Sr. IT Infrastructure Engineer

Zipline•South San Francisco, CA

5h•$160,000 - $185,000•Onsite

About The Position

Zipline is seeking a Senior IT Infrastructure Engineer to design, operate, automate, and scale the systems that support employees and business operations. This senior individual-contributor role provides technical ownership and direction for core enterprise platforms, including Okta, Google Workspace, Slack, endpoint management, and integrations between internal systems. The engineer will set technical standards, make architecture decisions, lead complex improvements, and help maintain a secure, reliable, scalable, and highly automated IT environment. A key focus is maturing identity and access management across the organization, including role-based access control, automated software provisioning, and scalable joiner, mover, and leaver workflows. The role also owns technical strategy for endpoint management and public-cloud infrastructure, develops API-based integrations and automation, and partners with IT, Security, Engineering, and business teams. The successful candidate will provide technical guidance and mentorship to other IT team members and establish supportable patterns that can scale as the company grows. This is a fully onsite position requiring attendance at Zipline’s South San Francisco location five days per week. The starting cash range is $160,000–$185,000, with final compensation depending on factors including experience, qualifications, skills, location, and projected impact. Total compensation may also include equity, overtime pay, discretionary annual or performance bonuses, sales incentives, and benefits such as medical, dental, and vision insurance and paid time off.

Requirements

7+ years of professional IT experience.
5+ years of hands-on experience administering and managing enterprise infrastructure, SaaS platforms, identity systems, or related technologies.
Significant hands-on experience administering Okta or a comparable enterprise identity and access management platform.
Significant hands-on experience administering Google Workspace in a mid-sized or large enterprise environment.
Experience administering Slack or a comparable enterprise collaboration platform.
Hands-on experience administering and supporting MDM and endpoint management platforms such as Iru, Jamf, Microsoft Intune, Hexnode, or comparable solutions.
Strong scripting and automation skills using Python and Bash.
Demonstrated experience designing, building, maintaining, and troubleshooting API integrations between enterprise applications.
Strong understanding of REST APIs, JSON, webhooks, service accounts, and service-to-service authentication.
Deep understanding of modern identity and authentication standards and protocols, including OAuth, SAML, SCIM, and OpenID Connect (OIDC).
Strong understanding of identity and access management concepts, including SSO, MFA, federation, identity lifecycle management, RBAC, provisioning, deprovisioning, and access governance.
Demonstrated experience designing and implementing role-based access control models across enterprise applications.
Experience automating application and software provisioning using identity attributes, groups, roles, APIs, SCIM, workflows, or similar technologies.
Hands-on experience designing and managing infrastructure or services in AWS, Google Cloud Platform, or a comparable public cloud environment.
Experience troubleshooting complex issues across SaaS applications, identity platforms, networks, APIs, and cloud services.
Strong understanding of security principles and enterprise IT best practices.
Experience creating clear technical documentation, runbooks, and operational procedures.
Strong communication skills and the ability to work effectively with technical and non-technical stakeholders.

Nice To Haves

Experience managing Okta at enterprise scale, including Workflows, Lifecycle Management, application integrations, group rules, advanced security policies, and automated provisioning.
Experience designing access models based on attributes such as department, role, location, employment type, or organizational hierarchy.
Experience implementing access certification, entitlement management, or identity governance processes.
Experience with Google Workspace automation and administration using tools such as GAM, Google APIs, or Apps Script.
Experience working with Slack APIs, Slack administration, Enterprise Grid, or automated Slack workflows.
Experience with infrastructure-as-code tools such as Terraform.
Experience with source control and software development practices using Git and CI/CD workflows.
Experience designing or improving endpoint management, device trust, zero-trust, compliance, and device lifecycle programs across a diverse fleet.
Experience with secrets management, certificate management, or privileged access management.
Experience working in a highly automated, cloud-first environment.
Experience supporting environments with strong security, compliance, or audit requirements.

Responsibilities

Provide technical ownership, architecture, standards, security, reliability, and ongoing improvement for Okta, Google Workspace, Slack, and related enterprise SaaS applications.
Define the architecture for and lead implementation of scalable identity and access management solutions across enterprise applications.
Define and mature role-based access control across systems, including access models, groups, roles, entitlements, and provisioning policies.
Define and evolve software provisioning and deprovisioning patterns to reduce manual administration, improve access consistency, strengthen security, and scale across the organization.
Design and maintain automated joiner, mover, and leaver workflows that assign appropriate access based on business attributes.
Architect, build, maintain, and troubleshoot API-based integrations between enterprise systems, establishing reusable patterns where appropriate.
Manage identity and access workflows, including authentication, SSO, MFA, provisioning, deprovisioning, lifecycle management, access reviews, and role-based access.
Develop automation and administrative tooling using Python, Bash, APIs, and other appropriate technologies.
Identify repetitive or manual IT processes and build scalable automation to improve efficiency, reliability, and user experience.
Define standards for and manage infrastructure and services running in a public cloud environment such as AWS or GCP.
Own the technical strategy, standards, and evolution of mobile device management and endpoint management platforms, including enrollment, configuration, security policies, application deployment, compliance, OS updates, and device lifecycle operations.
Develop and maintain integrations using REST APIs, webhooks, service accounts, OAuth, and other common authentication and integration patterns.
Implement and support identity federation and provisioning standards, including SAML, SCIM, OAuth, and OpenID Connect.
Monitor the health, security, performance, and availability of critical IT systems and integrations.
Lead troubleshooting and root-cause analysis for complex issues spanning infrastructure, identity, applications, authentication, provisioning, and integrations.
Establish and maintain configuration standards, documentation, operational procedures, and system architecture documentation.
Partner with Security teams on access controls, security policies, logging, monitoring, and audit capabilities.
Partner with Engineering and business systems teams on integrations, automation, identity, and infrastructure initiatives.
Lead technical evaluation, design, implementation, and migration efforts for enterprise technologies.
Establish technical standards, design patterns, and best practices for IT infrastructure, SaaS administration, automation, identity management, endpoint management, and access governance.
Serve as a technical escalation point and subject matter expert for complex IT infrastructure and identity issues.
Mentor IT team members and help improve the team's technical capabilities and operational maturity.