Senior IT Operations Engineer

Accountabilities:

• Design, build, and maintain automation and integrations across AWS, Google Cloud Platform (GCP), and enterprise applications using services such as AWS Lambda, API Gateway, REST APIs, webhooks, and integration platforms.

• Own and improve automation workflows using Okta Workflows, Workato, and related technologies, identifying opportunities to eliminate repetitive tasks and streamline internal processes.

• Define infrastructure as code using Terraform or similar tools and deploy changes through CI/CD pipelines, maintaining reliable, repeatable, and secure infrastructure.

• Develop and maintain scripts in Python, Go, Node.js, or other suitable languages to connect systems, resolve workflow issues, and support business-critical processes.

• Manage integrations across business applications, including connections involving Salesforce, Slack, Jira, identity platforms, and data warehouses.

• Implement and maintain backup and recovery processes for critical systems, including Jira, GitHub, and automation platforms.

• Lead the rollout and ongoing administration of enterprise AI tools, including Claude and other approved assistants, connectors, and internal agents.

• Host and govern Model Context Protocol (MCP) servers and related infrastructure, assessing each connector’s access scope, security implications, and suitability before deployment.

• Administer identity and access management platforms, including Okta and Auth0, with responsibility for authentication, provisioning, access policies, MFA, device trust, SCIM, and joiner-mover-leaver processes.

• Integrate identity platforms with access governance solutions and support the implementation of appropriate role-based access controls and security practices.

• Manage security and edge services, including DNS, public key infrastructure (PKI), web application firewalls, rate limiting, certificates, and email authentication protocols such as SPF, DKIM, and DMARC.

• Support customer-facing web infrastructure, including CloudFront-hosted sites, coordinate hosting changes with external web agencies, and collaborate with security teams on technical findings.

• Administer workplace collaboration and productivity platforms, including Google Workspace, Jira Service Management, Confluence, Slack, and GitLab, while coordinating with owners of other enterprise applications.

• Resolve Tier 2 and Tier 3 service desk escalations, troubleshoot Windows and macOS devices, manage vendor support cases, and collaborate on device-management and access policies.

• Maintain clear technical documentation, including runbooks, architecture notes, process guides, handoff materials, and accurate inventories of hardware, software, and IT resources.

• Manage relationships with IT vendors and contractors, identify operational weaknesses, and continuously improve infrastructure reliability, scalability, security, and maintainability.

• Serve as a North American point of contact for urgent IT requests, escalations, and production incidents when other members of the global team are unavailable.

• Exercise independent judgment, lead projects from initial requirements through rollout, and balance planned engineering work with operational support needs.

Requirements:

• At least 7 years of experience in IT operations, DevOps, cloud engineering, identity and access management, or a related technical field, including at least 2 years focused on IT process automation. Equivalent experience may be considered.

• Hands-on experience administering Okta, including Okta Workflows, and working with Auth0 custom logic such as Actions or rules.

• Working knowledge of AWS services, including Lambda, API Gateway, CloudFront, and IAM, along with GCP environments, projects, IAM, and BigQuery.

• Experience building and maintaining integrations using Workato or a comparable integration platform as a service (iPaaS).

• Proficiency in at least one automation or scripting language, such as Python, Go, or Node.js, with practical experience using REST APIs and webhooks.

• Experience with infrastructure as code, using Terraform, Pulumi, or similar technologies, and with CI/CD pipelines, preferably GitLab.

• Practical experience with Claude or comparable large language model tools, connectors, and MCP servers, including an understanding of the associated security and access-control considerations.

• Experience managing Cloudflare services, including DNS, certificates, or Workers, and strong Google Workspace administration skills.

• Solid understanding of single sign-on technologies, including SAML and OIDC, as well as MFA, SCIM, role-based access control, DNS, and email authentication.

• Familiarity with mobile device management platforms such as Kandji or Microsoft Intune, along with experience troubleshooting Windows and macOS endpoints.

• Strong analytical and problem-solving skills, attention to detail, and the ability to investigate complex technical issues across interconnected systems.

• Excellent written and verbal English communication skills, with a commitment to clear documentation and effective technical handoffs.

• Sound judgment and discretion when handling confidential information, identity data, security-sensitive systems, and internal business information.

• Ability to work independently with limited oversight, establish technical direction, prioritize competing demands, and lead projects through successful implementation.

• A security-first mindset, with the ability to assess access permissions, anticipate risks, and design automation around business needs and employee experience.

• A generalist mindset and willingness to learn new tools and technologies across identity, cloud infrastructure, security, automation, and enterprise SaaS.

• Preferred experience with Salesforce Apex or Flow, custom MCP servers, AI agent frameworks, SQL, and data platforms such as BigQuery, Snowflake, or Databricks.

• Additional experience with Azure or other public cloud platforms, SaaS security and access governance tools, HRIS-driven provisioning, SOC 2 or ISO 27001, and vulnerability management is beneficial.

• Relevant certifications in AWS, GCP, Okta, or related technical disciplines are an advantage.

• Authorization to work in the United States without employer-sponsored visa support is required, and candidates should ideally be located in the Eastern United States.

Benefits:

• Base salary: $145,000–$165,000 USD annually.

• Annual bonus opportunity: 13%–15%, in addition to base compensation.

• Remote work: Remote position for candidates based in the United States, with a preference for the Eastern Time Zone.

• Technical ownership: Opportunity to lead projects independently, set technical direction, and influence the design of internal systems and automation.

• Broad technical exposure: Hands-on work across cloud platforms, identity management, cybersecurity, AI enablement, integrations, and enterprise productivity tools.

• Collaborative environment: Work with a global IT team and cross-functional partners in Security, Engineering, People, Support, and other business functions.

• Professional development: Opportunities to expand technical expertise and contribute to emerging AI-enabled workflows and modern IT operations practices.

• Inclusive culture: A workplace committed to collaboration, innovation, diversity, equality, and ensuring every team member feels heard and valued.