IT Systems Engineer

Platform.sh

14h•Remote

About The Position

Upsun is the cloud application platform humans and robots love. It is built for today’s hybrid teams, where AI agents write and test code and humans focus on solving the problems that really matter. Developers, DevOps engineers, and platform teams use Upsun to build, ship, and scale confidently without wrestling with backend infrastructure. We give you your time back. Upsunners are a remote, global workforce, and we thrive in a multicultural team. We are committed to open source and an open, welcoming environment. Our team spans the globe and the experience spectrum. Our core belief is that software should power brighter solutions and greater innovation. As an IT Systems Engineer you take the identity plane from working to well-run: automated, governed, and consistent, so access is correct by default, and our auditors find evidence rather than surprises. Reporting to the IT Director, you play a pivotal role in a growing internal IT department, driving the internal systems layer around identity—from our SaaS estate to Google Workspace. You are the person who makes identity quietly reliable: predictable, documented, and automated, while remaining flexible enough to support the wider IT function as our scaling remote organization evolves.

Requirements

Deep, hands-on experience with Okta or a comparable identity provider, including SSO, SCIM, lifecycle automation, and API-driven provisioning
Typically 5 or more years in IT systems, identity, or access engineering, including time in a developer-heavy or engineering-led environment.
You build automation with tools like Okta Workflows, n8n, or similar, you are comfortable with APIs and webhooks, and you script in Python or a comparable language.
You bring order to environments that grew quickly. You write clear procedures, standardize how things are done, and leave systems better documented than you found them.
You have run and integrated a SaaS-based environment, where identity and APIs matter more than racks and networks.
You have worked inside ISO 27001 or SOC 2, ideally Type 2 where evidence is continuous, and you understand what auditors actually need.
You work well without close supervision in a fully remote team, and you communicate clearly with technical and non-technical colleagues alike
We are a Google shop, so hands-on Google Workspace administration is core to this role: users, groups, policies, and security settings.
You are comfortable wearing several hats in a small IT team, picking up adjacent systems and endpoint work, and flexing as priorities shift.

Nice To Haves

Comfort managing configuration through Git-based workflows, or infrastructure as code with Terraform.
Professional proficiency in French.

Responsibilities

Own Okta as the backbone of how people get access, managing the app catalog (SSO integrations for new SaaS tools), policy management (MFA, device trust), and directory hygiene (Universal Directory, group management, breakglass access). Run identity day to day, refine our SSO and SCIM integrations, and keep joiner, mover, and leaver flows accurate from our HR system.
Automate provisioning and deprovisioning so access is granted and revoked automatically, not by hand. Build and maintain workflows with tools like Okta Workflows and n8n, manage access configuration as code, and keep SCIM provisioning in sync with our HR system.
Structure and harmonize clear procedures around the identity plane, so access requests, approvals, and reviews follow one consistent, documented path instead of ad hoc steps.
Own our internal systems end to end. Integrate, secure, and validate our SaaS stack, administer Google Workspace as our core collaboration suite, connect our tools through Okta and our HR system, and own the application validation process.
Implement and evidence access controls for ISO 27001 and SOC 2 Type 2 with our Security team, ensuring access reviews and audit logs are a by-product of well-built systems, not a quarterly scramble.
Partner on administrating Jumpcloud our MDM across macOS, Windows, and Linux, sharing endpoint and device management with our IT Operations and Endpoint Manager so coverage scales with the team.
We are a small, growing IT team, so scope will flex over time. You are happy to pick up adjacent systems work and support across the wider IT function as our needs evolve.