Senior IT Operations Engineer

BigID

3d•$145,000 - $165,000

About The Position

BigID is hiring a Senior IT Operations Engineer as an individual contributor on its global IT team. The role builds and operates automation that connects systems, manages identity and access, and enables AI tools across the company. The engineer sets technical direction and owns projects from initial request through rollout, while also handling service desk escalations and production incidents. Working with teams including Security, R&D, People, Support, Engineering, and GTM, the role identifies process gaps, designs and builds solutions, documents them, and maintains them. The role is based in the EST time zone and serves as the North American contact for urgent requests, escalations, and production incidents when the Tel Aviv team is offline. Internal IT operates with a DevOps mindset, defining systems as code, deploying changes through CI/CD, and automating repetitive work.

Requirements

At least 7 years of experience in IT operations, DevOps, cloud engineering, or IAM engineering, including at least 2 years automating IT processes; equivalent experience is considered.
Hands-on Okta administration experience, including Okta Workflows, and experience with Auth0 custom logic such as Actions or rules.
Working knowledge of AWS, including Lambda, API Gateway, CloudFront, and IAM, and GCP, including projects, IAM, and BigQuery.
Experience building integrations with Workato or a similar iPaaS tool.
Proficiency in Python, Go, or Node.js and experience with REST APIs and webhooks.
Experience with infrastructure as code such as Terraform or Pulumi and CI/CD pipelines, ideally GitLab.
Practical experience with Claude or comparable LLM tools, connectors, and MCP servers, including awareness of security implications.
Experience with Cloudflare, including DNS, certificates, and Workers, and strong Google Workspace administration skills.
Solid understanding of SSO (SAML and OIDC), MFA, SCIM, RBAC, DNS, and email authentication.
Familiarity with an MDM such as Iru Kandji or Intune, and experience troubleshooting Windows and macOS.
Strong analytical and problem-solving skills and attention to detail.
Excellent written and verbal English and strong documentation habits.
Discretion when handling confidential information.
Ability to exercise independent judgment with little or no oversight.

Nice To Haves

Salesforce Apex and Flow.
Custom MCP servers or agent frameworks.
SQL and experience with BigQuery, Snowflake, or Databricks.
Azure or other public cloud experience.
Access governance or SaaS security tools such as Entitle or Lumos.
SOC 2 or ISO 27001 experience, including vulnerability management.
HRIS-driven provisioning, for example HiBob to Okta.
Relevant AWS, GCP, or Okta certifications.

Responsibilities

Build and own automation and integrations using AWS Lambda, API Gateway, GCP, Terraform, GitLab CI/CD, Okta Workflows, Workato, REST APIs, webhooks, and scripts.
Support integrations around Salesforce, including Auth0, Slack, Jira, and the data warehouse; establish backups for critical systems such as Jira, GitHub, and Okta Workflows; and identify additional IT automation opportunities.
Own the Claude rollout, connectors, and Claude Tag in Slack; host and govern MCP servers, including the Cloudflare MCP portal; support other requested AI tools and internal agents; and review connector security and access scope.
Administer Okta and Auth0, including Auth0 Actions, SCIM, MFA, device trust, and joiner, mover, and leaver processes; connect Okta to access governance tools such as Entitle or Lumos.
Own Cloudflare DNS, PKI, WAF, and rate limiting, as well as SPF, DKIM, and DMARC email authentication; support customer-facing CloudFront sites, coordinate hosting changes with web agencies, and assist the security team with investigations.
Own Google Workspace, Jira, JSM, Confluence, Slack, and GitLab; collaborate with owners of Zoom, Microsoft 365, and the broader SaaS stack.
Handle Tier 2 and Tier 3 service desk escalations, troubleshoot Windows and macOS endpoints, manage vendor support cases, and support device-based access policies with the team managing Iru Kandji and Intune.
Write runbooks, architecture notes, and handoff documents; document and implement processes; maintain accurate hardware, software, and resource inventories; and manage IT vendor and contractor relationships.
Identify process weaknesses and improve infrastructure so it scales, operates reliably, and remains secure.
Serve as the North American contact for urgent requests, escalations, and production incidents when the Tel Aviv IT team is offline.
Exercise independent judgment with little or no oversight, lead projects without direct reports, and make decisions through to project completion.