Duties and Responsibilities
Design, implement, and manage a fully cloud-based IT environment, ensuring high availability, scalability, and security across a range of SaaS platforms.
Design, build, and operate workflow automation across the IT landscape using platforms such as Okta, Serval, and related iPaaS tooling.
Build, maintain, and manage the end-to-end lifecycle of AI-powered agents and automations that streamline IT workflows, shift routine requests to self-service, and remain reliable, monitored, and auditable.
Engineer and manage integrations between core systems (Okta, Google Workspace, Slack, HR/finance platforms, and engineering tooling) using REST APIs, webhooks, and SCIM.
Manage API integrations across IT systems, including authentication, security, monitoring, and lifecycle management.
Partner closely with software engineering teams to align on shared services, developer tooling, integrations, and standards.
Build joiner-mover-leaver (JML) and birthright access automation, with appropriate guardrails and audit logging for SOX- and PII-scoped systems.
Analyze ticketing and operational data to identify repetitive tasks suitable for automation and prioritize opportunities for implementation.
Apply a security-first mindset to everything you build, following least-privilege principles and partnering with Security to keep automations compliant.
Develop and maintain clear documentation, runbooks, and integration standards so automations are maintainable and knowledge is not siloed.
Act as a senior escalation point for complex IT issues, conducting deep root cause analysis and implementing long-term solutions.
Qualifications and Skills
5+ years of experience in IT engineering, systems administration, or a related role in a cloud-first environment.
Proven experience designing, building, and managing integrations across SaaS platforms using REST APIs, webhooks, OAuth, and SCIM.
Hands-on experience with low-code/no-code AI and automation tools and iPaaS platforms (e.g., Okta Workflows, Serval, Workato, Zapier, or equivalent).
Experience building or integrating AI agents and bots.
Experience managing Okta, Google Workspace, Slack, Zoom, and common device management tools such as Jamf and Intune.
Ability to work effectively with software engineering teams, with a solid understanding of version control (Git), CI/CD concepts, shared APIs, and services.
Security-first mindset, with familiarity applying least-privilege principles and supporting compliance frameworks such as SOX and SOC 2.
Strong troubleshooting and root-cause-analysis skills, with the ability to design durable, long-term solutions.
Experience with Zero Trust Network Access (ZTNA) or modern network security approaches.
Strong communication skills, able to collaborate effectively across technical and non-technical stakeholders and across time zones.
Strong documentation skills.
Proofpoint experience is a plus.
Nice to have
Hands-on programming/scripting ability — Python and JavaScript preferred — for building integrations and automations.
Experience with AI orchestration or agent platforms (e.g. Serval, Forethought, or LLM-based tooling).
Exposure to standing up or scaling a global capability centre (GCC).
Don’t meet every single requirement? If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway. At Ethos we are dedicated to building a diverse, inclusive and authentic workplace.
We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Pursuant to the SF Fair Chance Ordinance, we will consider employment for qualified applicants with arrests and conviction records.
To learn more about what information we collect and how it may be used, please refer to our California Candidate Privacy Notice.
Recruitment Notice: Please be aware of recruitment scams. All legitimate communication from our team will only come from email addresses ending in @ethos.com or @getethos.com.
We will never ask for payment, banking details, or sensitive personal information during the hiring process. If you are contacted by someone claiming to represent us from a different email address, please treat it as fraudulent.
