Senior Systems Engineer

Open; Sydney; Hybrid; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Share options

Flexible working

Parental leave

5 days extra leave

Personal development allowance

Job summary

Open is seeking a senior Workplace Technology engineer to own the core stack, including Jamf Pro, Google Workspace, Cloudflare Zero Trust, Okta and Freshservice. You will lead security, automation and governance while shaping the ITSM strategy.

You will design AI‑assisted triage, implement as‑code workflows, and mentor junior engineers. Based in Sydney with hybrid work, you’ll collaborate across AU and UK teams to deliver compliant, scalable solutions.

Qualifications

• 5+ years in systems, IT or workplace engineering.
• Hands-on Okta and Google Workspace administration.
• MacOS fleet management experience with Jamf Pro.
• Experience with Cloudflare Zero Trust or similar.
• Configuration-as-code: Terraform, Git, CI pipelines.
• Scripting in Python or Bash; REST APIs.

Responsibilities

• Own the workplace stack end-to-end (Jamf, Google Workspace, Cloudflare ZT, Okta, Freshservice).
• Manage platforms as code and extend to manual configurations.
• Design and build AI agents to triage level 1 requests in Freshservice.
• Automate identity and device lifecycle across Okta, Google Workspace, Jamf.
• Act as escalation point for complex workplace issues; root-cause analysis.

Skills

Jamf Pro

Google Workspace

Cloudflare Zero Trust

Okta

Freshservice

Terraform

Git

CI/CD

Python

REST APIs

Tools

Freshservice

Jira Service Management

ServiceNow

Job description

This role exists to own the core stack of our Workplace Technology team: the systems that give our people their devices, identities, access and support. You will be the technical lead for Jamf, Google Workspace, Cloudflare Zero Trust, Okta and Freshservice, managing them as code wherever possible.

You will also help us reach a clear goal: AI agents handle the majority of level 1 triage, so our people spend their time on the problems that need a human. This is a hands‑on senior role reporting to the TechOps Lead.

What you'll do

Own the workplace stack

• Jamf: macOS fleet management end to end, including zero-touch enrolment, configuration profiles, patching, app deployment and security baselines
• Google Workspace: tenant administration, org units, sharing and DLP policies, Gemini and security controls
• Cloudflare Zero Trust: WARP, Access policies, Gateway filtering and TLS inspection, device posture and secure access to internal apps
• Okta: our identity source of truth, including SSO and SCIM integrations, group rules, MFA and authentication policies
• Freshservice: service desk design, including catalogue, workflows, SLAs, knowledge base and integrations

Key responsibilities and deliverables

• Manage these platforms as code (Terraform, Git, CI/CD and peer review) and extend that approach to areas still configured by hand
• Design and build AI agents that triage, enrich, route and resolve level 1 requests in Freshservice, with clear guardrails, audit trails and human escalation
• Automate identity and device lifecycle (onboarding, role changes and offboarding) across Okta, Google Workspace and Jamf
• Act as the escalation point for complex workplace issues and run root‑cause analysis so problems don't recur
• Write clear documentation and runbooks, and evaluate new tools, vendors and renewals for the stack

Collaboration and leadership

• Work closely with our DevOps, Security and Automation & AI engineers, and with business teams across Australia and the UK
• Set the technical direction and roadmap for Workplace Technology, and mentor junior team members on engineering practices

Compliance and regulatory

• Harden our workplace security posture with the Security team: device compliance, conditional access, least privilege and data loss prevention
• Maintain controls and provide audit evidence for a regulated insurer (for example SOC 2 and APRA-aligned controls)

Key skills & competencies

Technical skills (essential)

• 5+ years in systems, IT or workplace engineering, including at least 2 years at senior level
• Deep, hands‑on administration of Okta and Google Workspace in a SaaS‑first company
• Strong macOS fleet management experience with Jamf Pro
• Experience with Cloudflare Zero Trust or a comparable ZTNA/SASE platform (for example Zscaler or Netskope)
• Proven configuration‑as‑code practice: Terraform or similar, Git, code review and CI pipelines
• Scripting in Python, Bash or similar, and comfort with REST APIs and webhooks
• Experience running or redesigning an ITSM tool such as Freshservice, Jira Service Management or ServiceNow

Technical skills (desirable)

• Hands‑on experience building with LLMs or agent frameworks (for example Claude, MCP servers or tool‑calling agents) for IT or ops automation
• Jamf, Okta or Google Workspace certifications
• Experience in a regulated industry such as insurance, banking or healthcare
• Familiarity with GRC or security tooling (for example Vanta or Wiz) and AWS IAM Identity Center

Behavioural skills

• A security‑first mindset, with the judgement to balance user experience and control
• Clear written communication and the ability to explain technical trade‑offs to non‑technical colleagues
• Ownership: you see problems through to root cause and leave systems better than you found them

This role is great for:

Ideal for someone who would rather fix a problem once in code than solve it by hand a hundred times. You enjoy owning a stack end to end, you already work with configuration as code, and you're excited to use AI and agents to automate real work rather than just talk about it.

You’ll thrive here if you like high autonomy, an engineering‑minded team, and the stakes of getting identity, access and devices right in a regulated business.

Role location

This role will be based in Sydney, with a hybrid working model.

Minimum 3 days in the office (e.g. Monday, Tuesday, Thursday), plus occasional on‑site support when hardware or office infrastructure needs it.

Why Open?

It's an exciting time to join Open and be part of a tech scale‑up. We provide our team with:

• Highly competitive compensation, including share options – we believe in paying people what they're worth and having everyone in our company share in our success
• High levels of autonomy and trust so you can do your best work
• Growth opportunities internally – as you grow, your role can too.
• Flexible working – we are about impact, not time at your desk.
• We encourage freedom and responsibility, including the ability to work from anywhere.
• Paid company parental leave, supporting all parents as they balance career and family.
• Bonus 5 days of leave – additional paid leave designed to support rest and wellbeing once standard leave has been utilised.
• Personal development allowance – flexible annual benefit to support learning, wellbeing and personal growth.

About us

Open is a global tech company on a mission to make it easy for everyone to get the most from our insurance. We launched in Australia in 2016, opened our London office in 2022 and our Manchester office this year, rebuilding one of the world's least digitally mature industries from the ground up.

We do this through three products that work together to put customers first, from start to finish. Open Embedded lets businesses offer insurance directly inside its own apps and websites – so customers can get covered without leaving the experience they’re already in. Open Agentic uses AI safely and responsibly to guide customers through buying a policy, answering questions in plain English so they understand exactly what they’re getting.

Open Intel spots the moments when someone is most likely to need cover – like buying a car or moving house – and helps us reach them at the right time, in a helpful way.

We’re a Certified B Corporation with a global team across the UK, Australia and New Zealand.

Diverse perspectives and lived experiences make us better at what we do. If your CV doesn't tick every box, apply anyway. Let us know if you need any adjustments through the process and we’ll make it work.

Open is for builders – people who are intellectually curious, courageous and reject the idea that “it can't be done”. If that sounds like you, apply and let's build the future of insurance together.