Senior Corporate IT Engineer

This is a fully remote position, open to applicants in Spain.

📋 Description

• Take ownership of the corporate IT ecosystem from start to finish and steer the corporate IT strategy as Yuno expands.

• Manage the MDM platform for a distributed macOS and Windows environment, encompassing zero-touch provisioning, patching, configuration-as-code, and endpoint security.

• Oversee the identity provider, SSO, MFA, and SCIM; automate the onboarding and offboarding processes while enforcing least-privilege access.

• Administer the SaaS stack, including Google Workspace, Slack, and Atlassian; manage shadow IT, OAuth risks, licenses, and access control.

• Develop and uphold security and compliance measures, conduct access reviews, and provide audit evidence for SOC 2, PCI DSS, and ISO 27001.

• Create AI-driven IT and helpdesk automation, self-service lifecycle workflows, and machine-readable documentation.

• Replace manual tasks with scripting and workflow automation utilizing Python, Okta Workflows, or similar technologies.

• Take charge of provisioning, security, and governance for organizational AI tools, including access management and OAuth/shadow-AI risk oversight.

• Serve as the senior escalation point for intricate IT challenges, maintain runbooks and documentation, and mentor the IT team.

• Ensure the delivery of comprehensive automated onboarding/offboarding, fully managed and auditable device and SaaS access, and ongoing SOC 2 and PCI evidence within 6–12 months.

⛳️ Requirements

• A minimum of 5 years of experience in corporate IT, IT operations, or IT systems engineering, preferably in support of a distributed workforce.

• Proficient in MDM tools such as Jamf Pro, Intune, or Kandji for managing macOS and Windows fleets.

• Experience with identity providers like Okta, including SSO, MFA, and provisioning/deprovisioning processes.

• SaaS administration experience with platforms such as Google Workspace, Slack, Atlassian, and similar services.

• Knowledge of SaaS and OAuth governance practices.

• Direct support experience for SOC 2, ISO 27001, or PCI DSS, including conducting access reviews and providing audit evidence.

• Scripting and automation abilities using Python, JavaScript, PowerShell, or other workflow tools.

• Understanding of networking fundamentals including TCP/IP, DNS, DHCP, and VPNs.

• Advanced proficiency in written and spoken English.

• Preferred: Experience with AI-driven IT automation or helpdesk and agentic tooling; managing hardware lifecycle and IT asset management at scale; exposure to payments or fintech; knowledge of Zero Trust, PAM, and least-privilege access models.

• Nice to have: Experience with endpoint configuration-as-code; familiarity with securing and governing AI tools or agents; proficiency in Spanish.

🏝️ Benefits

• Competitive Compensation

• Remote Work — the flexibility to work from anywhere

• Home Office Bonus — a one-time allowance to create your ideal home office

• Work Equipment

• Stock Options

• Health Plan available wherever you are

• Flexible Days Off

• Opportunities for Language, Professional, and Personal Growth courses