Senior IT Operations Engineer

Job description

**This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Senior IT Operations Engineer based in the United States.** The Senior IT Operations Engineer will play a key role in building secure, scalable, and automated internal technology systems across a global organization. This hands-on individual contributor position combines IT operations, cloud engineering, identity and access management, systems integration, and AI enablement. You will design and maintain automations that connect business applications, streamline workflows, and reduce manual effort across teams. Working closely with Security, Engineering, People, Support, and go-to-market functions, you will turn operational challenges into reliable technical solutions. You will also help govern emerging AI tools and integrations, ensuring that innovation is balanced with security, privacy, and appropriate access controls. This is an opportunity to take ownership of meaningful projects, influence technical direction, and improve the employee experience within a collaborative, DevOps-oriented environment. ### Accountabilities: - Design, build, and maintain automation and integrations across AWS, Google Cloud Platform (GCP), and enterprise applications using services such as AWS Lambda, API Gateway, REST APIs, webhooks, and integration platforms. - Own and improve automation workflows using Okta Workflows, Workato, and related technologies, identifying opportunities to eliminate repetitive tasks and streamline internal processes. - Define infrastructure as code using Terraform or similar tools and deploy changes through CI/CD pipelines, maintaining reliable, repeatable, and secure infrastructure. - Develop and maintain scripts in Python, Go, Node.js, or other suitable languages to connect systems, resolve workflow issues, and support business-critical processes. - Manage integrations across business applications, including connections involving Salesforce, Slack, Jira, identity platforms, and data warehouses. - Implement and maintain backup and recovery processes for critical systems, including Jira, GitHub, and automation platforms. - Lead the rollout and ongoing administration of enterprise AI tools, including Claude and other approved assistants, connectors, and internal agents. - Host and govern Model Context Protocol (MCP) servers and related infrastructure, assessing each connector’s access scope, security implications, and suitability before deployment. - Administer identity and access management platforms, including Okta and Auth0, with responsibility for authentication, provisioning, access policies, MFA, device trust, SCIM, and joiner-mover-leaver processes. - Integrate identity platforms with access governance solutions and support the implementation of appropriate role-based access controls and security practices. - Manage security and edge services, including DNS, public key infrastructure (PKI), web application firewalls, rate limiting, certificates, and email authentication protocols such as SPF, DKIM, and DMARC. - Support customer-facing web infrastructure, including CloudFront-hosted sites, coordinate hosting changes with external web agencies, and collaborate with security teams on technical findings. - Administer workplace collaboration and productivity platforms, including Google Workspace, Jira Service Management, Confluence, Slack, and GitLab, while coordinating with owners of other enterprise applications. - Resolve Tier 2 and Tier 3 service desk escalations, troubleshoot Windows and macOS devices, manage vendor support cases, and collaborate on device-management and access policies. - Maintain clear technical documentation, including runbooks, architecture notes, process guides, handoff materials, and accurate inventories of hardware, software, and IT resources. - Manage relationships with IT vendors and contractors, identify operational weaknesses, and continuously improve infrastructure reliability, scalability, security, and maintainability. - Serve as a North American point of contact for urgent IT requests, escalations, and production incidents when other members of the global team are unavailable. - Exercise independent judgment, lead projects from initial requirements through rollout, and balance planned engineering work with operational support needs. ## Requirements: - At least 7 years of experience in IT operations, DevOps, cloud engineering, identity and access management, or a related technical field, including at least 2 years focused on IT process automation. Equivalent experience may be considered. - Hands-on experience administering Okta, including Okta Workflows, and working with Auth0 custom logic such as Actions or rules. - Working knowledge of AWS services, including Lambda, API Gateway, CloudFront, and IAM, along with GCP environments, projects, IAM, and BigQuery. - Experience building and maintaining integrations using Workato or a comparable integration platform as a service (iPaaS). - Proficiency in at least one automation or scripting language, such as Python, Go, or Node.js, with practical experience using REST APIs and webhooks. - Experience with infrastructure as code, using Terraform, Pulumi, or similar technologies, and with CI/CD pipelines, preferably GitLab. - Practical experience with Claude or comparable large language model tools, connectors, and MCP servers, including an understanding of the associated security and access-control considerations. - Experience managing Cloudflare services, including DNS, certificates, or Workers, and strong Google Workspace administration skills. - Solid understanding of single sign-on technologies, including SAML and OIDC, as well as MFA, SCIM, role-based access control, DNS, and email authentication. - Familiarity with mobile device management platforms such as Kandji or Microsoft Intune, along with experience troubleshooting Windows and macOS endpoints. - Strong analytical and problem-solving skills, attention to detail, and the ability to investigate complex technical issues across interconnected systems. - Excellent written and verbal English communication skills, with a commitment to clear documentation and effective technical handoffs. - Sound judgment and discretion when handling confidential information, identity data, security-sensitive systems, and internal business information. - Ability to work independently with limited oversight, establish technical direction, prioritize competing demands, and lead projects through successful implementation. - A security-first mindset, with the ability to assess access permissions, anticipate risks, and design automation around business needs and employee experience. - A generalist mindset and willingness to learn new tools and technologies across identity, cloud infrastructure, security, automation, and enterprise SaaS. - Preferred experience with Salesforce Apex or Flow, custom MCP servers, AI agent frameworks, SQL, and data platforms such as BigQuery, Snowflake, or Databricks. - Additional experience with Azure or other public cloud platforms, SaaS security and access governance tools, HRIS-driven provisioning, SOC 2 or ISO 27001, and vulnerability management is beneficial. - Relevant certifications in AWS, GCP, Okta, or related technical disciplines are an advantage. - Authorization to work in the United States without employer-sponsored visa support is required, and candidates should ideally be located in the Eastern United States. ## Benefits: - Base salary: $145,000–$165,000 USD annually. - Annual bonus opportunity: 13%–15%, in addition to base compensation. - Remote work: Remote position for candidates based in the United States, with a preference for the Eastern Time Zone. - Technical ownership: Opportunity to lead projects independently, set technical direction, and influence the design of internal systems and automation. - Broad technical exposure: Hands-on work across cloud platforms, identity management, cybersecurity, AI enablement, integrations, and enterprise productivity tools. - Collaborative environment: Work with a global IT team and cross-functional partners in Security, Engineering, People, Support, and other business functions. - Professional development: Opportunities to expand technical expertise and contribute to emerging AI-enabled workflows and modern IT operations practices. - Inclusive culture: A workplace committed to collaboration, innovation, diversity, equality, and ensuring every team member feels heard and valued.