IT Operations Analyst

UpGuard

3d•Remote

About The Position

UpGuard is seeking an IT Operations Analyst to build, operate, and continually improve the corporate technology platform used by its employees. The role owns the lifecycle of corporate technology across identity, endpoints, SaaS, and supporting service practices, with a focus on automation, operational reliability, and reducing friction for employees. It is an engineering-oriented role rather than a ticket queue, and security is embedded in operational engineering rather than being the role’s sole function. The position manages enterprise platforms and identity, including Google Workspace, Okta or an equivalent identity provider, and mobile device management across a mostly macOS and ChromeOS fleet. It also operates and improves Cloudflare Zero Trust, develops internal tooling and automated workflows, establishes and improves service operations practices, and supports endpoint reliability and security controls. UpGuard describes the work environment as fully remote, with physical offices in Sydney and Hobart but no compulsory office attendance.

Requirements

Experience administering enterprise SaaS and identity platforms, including Google Workspace or Microsoft 365, an identity provider such as Okta or Entra, and MDM at organisational scale.
Comfort with SSO, SAML, SCIM, DNS, and certificates.
Hands-on experience with ZTNA, Secure Web Gateway, or modern network access controls; able to take ownership of, troubleshoot, and improve an existing Cloudflare Zero Trust implementation or similar platform.
Understanding of identity- and device-aware access and the principles of replacing traditional network trust.
Ability to write code using Python, Apps Script, or similar; work confidently with REST APIs; and demonstrate internal tooling that permanently removed recurring work.
Experience managing macOS at scale, zero-touch provisioning, and endpoint compliance baselines.
Experience running incident and change practices, defining metrics, and building useful documentation.
Comfort with endpoint hardening, identity security, DNS, certificates, secure network access, and making sensible risk trade-offs.
A process-improvement mindset focused on improving systems and outcomes.

Nice To Haves

Terraform or other Infrastructure as Code experience.
Cloudflare experience.
n8n or similar orchestration experience.
AI- and LLM-assisted workflow experience.
Deep macOS expertise.
Chrome Enterprise experience.
Experience working in a security-first or audited environment, such as SOC 2 or ISO 27001.

Responsibilities

Administer and manage Google Workspace, Okta or an equivalent identity provider, and MDM across a mostly macOS and ChromeOS fleet.
Own SaaS administration and lifecycle, asset management, endpoint standards and compliance, and the joiner–mover–leaver process.
Operate and continually improve the Cloudflare Zero Trust environment, including ZTNA, Secure Web Gateway, DNS filtering, tunnels, and identity- and device-aware access policies.
Maintain secure access to internal applications and services, troubleshoot access and connectivity issues, and minimize employee friction from security controls.
Build internal tooling and automated workflows using REST APIs, Python, Apps Script, Terraform, n8n, and AI-assisted workflows to eliminate recurring manual work.
Run and develop incident, problem, and change management practices, service catalogues, knowledge bases, service metrics, capacity planning, and operational readiness.
Improve reliability through zero-touch provisioning, endpoint compliance, fleet health, monitoring, reporting, SaaS governance, and self-service.
Deploy and maintain security controls, harden endpoints, support security incidents, reduce operational risk, and keep security baselines current.
Improve processes and operational systems rather than addressing only individual requests.