IT Systems Engineer

Bamboo Health

2d•Remote

About The Position

Bamboo Health is the leader in Real-Time Care Intelligence™ solutions aimed at improving lives for everyone experiencing physical and behavioral health challenges. We are driven by our mission to empower clients to deliver seamless, high-quality and cost-effective care during pivotal moments to improve health outcomes. From coast to coast, Bamboo Health partners with all major retail pharmacy chains, 52 states and territories, 100% of the top 10 best hospitals and more than half of the country’s largest health plans to improve more than 1 billion patient encounters annually. Join us in improving lives during pivotal care moments! Summary: We're hiring a Systems Engineer to work directly alongside our Senior Systems Engineer, taking ownership of the day-to-day, high-volume execution work across identity and access management, SaaS/vendor administration, and AI tooling support. This person will handle routine and escalated tickets, keep recurring operational work (access provisioning, certificate renewals, procurement intake, license/access requests) moving reliably, and free up the senior engineer to focus on architecture, vendor strategy, and higher-risk security work. This is a strong role for someone who wants hands-on exposure to modern identity infrastructure and emerging AI platform administration, with a clear growth path toward a senior identity/systems engineering role.

Requirements

2+ years of experience in IT support, systems administration, or a related identity/access role.
Working knowledge of Azure AD/Entra ID, SSO/SAML concepts, and basic SCIM provisioning (or strong aptitude and willingness to ramp quickly).
Comfort working in a ticketing system (Jira Service Management or similar) and managing a queue of concurrent requests with competing priorities.
Familiarity with common enterprise SaaS administration (user provisioning, license management) is a plus.
Interest in AI tooling and willingness to learn enterprise AI platform administration (Claude/Anthropic, Bedrock, MCP integrations) — no prior AI-specific experience required.
Strong written communication — this role documents its own work and hands off context clearly.
Comfort being the first point of contact on escalated, sometimes urgent, end-user issues.
Comfort using or learning AI-supported tools (e.g., ChatGPT, CoPilot, or role-specific tools) to improve daily workflows.
A forward-thinking, curious mindset with an openness to experimenting with new technologies.
Strong analytical and problem-solving skills, with sound judgment and creativity in designing solutions.
Proven ability to thrive in fast-paced, high-growth, and rapidly evolving environments.
Ability to work effectively in a remote-first environment, ensuring high-quality virtual interactions with minimal distractions.
The ability to travel periodically for work.

Nice To Haves

Familiarity with common enterprise SaaS administration (user provisioning, license management) is a plus.
Interest in AI tooling and willingness to learn enterprise AI platform administration (Claude/Anthropic, Bedrock, MCP integrations) — no prior AI-specific experience required.
Comfort using or learning AI-supported tools (e.g., ChatGPT, CoPilot, or role-specific tools) to improve daily workflows.
A forward-thinking, curious mindset with an openness to experimenting with new technologies.
Strong analytical and problem-solving skills, with sound judgment and creativity in designing solutions.
Proven ability to thrive in fast-paced, high-growth, and rapidly evolving environments.
Ability to work effectively in a remote-first environment, ensuring high-quality virtual interactions with minimal distractions.
The ability to travel periodically for work.

Responsibilities

Process day-to-day Azure AD/Entra access requests: group membership changes, access package assignments, and standard onboarding/offboarding.
Monitor and action alerts for registered-app secrets and SSO/SAML certificates approaching expiration; execute routine renewals under senior engineer guidance.
Handle first-pass triage and provisioning for SCIM-based app access requests.
Support Atlassian (Jira/Confluence) group access requests and routine permission changes.
Own intake and initial documentation for new SaaS vendor procurement reviews (e.g., Zip requests), preparing them for senior/security review.
Execute standard software lifecycle tasks — user provisioning/deprovisioning, license tracking, renewal reminders — for existing SaaS tools.
Assist with license and cost audits to support ongoing SaaS cost-management initiatives.
Handle routine AI tool access requests (e.g., Claude/Anthropic license grants, Bedrock access requests) and standard troubleshooting for existing MCP integrations.
Support configuration and rollout tasks for AI vendor tools (e.g., Letter AI, Clay, Granola) — SSO/SCIM setup, basic integration troubleshooting — under senior engineer direction.
Document AI tool setup procedures and known issues to build a self-serve knowledge base for common requests.
Execute assigned phases of endpoint management rollouts (Intune Suite, NinjaOne) and OS end-of-life remediation projects.
Apply routine patches and respond to standard CVE remediation tasks as assigned.
Serve as first-line owner for escalated help-desk (ITHD) tickets involving access grants, credential issues, and standard cross-system troubleshooting.
Triage incoming escalations, resolve what's within scope, and flag higher-risk or ambiguous issues to the senior engineer with clear context.
Execute routine MFA/conditional access policy changes as directed.
Flag anomalous activity or potential security events for senior engineer review; assist with documented remediation steps.