IT Systems Administrator

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of Okta as the identity and access management platform, encompassing SSO, SCIM, group rules, profile mapping, authentication policies, MFA/FastPass, Device Trust, and administrative role scoping.

• Design and uphold RBAC, access-control matrices, birthright access, time-sensitive access, automatic revocation, and periodic access reviews.

• Oversee service and shared accounts, producing audit-ready documentation for SOC 2 and security assessments.

• Create, develop, and manage n8n, Okta Workflows, along with ticketing-platform automations and integrations.

• Automate the employee lifecycle, from pre-hire preparations through onboarding, role modifications, leaves, and offboarding.

• Collaborate with HR / People Ops on lifecycle data standards, trigger timings, start dates, role changes, leaves, and terminations.

• Establish self-service access requests featuring approval routing and automated provisioning.

• Manage macOS and Windows MDM, covering enrollment, profiles, compliance baselines, patching, application deployment, encryption, and hardware lifecycle.

• Maintain Okta Device Trust and enhance device-enrollment controls.

• Provide frontline support for Medely Help, addressing occasional password/MFA resets, troubleshooting issues, and remote machine replacements.

• Configure ticketing catalogs, forms, routing, categories, SLAs, privacy-aware inbox boundaries, and AI triage.

• Maintain the IT knowledge base and internal runbooks in Notion.

• Administer Zoom Workplace and Zoom Phone, managing SSO/SCIM, licensing, recordings, phone numbers, porting, call queues, IVR, routing, E911, compliance, and lifecycle automation.

• Enable and govern AI tools, LLM APIs, MCP connectors, and AI agents, ensuring access controls, data boundaries, logging, and human review.

• Manage Torii for SaaS discovery, shadow IT triage, application ownership, license reclamation, and renewal/consolidation decisions.

• Monitor Okta logs and administrative activity, support incident response, administer 1Password, and assist with security awareness and SOC 2 evidence collection.

• Design IT data architecture, establish sources of truth, synchronization patterns, dashboards, metrics, SaaS audits, renewals, and license reclamation.

• Oversee Notion teamspaces, permissions, SCIM/SSO, databases, forms, automations, and AI agents.

• Deliver provisioning gap reports, production automations, Torii reviews, Zoom audits, self-service access, automated lifecycle workflows, access reviews, device-trust coverage, and trusted IT operational dashboards.

⛳️ Requirements

• 4+ years of experience in IT operations, systems administration, or IT engineering within a SaaS-first, remote organization.

• Extensive, hands-on experience with Okta administration: SSO (SAML/OIDC), SCIM, group rules, attribute mapping, authentication policies, Device Trust, and Okta Workflows.

• Practical knowledge of MDM for both macOS and Windows, including ABM/ADE, Autopilot, compliance policies, and application deployment.

• Proficient in troubleshooting, securing, and deploying on both macOS and Windows platforms.

• Experience with Microsoft 365 / Office 365, covering licensing, application deployment, Entra ID basics, Google Workspace coexistence, and Office apps on macOS and Windows.

• Proven track record in building automations and integrations using n8n, Okta Workflows, Zapier/Make, or Workato with REST APIs, webhooks, and JSON.

• Hands-on experience with LLM APIs (Anthropic/OpenAI), MCP connectors, and AI agents, focusing on least privilege, sensitive data protection, human-in-the-loop controls, logging, and documentation.

• Solid understanding of least privilege principles, RBAC, joiner/mover/leaver processes, and SOC 2-compliant IT controls.

• Experience working alongside HR / People Ops in employee lifecycle management.

• Proficient in 1Password administration, including provisioning, vault design, permissions, policies, account recovery, and shared-credential governance.

• Security-focused mindset; comfortable analyzing authentication logs and identifying potentially risky configurations.

• Familiarity with SaaS management / shadow IT discovery tools such as Torii, Productiv, or Zluri.

• Administration experience with Google Workspace.

• Hands-on experience with Zoom and Zoom Phone administration, including licensing, SSO/SCIM, meeting and recording policies, number management and porting, call queues, auto receptionists, routing, and E911.

• Advanced ticketing platform administration experience, including workflows, routing, request forms and catalogs, SLAs, queues, and integrations.

• Ability to convey technical concepts in straightforward language and translate business needs into technical requirements and workflows.

• Strong technical and non-technical writing skills for runbooks, knowledge-base articles, and decision documents.

• Demonstrated reliability in ownership, deadline management, and proactive escalation of blockers.

• Self-motivated technical growth through platforms, certifications, side projects, or new tools.

• Okta Certified Professional is highly preferred.

• Okta Certified Administrator is highly preferred.

• Notion certification is highly preferred.

• If not already Okta Certified, complete Okta Professional and Administrator certification within the first 6 months.

🏝️ Benefits

• 401k

• Medical, dental, and vision insurance

• Flexible and unlimited PTO

• Paid parental leave

• Equity

• Remote work

• Okta Expert Learning Pass and training available for required certifications