life insurance, plus voluntary (supplemental) life for you and your dependents
• Short-term and long-term disability insurance, fully paid by Cyngn
• HSA and FSA (Health & Dependent Daycare)
• Employee Assistance Program
• 1:1 Health Concierge
• Company 401(k)
• Commuter Benefits
• Flexible PTO policy
• Paid Parental Leave
• Daily lunches for in-office employees and fully-stocked kitchen with snacks and beverages

What You Can Expect (Cyngn’s interview process) 

• A real person will review your application
• We’ll kick off the process with a one-sided video interview where you’ll share a little more about yourself and we’ll get some basic questions out of the way
• A Recruiter touch point will go over the process in more detail and answer your questions
• A 45-minute interview with the hiring manager
• A full-loop interview process consisting of 3-4 additional conversations to gauge technical and soft skills and culture fit. 
• A final onsite interview with the team.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Equal Opportunity Employer

Cyngn is an Equal Opportunity Employer. We are committed to providing equal employment opportunities to all employees and applicants without regard to race, color, religion, sex (including pregnancy, childbirth, and related medical conditions), sexual orientation, gender identity or expression, national origin, ancestry, age, physical or mental disability, genetic information, marital status, familial status, military or veteran status, citizenship status, or any other characteristic protected by applicable federal, state, or local law. This policy applies to all aspects of employment, including recruitment, hiring, compensation, benefits, training, promotion, discipline, and termination.

If you require accommodation during the application or interview process due to a disability, please let us know by reaching out to peopleops@cyngn.com and we will work with you to provide reasonable accommodation.

A Note on Recruitment Scams

We've seen an increase in fraudulent job offers and phishing attempts impersonating real companies, including Cyngn.

To protect yourself:

• All official communication from Cyngn recruiters and hiring managers will come from an email address ending in @cyngn.com. We will never contact you from a personal email (Gmail, Yahoo, etc.) or via unsolicited text message or messaging app.
• Cyngn will never ask you to pay for equipment, training, background checks, or any other fees as part of the application or hiring process.
• We will never ask for sensitive personal or financial information (e.g., bank account or Social Security number) before you've been extended and have accepted a formal offer through official channels.
• If you receive a suspicious message claiming to be from Cyngn, please do not respond with personal information, and feel free to verify by reaching out to us directly through our official careers page.