Senior IT – Corporate Engineering

Key Responsibilities

• Own IT and corporate engineering end to end, including roadmap, budget, vendor relationships, and outcomes
• Report directly to the CTO
• Manage the external IT partner, define scope, set SLAs, enforce delivery, and own escalations
• Design joiner, mover, and leaver processes and the entitlement model
• Administer and improve Okta, Google Workspace, and the surrounding SaaS estate, including SSO, SCIM, groups, and roles
• Own device standards, access-request workflows, SaaS onboarding, procurement review, and operational policy
• Build automation for provisioning, access reviews, asset and license reconciliation, and internal tooling
• Run endpoint and MDM programs across a distributed, increasingly international company
• Own corporate security posture, including conditional access, MFA, session and device rules, privileged access, endpoint posture, and third‑party OAuth and Workspace grant reviews
• Design and deliver security awareness and training programs
• Partner with security engineers responsible for product and infrastructure security
• Work closely with People, Finance, and Legal on onboarding, offboarding, spend, and audit evidence
• Serve as an internal service by publishing ownership, responding to requests, and proactively removing friction

Requirements

• Roughly 6+ years of substantial hands‑on experience owning IT or corporate engineering at a growing company
• Experience as the most senior person doing the IT or corporate engineering work
• Deep hands‑on ownership of an identity provider such as Okta, Entra, JumpCloud, or similar
• Experience with SSO, SCIM, SAML, group and entitlement modeling
• Practical experience running Google Workspace or Microsoft 365 as a platform
• Real MDM and endpoint experience across macOS, ideally Windows, in a remote or hybrid company
• Automation ability in Python, Go, TypeScript, or similar
• Comfort with APIs and identity plumbing
• Experience designing access models and running access reviews
• Experience setting MFA or conditional access policy, tightening privileged access, or reviewing third‑party app grants
• Track record managing an outsourced IT provider or MSP
• Clear written communication for asynchronous and cross‑team work
• Ability to work as the only person in the function and as a hands‑on senior individual contributor
• Strongly preferred: experience in SOC 2, PCI, or bank partnership environments
• Strongly preferred: experience supporting employees and contractors across multiple countries
• Strongly preferred: experience introducing and governing AI tooling internally

Core Competencies

Demonstrates extensive experience in IT and corporate engineering, with a strong focus on identity management, security posture, and automation. Proficient in managing vendor relationships and cross‑functional collaboration to enhance operational efficiency and security compliance.

Highest-signal resume keywords

• Okta Administration
• SSO Implementation
• Google Workspace Management
• Automation in Python
• MFA Policy Setting

Hard Skills

• Identity Provider Management
• SCIM
• SAML
• Access Model Design
• Endpoint Management
• MDM Experience
• Automation in Go
• Automation in TypeScript
• Access Review Execution
• Privileged Access Management

Soft Skills

• Clear Written Communication
• Cross-Team Collaboration

Industry Keywords

• SOC 2
• PCI
• AI Tooling Governance
• Remote Work Experience
• International Employee Support

Tools & Technologies

• Google Workspace
• Microsoft 365
• Okta
• Entra
• JumpCloud