IT Systems Engineer

Responsibilities

We are representing a confidential cloud platform organization seeking an IT Systems Engineer to transform their identity and access management layer from functional to exceptional. Reporting to the IT Director, you will own the identity plane end-to-end, ensuring access is automated, governed, and audit-ready by default.

In this role, you will:

• Identity and access management: Own the identity provider (Okta or similar) as the backbone of access control, managing SSO integrations, MFA policies, device trust, directory hygiene, group management, and breakglass access. Maintain joiner-mover-leaver flows synchronized with the HR system.
• Lifecycle and access automation: Build and maintain automated provisioning and deprovisioning workflows using tools like Okta Workflows and n8n. Manage access configuration as code and ensure SCIM provisioning stays synchronized with the HR system.
• Process and governance: Establish clear, documented procedures around identity operations so access requests, approvals, and reviews follow consistent paths rather than ad hoc processes.
• Internal IT systems and SaaS administration: Own the internal systems stack end-to-end. Integrate and secure the SaaS ecosystem, administer Google Workspace as the core collaboration suite, and manage application validation processes.
• Compliance engineering: Implement and evidence access controls for ISO 27001 and SOC 2 Type 2, working with the Security team to ensure access reviews and audit logs are automatic by-products of well-architected systems.
• Endpoint and device management (shared): Partner on MDM administration (JumpCloud or similar) across macOS, Windows, and Linux, collaborating with IT Operations to scale endpoint coverage.
• Flexible support: As part of a small, growing IT team, adapt to evolving needs and support adjacent systems work across the wider IT function.

What We're Looking For

Required qualifications:

• Identity expertise: Deep, hands-on experience with Okta or comparable identity providers, including SSO, SCIM, lifecycle automation, and API-driven provisioning
• IT experience: Typically 5+ years in IT systems, identity, or access engineering, preferably in developer-heavy or engineering-led environments
• Automation skills: Proficiency building automation with Okta Workflows, n8n, or similar tools; comfortable with APIs, webhooks, and scripting in Python or comparable languages
• Process optimization: Track record bringing order to rapidly-grown environments through clear procedures, standardization, and thorough documentation
• SaaS-first operations: Experience running and integrating SaaS-based environments where identity and APIs are paramount
• Compliance fluency: Hands-on work with ISO 27001 or SOC 2 (ideally Type 2) and understanding of continuous evidence requirements for auditors
• Remote collaboration: Ability to work independently in fully remote teams with clear communication across technical and non-technical audiences
• Google Workspace administration: Hands-on experience managing users, groups, policies, and security settings in Google Workspace
• Flexible working style: Comfortable wearing multiple hats in a small IT team and adapting as priorities shift

Bonus qualifications:

• Experience managing configuration through Git-based workflows or infrastructure as code (Terraform)
• Professional proficiency in French

Location: Remote position open to candidates in Canada, Spain, Germany, or the United Kingdom. Must be legally authorized to work in one of these countries; visa sponsorship is not available.

How We Work With You

When you apply through Get A Job.ai, our talent team will conduct an initial screening to understand your background and fit for this role. If we move forward together, we will submit your profile to our client for consideration. Please note that you should apply exclusively through Get A Job.ai and not contact the client organization directly during this process.

Our client's interview process includes four video interviews: an initial conversation with Talent Acquisition, followed by meetings with the IT Director, team members, and executive leadership. All roles require background checks.

Pay

Pay details will be discussed during the screening process based on experience and location.

Equal Opportunity: Get A Job.ai is committed to inclusive hiring practices. We welcome candidates from all backgrounds and provide accommodations throughout our recruitment process upon request.