IT Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Take charge of identity and access engineering in Okta, encompassing group strategy, application assignments, SSO configuration, lifecycle automation, and secure access request patterns.

• Oversee endpoint engineering for a macOS-first fleet in Workspace ONE, including provisioning, configuration baselines, patch management, encryption posture, inventory maintenance, and compliance reporting.

• Manage Google Workspace and Slack on a large scale, focusing on user lifecycle, groups, shared drives, permissions, roles, and governance.

• Implement governance across the SaaS ecosystem, addressing tool ownership, access, costs, and transitions when employees change roles or depart.

• Develop automation for onboarding, deprovisioning, access reporting, device compliance, and routine IT tasks.

• Convert security, compliance, and engineering requirements into IT controls that produce audit evidence.

• Act as the technical escalation point for complex identity, access, endpoint, and internal infrastructure challenges.

• Collaborate effectively with Security, Engineering, People, and Finance teams.

• Assist with SOC 2, ISO 27001, and PCI audit-scope requirements.

⛳️ Requirements

• A minimum of 4 years in IT engineering, IT operations, systems administration, endpoint engineering, or identity engineering.

• Proven experience administering Okta or a similar identity provider as the owner, including SSO, groups, application assignments, lifecycle workflows, and access management decisions.

• Practical experience with modern MDM solutions, such as Workspace ONE or equivalent, including provisioning, configuration enforcement, patching, encryption, and inventory management.

• Strong expertise in Google Workspace administration.

• In-depth knowledge of macOS endpoints.

• Experience in building or significantly enhancing operational workflows, automation, reporting, or internal controls.

• Exceptional writing skills, capable of clearly articulating technical decisions and documenting systems.

• Strong sense of ownership and judgment; ability to prioritize tasks in uncertain situations.

• Willingness to remain actively involved in an individual contributor capacity.

• Proficient in writing code that is efficient, reliable, and practical.

• Capable of addressing challenging technical issues.

• Diligent work ethic with the ability to build and ship quickly.

• Ability to clearly communicate complex technical concepts.

• Quick learner of new languages and tools.

• Familiarity with security and compliance frameworks such as SOC 2, ISO 27001, PCI, access reviews, audit evidence, or control implementation is advantageous.

• Knowledge of EDR, disk encryption, patch compliance, vulnerability management, and access hygiene is beneficial.

• Experience with scripting and automation using Bash, Python, Google Apps Script, Okta Workflows, or raw APIs is a plus.

• Experience designing IT processes across different time zones for globally distributed teams, including international hardware logistics, is a plus.

• Legal authorization to work in the US or your country of residence is required.

• Must specify if future sponsorship support is needed.

🏝️ Benefits

• Competitive salary.

• Equity package.

• Health benefits.

• Dental benefits.

• Vision benefits.

• Flexible vacation policy.

• Remote work environment with the necessary equipment provided.

• Opportunity to create something genuinely impactful for the world.

• Collaborate with world-class engineers in an open environment.