Sr. IT Engineer, IAM & Platform Management

Fetch•US - Remote,

About The Position

This full-time specialist role owns identity and access management, including Okta and adjacent identity tooling, as well as administration of the Atlassian suite (Jira and Confluence). The role is intended to provide dedicated technical ownership, proactively improve configurations for scale, address identity gaps, and reduce platform and identity risk through architecture and automation rather than primarily responding to incidents. The position owns SSO, entitlement governance, and access automation, along with Atlassian platform administration, including the ITDESK project used by every team at Fetch. It provides senior technical expertise, identifies and implements improvements, and serves as a technical point of contact across the company. Within established security and platform standards, the role may modify Okta and Atlassian settings under approved change-management practices, implement access automation, recommend and prioritize architecture changes, and pause changes presenting apparent risk pending review.

Requirements

At least 5 years of experience in IT engineering or systems administration, with a concentration in identity and access management and/or SaaS platform administration.
Hands-on production experience administering Okta, including SSO, MFA, and lifecycle automation.
Experience administering Jira and Confluence at organizational scale, including workflow and permission design.
Working knowledge of SAML/SSO concepts and access governance practices.
Familiarity with scripting, automation tools, and API- or webhook-based integrations.
Strong documentation habits and the ability to work independently on platform architecture decisions.

Nice To Haves

Experience remediating identity-related security incidents or entitlement misconfigurations.
Experience with JumpCloud, Google Workspace administration, or AWS IAM.
Experience designing access-review or automated-deprovisioning programs.
B.S. in Computer Science, Information Systems, or equivalent experience.
Relevant certifications, such as Okta Certified Administrator, Atlassian certifications, or equivalent.

Responsibilities

Configure and administer Okta SSO, MFA policies, and identity lifecycle workflows for onboarding, offboarding, and role changes.
Design and conduct periodic access reviews, identify and remediate stale or excessive access, and address entitlement misconfigurations.
Govern contractor and non-employee access, including time-bound access, approval workflows, and offboarding enforcement.
Integrate and manage third-party application SSO connections and troubleshoot escalated identity-related issues.
Maintain identity-system security compliance in partnership with Information Security.
Build and maintain automated provisioning, deprovisioning, and access-review workflows; investigate and close automation gaps.
Partner with Information Security on architectural patterns and remediation in IT-administered systems.
Administer Jira project configurations, workflows, permission schemes, and automation rules.
Administer Confluence spaces, permissions, and documentation standards, and support Bitbucket configuration and access where applicable.
Plan Atlassian platform architecture proactively and design it to scale.
Evaluate and recommend tools, integrations, and automation to improve identity governance and platform scalability.
Maintain technical documentation for identity and platform systems to support audits, onboarding, and incident response.
Partner with Information Security on identity risks, audit evidence, and remediation of access-related findings.
Partner with the Manager of IT Operations on prioritization, escalation, and coordination with the IT Operations team.
Serve as the technical point of contact for identity and Atlassian platform questions across the company.
Identify recurring manual administration work and drive improvements through automation or self-service.
Contribute to improvements in access-request, approval, and audit workflows.
Configure and modify Okta and Atlassian settings within approved change-management practices, implement access automation, recommend and prioritize architecture changes, and flag or pause changes that present apparent risk pending review.