About You and The Role
We are looking for a Senior IT Infrastructure Engineer to help design, operate, automate, and scale the systems that support our employees and business operations. This role will provide technical ownership and direction for several of our core enterprise platforms, including Okta, Google Workspace, Slack, endpoint management, and the API integrations that connect our internal systems. You will set technical standards, make architecture decisions, and lead complex improvements across these systems while maintaining a secure, reliable, scalable, and highly automated IT environment. A key focus of this role will be designing and maturing identity and access management capabilities across the organization, including role-based access control, automated software provisioning, and scalable joiner, mover, and leaver workflows. You will establish patterns and standards that can be consistently operated and extended as the company grows. The ideal candidate has deep experience administering modern SaaS platforms, strong scripting and automation skills, a strong understanding of modern identity standards, and hands-on experience managing infrastructure in a public cloud environment such as AWS or Google Cloud Platform. You have demonstrated sound technical judgment and can design scalable solutions for complex, cross-system problems. This is a senior individual contributor role for someone who is comfortable serving as a technical lead for critical systems, resolving ambiguous cross-system issues, making architectural tradeoffs, and partnering across IT, Security, Engineering, and business teams. You will also provide technical guidance and mentorship to other members of the IT team.
What You'll Do
Provide technical ownership, architecture, standards, security, reliability, and ongoing improvement for core IT platforms, including:
Okta
Google Workspace
Slack
Related enterprise SaaS applications
Define the architecture for and lead implementation of scalable identity and access management solutions across enterprise applications.
Define and mature role-based access control (RBAC) across systems, including access models, groups, roles, entitlements, and provisioning policies.
Define and evolve software provisioning and deprovisioning patterns that reduce manual administration, improve access consistency, strengthen security, and scale across the organization.
Design and maintain automated joiner, mover, and leaver workflows that ensure users receive the appropriate access based on role, department, location, employment status, or other business attributes.
Architect, build, maintain, and troubleshoot complex API-based integrations between enterprise systems, establishing reusable integration patterns where appropriate.
Manage identity and access management workflows, including authentication, SSO, MFA, provisioning, deprovisioning, lifecycle management, access reviews, and role-based access.
Develop automation and administrative tooling using Python, Bash, APIs, and other appropriate technologies.
Identify repetitive or manual IT processes and build scalable automation to improve efficiency, reliability, and user experience.
Define standards for and manage infrastructure and services running in a public cloud environment such as AWS or GCP.
Own the technical strategy, standards, and ongoing evolution of mobile device management (MDM) and endpoint management platforms such as Iru, Jamf,
Microsoft Intune, and Hexnode, including device enrollment, configuration profiles, security policies, application deployment, compliance, OS update management, and device lifecycle operations.
Develop and maintain integrations using REST APIs, webhooks, service accounts, OAuth, and other common authentication and integration patterns.
Implement and support modern identity federation and provisioning standards, including SAML, SCIM, OAuth, and OpenID Connect (OIDC).
Monitor the health, security, performance, and availability of critical IT systems and integrations.
Lead troubleshooting and root-cause analysis for complex infrastructure, identity, application, authentication, provisioning, and integration issues that span multiple systems.
Establish and maintain configuration standards, documentation, operational procedures, and system architecture documentation.
Partner with Security teams to implement and maintain appropriate access controls, security policies, logging, monitoring, and audit capabilities.
Partner with Engineering and business systems teams on integrations, automation, identity, and infrastructure initiatives.
Lead technical evaluation, design, implementation, and migration efforts for enterprise technologies.
Establish technical standards, design patterns, and best practices for IT infrastructure, SaaS administration, automation, identity management, endpoint management, and access governance.
Serve as a technical escalation point and subject matter expert for complex IT infrastructure and identity issues.
Mentor other members of the IT team and help improve the team's technical capabilities and operational maturity.
What You'll Bring
7+ years of professional IT experience.
5+ years of hands-on experience administering and managing enterprise infrastructure, SaaS platforms, identity systems, or related technologies.
Significant hands-on experience administering Okta or a comparable enterprise identity and access management platform.
Significant hands-on experience administering Google Workspace in a mid-sized or large enterprise environment.
Experience administering Slack or a comparable enterprise collaboration platform.
Hands-on experience administering and supporting MDM and endpoint
management platforms such as Iru, Jamf, Microsoft Intune, Hexnode, or comparable solutions.
Strong scripting and automation skills using Python and Bash.
Demonstrated experience designing, building, maintaining, and troubleshooting
API integrations between enterprise applications.
Strong understanding of REST APIs, JSON, webhooks, service accounts, and service to-service authentication.
Deep understanding of modern identity and authentication standards and protocols, including OAuth, SAML, SCIM, and OpenID Connect (OIDC).
Strong understanding of identity and access management concepts, including SSO, MFA, federation, identity lifecycle management, RBAC, provisioning, deprovisioning, and access governance.
Demonstrated experience designing and implementing role-based access control models across enterprise applications.
Experience automating application and software provisioning using identity attributes, groups, roles, APIs, SCIM, workflows, or similar technologies.
Hands-on experience designing and managing infrastructure or services in AWS, Google Cloud Platform, or a comparable public cloud environment.
Experience troubleshooting complex issues across SaaS applications, identity platforms, networks, APIs, and cloud services.
Strong understanding of security principles and enterprise IT best practices.
Experience creating clear technical documentation, runbooks, and operational procedures.
Strong communication skills and the ability to work effectively with both technical and non-technical stakeholders.
Preferred Qualifications
Experience managing Okta at enterprise scale, including Workflows, Lifecycle
Management, application integrations, group rules, advanced security policies, and automated provisioning.
Experience designing access models based on attributes such as department, role, location, employment type, or organizational hierarchy.
Experience implementing access certification, entitlement management, or identity governance processes.
Experience with Google Workspace automation and administration using tools such as GAM, Google APIs, or Apps Script.
Experience working with Slack APIs, Slack administration, Enterprise Grid, or automated Slack workflows.
Experience with infrastructure-as-code tools such as Terraform is a plus.
Experience with source control and software development practices using Git and CI/CD workflows.
Experience designing or improving endpoint management, device trust, zero-trust, compliance, and device lifecycle programs across a diverse fleet.
Experience with secrets management, certificate management, or privileged access management.
Experience working in a highly automated, cloud-first environment.
Experience supporting environments with strong security, compliance, or audit requirements.
What Success Looks Like
In this role, you will set technical direction for an IT environment that is increasingly automated, reliable, secure, and easy to operate. You will establish scalable patterns and standards, reduce manual administrative work, improve the reliability of critical integrations, strengthen our identity and access management practices, and create technical foundations that can support the company as it grows. You will be successful when access is increasingly determined by well-defined roles and business attributes rather than manual requests, provisioning and deprovisioning are highly automated, joiner, mover, and leaver processes are reliable and scalable, and the platforms and integrations you own are well-architected, documented, supportable, and require fewer manual interventions. Our goal is to move toward an environment where the right users receive the right access to the right systems automatically, with clear controls, visibility, and governance aroundhow that access is granted and removed.
What Else You Need To Know
The starting cash range for this role is $160,00 - $185,000; please note that this is a target, starting cash range for a candidate who meets the minimum qualifications for this role. We are always open to negotiation. The final cash pay for this role will depend on a variety of factors, including a specific candidate's experience, qualifications, skills, working location, and projected impact. The total compensation package for this role may also include: equity compensation; overtime pay; discretionary annual or performance bonuses; sales incentives; benefits such as medical, dental and vision insurance; paid time off; and more.
This is a fully onsite role requiring in-person attendance at our South San Francisco location five days per week.
Zipline is an equal opportunity employer and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws or our own sensibilities.
We value diversity at Zipline and welcome applications from those who are traditionally underrepresented in tech. If you like the sound of this position but are not sure if you are the perfect fit, please apply!
Voluntary Self-Identification
For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.
As set forth in Zipline ’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.
