Senior IT Systems Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Manage and secure Okta or a similar identity/SSO provider, which includes authentication policies, access provisioning, and integrations with downstream applications.

• Design, manage, and secure the company's email and collaboration platform.

• Set up mail flow rules, spam/phishing filtering, DKIM, DMARC, SPF, and data loss prevention policies.

• Oversee operations, monitoring, and incident response for network, email, and identity security measures.

• Administer firewall policies and threat detection systems.

• Assess incidents and either remediate or escalate them in accordance with incident response protocols.

• Work collaboratively with Security and Help Desk teams to resolve escalated connectivity challenges.

• Assist with employee onboarding and offboarding processes.

• Analyze and suggest enhancements to identity architecture, email security posture, and associated tools.

• Administer and maintain switches, routers, firewalls, and wireless access points.

• Provide support for a distributed workforce through capacity planning and performance monitoring.

• Design and implement VLAN, routing, and firewall rule modifications while minimizing business disruption.

• Ensure accurate documentation of network topology, configurations, and email/identity security architecture.

• Manage vendor partnerships and support agreements for network, firewall, identity, and email security tools.

• Exhibit a commitment to integrity, process enhancement, and customer satisfaction.

⛳️ Requirements

• 3–5 years of experience in systems administration, identity/security engineering, or network administration.

• Practical experience managing an identity/SSO platform like Okta, covering access policies and application integrations.

• Proficient in configuring and maintaining SPF, DKIM, DMARC, anti-phishing, and anti-spam measures.

• Experienced in administering a cloud email/collaboration platform such as Google Workspace or Microsoft 365.

• Hands-on experience with enterprise network infrastructure management, including switches, routers, firewalls, and VPN.

• Familiarity with network segmentation, firewall policy management, and VPN architecture.

• Proven ability to troubleshoot complex network, identity, and email connectivity challenges with minimal escalation.

• Skilled in documenting configurations, architecture diagrams, and operational runbooks.

• Capacity to scope and manage moderately complex projects from inception to completion with minimal guidance.

• Experience in supporting a distributed or remote-first workforce.

• Familiarity with identity/SSO platforms like Okta.

• Knowledge of email security gateways or anti-phishing tools such as Proofpoint or Mimecast.

• Experience with Google Workspace, Microsoft 365, or similar platforms.

• Familiarity with enterprise firewalls such as Palo Alto or Fortinet.

• Experience with routing and switching technologies like Cisco or Meraki.

• Knowledge of network monitoring tools.

• Relevant certifications such as Security+, CCNA, CCNP, or Okta certifications are a plus.

• Familiarity with SASE/SSE platforms or Zero Trust network architecture is advantageous.

• Experience in automating identity, network, or email security tasks using Python, PowerShell, or similar languages is beneficial.

• Experience in high-growth SaaS or cybersecurity companies is a plus.

• Must be legally authorized to work in the United States; employment visa sponsorship may be necessary to disclose.

🏝️ Benefits

• Equity package in the form of stock options for all full-time positions.

• Health, vision, and dental insurance for you and your family.

• Flexible vacation policy.

• Generous parental leave.

• Opportunities for career development.

• An inclusive and collaborative culture.

• Remote and hybrid work options based on role and location.

• Up to 15% travel may be necessary.