IT Engineer

This is a fully remote position, open to applicants in United States, +3 more locations.

📋 Description

• Take ownership of corporate IT processes from start to finish, encompassing identity management, devices, SaaS, and compliance for over 200 devices across the US, UK, Canada, and India.

• Develop workflows utilizing Python, Bash, APIs, Okta Workflows, and AI coding tools to streamline repetitive IT tasks.

• Manage the joiner, mover, and leaver lifecycle in collaboration with People Ops through Rippling, Okta, and SCIM.

• Perform access reviews and transition lifecycle management from ticket-based systems to policy-driven automation.

• Oversee the administration of Okta, Google Workspace, Slack, and Atlassian tools.

• Set up Single Sign-On (SSO) using SAML/OIDC, SCIM, and Multi-Factor Authentication (MFA) across various applications.

• Supervise the Mac fleet through Kandji, including enrollment, automated OS updates, encryption standards, and ongoing drift detection.

• Programmatically maintain SaaS inventory and usage, automatically reclaiming unutilized licenses.

• Continuously generate evidence for SOC 2, ISO 27001, and AI governance frameworks.

• Keep runbooks, a knowledge base, and an integration registry up to date.

• Provide Tier 1/2 support within established Service Level Agreements (SLAs).

• Assist Finance and HR departments with tool access, licensing, renewals, and billing issues.

• Automate the onboarding and offboarding processes from end to end.

• Collaborate closely with the Information Security team.

⛳️ Requirements

• 2–4 years of experience in IT systems, endpoint management, or identity engineering.

• Practical experience with Okta (or a similar Identity Provider) and Google Workspace administration.

• Familiarity with SSO, SAML, OIDC, and SCIM protocols.

• Experience in managing Mac endpoints (Kandji or comparable solutions).

• Proficiency in Python or Bash scripting.

• At least one completed automation project that can be discussed during an interview.

• Strong troubleshooting skills across identity, SaaS, and networking issues.

• Ability to produce precise documentation, communicate clearly in writing, and exercise sound judgment regarding security and compliance risks.

• Hands-on experience with AI coding tools.

• Nice to have: Familiarity with Okta Workflows or an integration Platform as a Service (iPaaS) such as Workato, Tines, or Zapier.

• Nice to have: Experience with SOC 2 / ISO 27001 standards.

• Nice to have: Administration experience with AWS/GCP or Terraform.

• Nice to have: Certifications in Okta or Kandji.

🏝️ Benefits

• Variable compensation may be available for certain roles.

• Equity may be available for certain positions.

• Benefits may be provided for specific roles.

• Clear advancement opportunities into the field of security engineering.

• Commitment to equal employment opportunities.