Senior IT Engineer, IAM – Platform Management

This is a fully remote position, open to applicants in United States.

📋 Description

• Take full ownership of identity and access management as a dedicated discipline, encompassing SSO, entitlement governance, and access automation.

• Manage the administration of the Atlassian/Jira/Confluence platform, which includes overseeing the ITDESK project.

• Identify, suggest, and implement enhancements for the platform.

• Proactively mitigate platform and identity risks through effective architecture and automation strategies.

• Configure and manage Okta SSO, MFA policies, and lifecycle workflows.

• Design and conduct regular access reviews, addressing any outdated or excessive access.

• Govern access for contractors and non-employees, including time-limited access, approval workflows, and enforcement of offboarding procedures.

• Integrate and oversee third-party application SSO connections while troubleshooting identity-related issues.

• Ensure security compliance of identity systems in collaboration with the Information Security team.

• Develop and maintain automated workflows for provisioning, deprovisioning, and access reviews.

• Investigate and resolve gaps in automation processes.

• Configure Jira projects, workflows, permission schemes, and automation rules effectively.

• Administer Confluence spaces, manage permissions, and uphold documentation standards.

• Provide support for Bitbucket configuration and access as necessary.

• Assess and recommend tools, integrations, and automation solutions for identity governance and platform scalability.

• Maintain technical documentation for audit purposes, onboarding, and incident response.

• Collaborate with Information Security and the Manager of IT Operations on risk management, prioritization, escalation, and coordination efforts.

• Act as the primary technical contact for inquiries related to identity and the Atlassian platform.

• Transition recurring manual tasks towards automation or self-service solutions.

⛳️ Requirements

• A minimum of 5 years of experience in IT engineering or systems administration, with a focus on identity and access management and/or SaaS platform administration.

• Hands-on experience with administering Okta in a production setting, including SSO, MFA, and lifecycle automation.

• Proven experience managing Atlassian tools (Jira, Confluence) at an organizational scale, including the design of workflows and permissions.

• Familiarity with SAML/SSO concepts and access governance best practices.

• Basic understanding of scripting, automation tools, and API/webhook-based integrations.

• Excellent documentation skills and the ability to work autonomously on platform architecture decisions.

• Preferred: Experience in resolving identity-related security incidents or entitlement misconfigurations.

• Preferred: Familiarity with JumpCloud, Google Workspace administration, or AWS IAM.

• Preferred: Experience in designing access review processes or automated deprovisioning programs.

• Preferred: Bachelor’s degree in Computer Science, Information Systems, or equivalent experience.

• Preferred: Relevant certifications such as Okta Certified Administrator or Atlassian certifications.

🏝️ Benefits

• Equity for full-time employees.

• 401(k) match dollar for dollar, up to 4% of eligible pay.

• Comprehensive medical, dental, and vision plans, including coverage for pets.

• $10,000 per year allocated for education reimbursement.

• Employee Resource Groups available for support and networking.

• Flexible paid time off policy.

• Nine paid holidays throughout the year.

• A week-long break at the end of the year.

• Fourteen weeks of fully paid parental leave.

• An additional six weeks of paid childbirth recovery leave for birthing parents.

• Flexible return-to-work schedule options.

• A one-time $2,000 Calvin Care Cash incentive for employees welcoming new family members.

• Fully remote work opportunities available for US-based roles.

• Provision of hardware and software for home office setup.