Lead IT Systems Engineer

About the role

We are a remote‑first company of 250 people spread across 50 countries. As the Lead IT Systems Engineer you will own the end‑to‑end workforce identity and endpoint security lifecycle, ensuring that hiring, role changes, and departures are reflected automatically in our systems.

Key responsibilities

• Design and implement identity lifecycle automation using the HRIS (Workable) as the single source of truth.
• Build and maintain joiner/mover/leaver workflows with Okta, Workable API, Okta Workflows and custom middleware.
• Define and manage the entitlement model, handling complex cases such as contractors, EOR workers, re‑hires and country‑specific rules.
• Govern access across SaaS applications (Okta, Google Workspace, Slack, Confluence, Jira, etc.) and run SOC 2/ISO 27001‑compliant access reviews.
• Manage the macOS device fleet in Jamf, enforce patching, encryption and device compliance, and tie device posture to access controls.
• Implement secure remote access solutions (e.g., Tailscale, Cloudflare Zero Trust) and improve existing VPN‑style approaches.
• Provide identity and endpoint evidence for security audits, set up alerting for suspicious activity, and write runbooks for fast, provable off‑boarding.

Required profile

• Deep hands‑on experience as an Okta administrator.
• Strong background in identity lifecycle automation and HRIS integrations.
• Proven ability to design entitlement models and manage access governance at scale.
• Experience with macOS device management (Jamf) and modern zero‑trust networking.
• Familiarity with SOC 2 and ISO 27001 audit requirements.

Required skills

• Okta (admin, Workflows)
• Workable API
• Jamf (macOS fleet management)
• Tailscale or Cloudflare Zero Trust
• SCIM, API integration, scripting
• MFA implementation
• Google Workspace, Slack, Confluence, Jira