What will you do?
Platform, identity and fleet
Google Workspace, Okta (or equivalent IdP), and MDM (Kandji, Jamf or similar) across a mostly macOS and ChromeOS fleet
You’ll own SaaS administration and lifecycle, asset management, endpoint standards and compliance, and the joiner–mover–leaver process end to end
Zero Trust and secure access
Operate and continually improve our Cloudflare Zero Trust environment across ZTNA, Secure Web Gateway, DNS filtering, tunnels and identity and device aware access policies
You’ll help move us away from traditional network trust, maintain secure access to internal applications and services, troubleshoot access and connectivity issues, and make sure security controls don’t create unnecessary friction for employees
Automation and internal tooling
Automation is the default approach, not a stretch goal. If a task happens more than twice, it’s a candidate for code
You’ll work with REST APIs, Python, Apps Script, Terraform, n8n and AI assisted workflows to build internal tooling that removes work rather than making it faster to do by hand
Service operations
Incident, problem and change management. Service catalogue, knowledge base, service metrics, capacity planning and operational readiness
You’ll define these practices where they don’t exist yet and improve the ones that do
Reliability and continuous improvement
Zero touch provisioning, endpoint compliance, fleet health, monitoring, reporting, SaaS governance and self service. Making internal platforms boringly reliable is the goal
Security, embedded
Deploy and maintain security controls, harden endpoints, support security incidents, reduce operational risk and keep baselines current
Security is part of how you’ll operate the platform rather than a separate function you’ll own
What will you bring?
You won’t have all of this. Tell us which parts you’d be learning, and we’ll tell you honestly whether that works
Depth across enterprise SaaS and identity - you’ve administered Google Workspace or Microsoft 365, an IdP such as Okta or Entra, and MDM at organisational scale. You’re comfortable with SSO, SAML, SCIM, DNS and certificates
Zero Trust, hands on - you’ve worked with ZTNA, Secure Web Gateway or modern network access controls, ideally Cloudflare Zero Trust or a similar platform such as Zscaler, Netskope, Tailscale or Entra Private Access. You understand identity and device aware access and the principles behind replacing traditional network trust
You don’t need to be a Zero Trust specialist, but you should be comfortable taking ownership of an existing Cloudflare implementation, troubleshooting it and making it better
You genuinely automate - you write code using Python, Apps Script or similar, work confidently with REST APIs, and can point to internal tooling you’ve shipped that removed recurring work permanently
Fleet management maturity - you’ve worked with macOS at scale, zero touch provisioning and endpoint compliance baselines
Service operations experience - you’ve run incident and change practices, defined metrics and built documentation people actually use
Security and infrastructure fundamentals - you’re comfortable with endpoint hardening, identity security, DNS, certificates, secure network access and making sensible risk trade offs
Process improvement instinct - you make the system better, not just the outcome of one request
What will give you an edge?
Terraform or other Infrastructure as Code
Cloudflare
n8n or similar orchestration
AI and LLM-assisted workflows
Deep macOS expertise
Chrome Enterprise
Working in a security-first or audited environment (SOC 2, ISO 27001)
What's in it for you?
Monthly Lifestyle subsidy: Use this for financial, physical, and mental well-being
WFH set-up allowance: To ensure you have the right environment to work in, we will help you get set up within your first 3 months at UpGuard
$1500 USD annual Learning & Development allowance: To support your career development, all team members will be able to expense development opportunities against this allowance
Annual leave: PTO plus two additional UpGuardian leave days to give you time to recharge your batteries.
18 weeks paid Parental Leave: Irrespective of parenting role
Personal Leave Allowance: This includes sick & carer’s leave
Fully remote working environment: While we have physical offices in Sydney & Hobart, we do not mandate compulsory attendance
Top-spec hardware: All team members will be provided with top-spec laptops for their role
Generative AI subsidy: UpGuard provides paid subscriptions for all team members to access generative AI tools to support their work
Health Insurance: Access to comprehensive coverage.
UpGuard is a Certified Great Place to Work® in the US, Australia, UK and India, establishing its position as a leading global technology employer. 99% of team members agree that UpGuard is a great place to work! Apply now to find out why!
As an Equal Employment Opportunity and Affirmative Action Employer, qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status.
Please Note: Not all roles can be performed from the United States. Please check your specific job listing to confirm its advertised location. If the role you are applying for is listed as based in the US, we are currently only able to support hiring in the following locations: CA, CO, FL, IL, MA, MD, MO, OR, PA, TX, WA, and DC.
Before starting work with us, you will need to undertake a national police history check and reference checks.
