Role Overview

The IT Systems Engineer implements and supports secure, scalable identity, endpoint, and SaaS administration platforms across the organization. This role executes technical projects, collaborates cross-functionally to improve reliability and security, and grows technical expertise through strong standards, automation, and operational excellence.

Key Responsibilities:

• Identity & Access Management
  • Support and maintain the organization's identity and access management (IAM) posture using Okta, including SSO integrations (SAML/OIDC), MFA policy design, user lifecycle management, group and rules strategy, and audit-ready access controls.
  • Implement and maintain least-privilege access models aligned with security and compliance requirements.

• Endpoint Management
  • Support and maintain Apple device management using Jamf, including enrollment workflows, configuration profiles, application deployment strategies, security baselines, compliance reporting, and incident response support.
  • Ensure endpoint posture meets organizational security and operational standards.

• SaaS & Collaboration Platforms
  • Support as a key administrator for core productivity and collaboration platforms such as Google Workspace and Slack.
  • Deliver secure configurations, reliable user lifecycle processes, role-based administration, and overall operational stability.

• Automation & Engineering Practices
  • Develop and contribute to automation to eliminate manual work across IT systems (e.g., provisioning, offboarding, access reviews, device posture reporting), primarily using Bash and/or Python.
  • Apply strong software engineering practices, including testing, version control, documentation, and code review.
  • Develop and maintain integrations and workflows using APIs (Okta, Jamf, Google Workspace, Slack, and related SaaS tools), including secure token management, robust error handling, and observability.

• Infrastructure
  • Support AWS infrastructure, including but not limited to Lambda, DynamoDB, Route53.
  • Implement Infrastructure as Code (IaC) practices where applicable (e.g., Terraform) to standardize configurations, reduce drift, and improve repeatability.
  • Contribute to CI/CD pipelines (GitHub Actions or equivalent) to enable safe, auditable, and repeatable system changes.

• Operations & Reliability
  • Participate in technical troubleshooting for complex, cross-system issues spanning identity, endpoint management, and SaaS platforms.
  • Perform root cause analysis and contribute to permanent remediation.
  • Follow and contribute to engineering standards for IT systems operations, including change management, runbooks, access controls, naming conventions, and configuration baselines.

• Cross-Functional Collaboration & Leadership
  • Collaborate with Security, HR, and Engineering to deliver secure-by-default onboarding, offboarding, role changes, and privileged access workflows with clear ownership and SLAs.

Qualifications:

Required

• 3+ years of experience in IT systems engineering, identity engineering, endpoint management, or adjacent SaaS/IT infrastructure roles.
• Experience with Okta in a production environment, including SSO/MFA, policies, group and rules strategy, and application integrations.
• Experience with Jamf in a production macOS fleet, including packaging and deployment, configuration profiles, compliance and security baselines, and reporting.
• Strong scripting ability in Bash and/or Python for automation and API-based workflows.
• Experience using Git-based version control systems (GitHub preferred).

Preferred

• Experience with Infrastructure as Code tools (e.g., Terraform) and CI/CD practices.
• Hands-on experience administrating Windows Server, Active Directory and Azure.
• Familiarity with Go.
• Relevant certifications or formal training (e.g., Okta, Jamf, Google Workspace, IAM or security coursework).

GOAT Group uses geographic pay tiers based on the employee’s home state to align compensation with market differences across the U.S. Hiring Range: Tier 1 (Includes states such as California, New York (including New York City), Washington, Illinois and other higher-cost markets) $74,400 - $93,000 USD Tier 2 - (Includes mid-cost markets across the U.S.) $67,200 - $84,000 USD Tier 3 - (All other U.S. locations) $63,600 - $79,500 USD