IT Systems Engineer

This is a fully remote position, open to applicants in Canada.

📋 Description

• Take ownership of Okta as the central framework for user access, overseeing the app catalog (SSO integrations for new SaaS applications), policy management (MFA, device trust), and directory upkeep (Universal Directory, group management, breakglass access).

• Automate the provisioning and deprovisioning processes to ensure access is granted and revoked automatically, rather than manually. Develop and maintain workflows utilizing tools like Okta Workflows and n8n, manage access configurations as code, and ensure SCIM provisioning aligns with our HR system.

• Establish and standardize clear procedures related to the identity framework, ensuring that access requests, approvals, and reviews adhere to a uniform, documented process rather than an ad hoc approach.

• Manage our internal systems comprehensively. Integrate, secure, and validate our SaaS ecosystem, oversee Google Workspace as our primary collaboration suite, connect our tools via Okta and our HR system, and manage the application validation process.

• Implement and provide evidence for access controls aligned with ISO 27001 and SOC 2 Type 2 standards in collaboration with our Security team, ensuring access reviews and audit logs are a natural output of well-structured systems rather than a rushed quarterly task.

• Collaborate on the administration of Jumpcloud, our MDM solution across macOS, Windows, and Linux, sharing endpoint and device management responsibilities with our IT Operations and Endpoint Manager to ensure coverage scales with the team.

• As part of a small, growing IT team, your responsibilities will evolve over time. You are willing to take on related systems work and assist across the broader IT function as our needs change.

⛳️ Requirements

• Extensive, hands-on experience with Okta or a similar identity provider, encompassing SSO, SCIM, lifecycle automation, and API-driven provisioning.

• Typically, 5 or more years of experience in IT systems, identity, or access engineering, including time spent in a developer-oriented or engineering-driven environment.

• You are adept at building automation with tools like Okta Workflows, n8n, or similar, are comfortable with APIs and webhooks, and can script in Python or a comparable language.

• You bring organization to environments that have expanded rapidly. You document clear procedures, standardize processes, and leave systems better documented than you found them.

• You have experience running and integrating a SaaS-based environment, where identity and APIs are more significant than physical servers and networks.

• Familiarity with ISO 27001 or SOC 2, preferably Type 2, where evidence is continuously monitored, and you understand the requirements of auditors.

• You work effectively without close supervision in a fully remote setting and communicate clearly with both technical and non-technical colleagues.

• Hands-on administration of Google Workspace is essential for this role, encompassing users, groups, policies, and security settings.

• You are comfortable taking on multiple roles in a small IT team, engaging with related systems and endpoint tasks, and adapting as priorities shift.

🏝️ Benefits

• Flexible PTO

• Comprehensive healthcare coverage (UK, Canada, France, Spain)

• Company stock options

• Professional development budget

• Office equipment budget

• Wellness budget

• Annual team gatherings

• Internet reimbursement

• Inclusive parental leave

• Remote work travel program