Systems Engineer (SF)

Persona

About The Position

As a Systems Engineer at Persona, you'll be the technical backbone of our IT organization — designing the systems, automations, and infrastructure that scale our internal operations. This isn't a help desk role with a fancy title: you'll write scripts, architect endpoint management workflows, and ship automation that meaningfully moves the needle. What sets this apart is the chance to define technical standards at a company where identity, security, and operational trust are core to the product itself.

Requirements

5+ years in IT systems or infrastructure roles, with clear examples of building and automating - not just operating platforms
Strong hands-on macOS management experience (policies, scripting, workflows, not just UI administration)
Proficiency in Bash, Python, or similar scripting languages, with automation you’ve shipped and maintained
Deep experience with Okta beyond user administration. Workflows, integrations, and policy design
Strong understanding of SSO protocols (SAML, OAuth) and lifecycle management patterns
Comfort operating cloud infrastructure with Terraform (GCP preferred)
Solid understanding of how modern internet infrastructure works — DNS, HTTP, APIs, webhooks, authentication flows, and network fundamentals.
A builder mindset. Your instinct is to automate and improve systems, not repeat manual work

Nice To Haves

Experience with GitOps or declarative approaches to device management
Experience deploying and operating internal services using containers (e.g., Kubernetes)
Experience with infrastructure-as-code tools (e.g., Terraform)
Experience evaluating and operating self-hosted alternatives to SaaS tools

Responsibilities

Own our macOS endpoint management program end-to-end — zero-touch provisioning, policy enforcement, and detection/remediation scripting via Jamf, Fleet, or equivalent
Architect and ship automation across our identity and SaaS stack (Okta Workflows, APIs, Bash/Python scripting)
Design and maintain scalable, policy-driven access controls and lifecycle automation across the organization
Design, deploy, and manage IT-owned services in GCP using existing cloud foundations
Administer and integrate our SaaS ecosystem — SSO (SAML/OAuth), configuration, lifecycle management, and license governance
Act as an escalation point for complex systems issues
Create documentation and runbooks that increase durability and reduce operational toil
Mentor teammates and drive automation-first thinking across the IT function