Systems Engineer role at WorkOS, a developer-tools and API company. This is the technical backbone of the internal IT organization, designing the systems, automations and infrastructure that scale internal operations. It is explicitly not a help-desk role: the engineer architects endpoint management workflows, writes scripts, ships automation and builds the foundation that keeps a fast-growing company running. An MSP partner handles tier 1 support; the engineer architects the systems the MSP executes against, automates everything upstream and serves as the escalation point for complex tier 2/3 issues, owning identity, device management, SaaS lifecycle and the automation layer that ties it all together.
Responsibilities
- ▹Own and evolve the identity infrastructure: Okta (SSO, MFA, Workflows, SCIM provisioning, lifecycle management), Google Workspace and downstream SaaS integrations
- ▹Architect and ship automation across the IT stack: onboarding/offboarding workflows, access controls, license governance and SaaS lifecycle management
- ▹Own macOS endpoint management end-to-end: zero-touch provisioning, policy enforcement, detection and remediation scripting via MDM
- ▹Manage infrastructure as code using Terraform for identity, SaaS and cloud resources
- ▹Serve as the escalation point for complex systems issues (tier 2/3), working with the MSP partner to ensure smooth resolution
- ▹Evaluate and enable new SaaS tools and pilot emerging technologies including AI-powered IT automation
- ▹Create documentation and runbooks that reduce operational toil and increase durability
- ▹Drive an automation-first culture across the IT function
Requirements
- ▹7+ years in IT systems, infrastructure or identity engineering roles, with clear examples of designing, building and automating at scale (not just operating)
- ▹Deep experience with Okta: Workflows, integrations, policy design, SCIM provisioning (not just user administration)
- ▹Proficiency in scripting (Python, Bash) and comfort with REST APIs, webhooks and authentication flows
- ▹Hands-on Terraform experience for managing infrastructure and configuration as code
- ▹Strong macOS fleet management: MDM (Jamf, Kandji or equivalent), scripting, zero-touch provisioning
- ▹Deep understanding of SSO protocols (SAML, OAuth 2.0) and SCIM provisioning patterns
- ▹Experience with Google Workspace administration at scale
- ▹Solid understanding of networking fundamentals: DNS, HTTP, APIs, VPNs, firewalls
Nice to have
- ▹Experience with AI/LLM tools for IT automation (agentic workflows, ChatGPT/Claude for scripting, Okta + AI integrations)
- ▹GitOps or declarative approaches to device and identity management
- ▹Cloud infrastructure experience (GCP or AWS)
- ▹SOC 2 or ISO 27001 compliance experience
- ▹Experience operating in an MSP-augmented IT model
Soft skills
Systems thinkingAutomation-first instinctOwnership and follow-throughAbility to work independentlyCuriosity about emerging tools
What we offer
- ▹Competitive pay
- ▹Substantial equity grants
- ▹Healthcare insurance (medical, dental and vision) for you and your family
- ▹401k matching
- ▹Wellness and fitness monthly allowances
- ▹PTO, paid holidays and unlimited sick leave
- ▹Parental leave
- ▹Fully remote working arrangements
- ▹Benefits and perks listed apply to US-based employees