IT Systems Engineer

Role Overview

IT Systems Engineer (Remote)

You will take ownership of the identity layer—making it automated, governed, and consistent—so access is correct by default and audits produce evidence rather than surprises. Reporting to the IT Director, you will drive internal systems work across identity, SaaS administration, and access governance as Upsun scales.

Responsibilities

• Identity & Access Management (IAM)

  • Own Okta: app catalog (SSO integrations), policy management (MFA, device trust), and directory hygiene (Universal Directory, group management, breakglass access).
  • Run identity operations day to day and refine SSO and SCIM integrations.
  • Maintain accurate joiner/mover/leaver access flows from the HR system.

• Lifecycle & Access Automation

  • Automate provisioning/deprovisioning so access is granted and revoked automatically.
  • Build/maintain workflows using Okta Workflows and n8n.
  • Manage access configuration as code and keep SCIM provisioning synchronized with HR.

• Process & Governance

  • Establish clear, documented procedures for access requests, approvals, and reviews (reducing ad hoc steps).

• Internal IT Systems & SaaS Administration

  • Own internal systems end-to-end: integrate, secure, and validate the SaaS stack.
  • Administer Google Workspace.
  • Connect tools via Okta and the HR system.
  • Own the application validation process.

• Compliance Engineering

  • Implement and evidence access controls for ISO 27001 and SOC 2 Type 2 with the Security team.
  • Ensure audit logs and access reviews are a natural outcome of solid systems.

• Endpoint & Device Management (shared)

  • Partner on administering Jumpcloud MDM across macOS, Windows, and Linux, collaborating with IT Operations / Endpoint Manager.

Requirements / What You Bring

• Ownership mindset for identity reliability: predictable, documented, and automated access.
• Experience managing IAM systems and integrations (notably Okta, including SSO/SCIM, MFA/device trust, and directory/group management).
• Ability to automate onboarding/offboarding and maintain lifecycle accuracy from HR.
• Experience supporting governance and compliance (ISO 27001 and SOC 2 Type 2).
• Comfort supporting adjacent IT systems as a small, growing team.

Nice-to-Haves

• Experience with Okta Workflows, n8n, and configuration-as-code for access.
• Experience with Google Workspace administration.
• Familiarity with endpoint/device management using Jumpcloud across major OSes.