Senior IT Engineer

This is a fully remote position, open to applicants in Australia.

📋 Description

• Take full ownership of identity management from start to finish: Utilize Okta as the Identity Provider (IdP), manage SAML/OIDC app federation, oversee SCIM, handle birthright access and group pushes, implement Okta Workflows, and manage the lifecycle connecting our HRIS to all downstream systems.

• Manage Google Workspace across multiple domains and entities: Oversee organizational units, aliases, groups, and routing rules, automate license reclamation, reconcile billing prior to renewals, and troubleshoot email delivery issues behind an email security gateway.

• Oversee device management for a predominantly macOS fleet: Implement Apple Business Manager with zero-touch enrollment, create MDM blueprints and control OS versions, renew push certificates annually, manage EDR, and verify devices through Cloudflare Zero Trust.

• Enhance and maintain our automation systems: Develop the Cloudflare Worker for non-SCIM provisioning (creating handlers for new applications), work with Okta Workflows, configure code-based group synchronization into PagerDuty and Slack, and build low-code automations for tasks like Slack channel governance. Proficiency in LLM coding tools is required.

• Ensure our AI support agents remain effective by updating the SOP library they utilize and maintaining accurate ticket records, as completed tickets form the data we analyze to determine future automation opportunities. The aim is to keep Tier-1 support self-service and facilitate Tier-2 access requests similarly.

• Manage hardware logistics for a distributed team: Coordinate procurement with our warehouse vendor, implement automated retrieval kits when available, and handle international shipping where they are not, including customs invoices and lithium battery declarations. Utilize AppleCare for repairs instead of ad hoc replacements, and maintain accurate asset records in an API-synced inventory system throughout every checkout, return, and redeployment.

• Administer the organizational collaboration suite: Oversee Slack workspace and retention management, configure Notion enterprise settings including SCIM and legal holds, and manage the master and service accounts for our smaller legal entities.

• Monitor and minimize SaaS expenditures: Conduct license audits, manage seating before grants rather than post, eliminate unnecessary tools, and make decisions on whether to build or buy solutions — we favor developing small internal tools when an LLM and an afternoon can replace a vendor contract.

⛳️ Requirements

• Several years of IT engineering experience, including a role as the senior or sole owner of a company's IT environment rather than being just one team member in a large group.

• Extensive, practical experience with Okta: Integrating applications via SAML and OIDC, managing SCIM provisioning, implementing push groups, utilizing Okta Workflows, and overseeing lifecycle management driven by an HRIS.

• Google Workspace administration at a super-admin level, preferably across multiple domains or entities, including the less glamorous aspects: routing rules, email log forensics, and addressing group permission nuances.

• Real-world MDM experience (Kandji or similar) along with Apple Business Manager, and a familiarity with endpoint security tools.

• Capability to read, modify, and deploy changes to small production codebases — specifically TypeScript in our case — using LLM coding tools. While you don’t need to be a software engineer, your instinct should be to automate processes.

• A strong focus on security and compliance: Ensure offboarding effectively removes access, manage credentials and recovery processes according to protocols, act only on official tickets, and exercise discretion regarding retention settings or legal holds without prior approval.

• Ability to work independently: Prioritize your own tasks, decline low-value interruptions, and track your time effectively to automate recurring issues. Some weeks may involve processing FedEx customs forms, which should be managed with the same diligence as identity management tasks.

• Nice to have: Experience with Cloudflare Zero Trust, global remote hardware logistics, or a background in cryptocurrency or iGaming.

🏝️ Benefits

• Remote work options