Senior IT Systems Engineer

This is a fully remote position, open to applicants in Canada, +4 more countries.

📋 Description

• Enhance identity and access services utilizing Okta, which includes features such as single sign-on, automated account provisioning, multi-factor authentication, access policies, and emergency access.

• Oversee the administration and enhancement of Google Workspace, focusing on users, groups, Gmail, Drive, shared drives, and security settings.

• Assist in the rollout and continuous development of JumpCloud device management across macOS, Windows, and Linux platforms.

• Define and execute device configurations, security policies, software deployment, and onboarding processes together with IT Operations and Security.

• Design and refine onboarding, role transitions, and offboarding processes across identity, devices, and SaaS applications.

• Utilize Okta Workflows, n8n, Python, and APIs to minimize manual tasks and enhance process reliability.

• Evaluate systems to identify gaps, investigate complex issues across connected services, address root causes, and implement enhancements.

• Administer essential internal tools and assess new applications.

• Establish protocols for application setup, integrations, access requests, approvals, and access reviews.

• Collaborate with Security, Risk, and Audit teams to implement and maintain controls that support ISO 27001 and SOC 2 Type 2 compliance.

• Automate evidence gathering when feasible.

• Lead projects from initial scoping and technical design to rollout and handover.

• Coordinate dependencies, communicate risks and progress, and mentor colleagues through documentation, peer reviews, and knowledge sharing.

• Report directly to the IT Director.

⛳️ Requirements

• Hands-on experience with identity, collaboration tools, endpoint management, and SaaS administration.

• Strong proficiency in at least one of Okta, Google Workspace, or JumpCloud, with the capability to navigate across the others.

• Experience in deploying or significantly upgrading a Mobile Device Management (MDM) or endpoint management platform.

• Ability to convert security and operational requirements into practical configurations, test them, and implement them with minimal disruption.

• Proven experience in building reliable automation using workflow tools, APIs, webhooks, and Python or a similar scripting language.

• Understanding of error handling, monitoring, and ongoing maintenance practices.

• A track record of evaluating, enhancing, and delivering systems or processes with measurable outcomes.

• Capacity to work independently, make informed technical decisions, articulate trade-offs, and take ownership of responsibilities.

• Experience in implementing controls such as access reviews, secure configurations, or device policies.

• Knowledge of documenting and demonstrating the effectiveness of security controls.

• Strong communication and collaboration skills in a fully remote, multicultural environment.

• Typically requires six or more years in IT engineering, systems administration, identity, or endpoint management, with increasing responsibility for technical decisions and project execution.

• Equivalent experience is deemed more valuable than a specific duration of years.

• Must be legally authorized to work in Canada, France, Germany, Spain, or the United Kingdom.

• Completion of a background check is required.

• Professional proficiency in French is a plus.

🏝️ Benefits

• Flexible PTO.

• Comprehensive healthcare coverage (UK, Canada, France, Spain).

• Company stock options.

• Professional development budget.

• Office equipment budget.

• Wellness budget.

• Annual team gatherings.

• Inclusive parental leave.

• Remote work travel program.

• Flexible, open, and inclusive work environment.

• Remote work support and collaboration with a diverse global team.