IT Systems Engineer at Platform.sh

Platform.sh; España; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Flexible PTO

Healthcare coverage (Spain/Europe)

Remote work culture

Job summary

Upsun, formerly Platform.sh, seeks an IT Systems Engineer to automate, govern, and scale identity across our SaaS estate and Google Workspace. You will own Okta-based identity, drive SCIM provisioning, and build reliable, auditable workflows in a fully remote, global team.

You will collaborate with Security and IT Ops to ensure compliant access controls, implement automation, and support rollout across multiple regions. Strong French is a plus for some teams.

Qualifications

• Deep identity management experience with Okta or similar provider (SSO, SCIM, lifecycle automation).
• Automation with workflows and APIs; scripting in Python or similar language.
• Experience in SaaS-based environments and API-driven provisioning.
• ISO27001 or SOC2 familiarity with audit-oriented environments.
• Strong remote collaboration and clear communication in a distributed team.

Responsibilities

• Own identity and access management across SaaS stack; manage SSO and SCIM integrations.
• Automate provisioning/deprovisioning; maintain code-driven access configurations.
• Establish and enforce governance around access requests, approvals, and reviews.
• Administer Google Workspace and integrate tools via Okta and HR systems.
• Implement and demonstrate controls for ISO27001/SOC2 with audit-ready logs.
• Collaborate on endpoint management and MDM across platforms as needed.

Skills

Identity management

Automation

Python scripting

Process optimization

SaaS operations

Remote work

French proficiency

Tools

Okta Workflows

n8n

Terraform

Git workflows

Google Workspace

Job description

IT Systems Engineer – Platform.sh

En remoto, ES. This Visa sponsorship job abroad position offers great opportunities for career growth.

About Upsun (formerly Platform.sh)

Upsun is the cloud application platform humans and robots love. It is built for today's hybrid teams, where AI agents write and test code and humans focus on solving the problems that really matter. Developers, DevOps engineers, and platform teams use Upsun to build, ship, and scale confidently without wrestling with backend infrastructure. We give you your time back.

Predictable performance, even at scale

Secure, compliant environments by default

Real-time observability and profiling built in

Cloning, configuration, and provisioning in seconds

AI-ready features that plug directly into your stack

The name says it all. “Up” means uptime, reliability, and acceleration. “Sun” reflects our follow-the-sun-support, a 24×7, globally distributed support team keeping the lights on while you rest.

Our core belief is that software should power brighter solutions and greater innovation. Upsunners are a remote, global workforce, and we thrive in a multicultural team. We are committed to open source and an open, welcoming environment. Our team spans the globe and the experience spectrum. What's our commonality, our cultural fabric? A curious spirit and a thirst for knowledge; an eagerness for innovative ideas and cultures. We believe we can build anything together in an environment that frees you to do your best work.

Our values

We make a positive impact.

We aim for the stars.

We care for each other.

Impact of an IT Systems Engineer

As an IT Systems Engineer you take the identity plane from working to well‑run: automated, governed, and consistent, so access is correct by default, and our auditors find evidence rather than surprises. Reporting to the IT Director, you play a pivotal role in a growing internal IT department, driving the internal systems layer around identity—from our SaaS estate to Google Workspace. You are the person who makes identity quietly reliable: predictable, documented, and automated, while remaining flexible enough to support the wider IT function as our scaling remote organization evolves.

Identity and access management

Own Okta as the backbone of how people get access, managing the app catalog (SSO integrations for new SaaS tools), policy management (MFA, device trust), and directory hygiene (Universal Directory, group management, breakglass access).

Run identity day to day, refine our SSO and SCIM integrations, and keep joiner, mover, and leaver flows accurate from our HR system.

Lifecycle and access automation

Automate provisioning and deprovisioning so access is granted and revoked automatically, not by hand. Build and maintain workflows with tools like Okta Workflows and n8n, manage access configuration as code, and keep SCIM provisioning in sync with our HR system.

Process and governance

Structure and harmonize clear procedures around the identity plane, so access requests, approvals, and reviews follow one consistent, documented path instead of ad hoc steps.

Internal IT systems and SaaS administration

Own our internal systems end to end. Integrate, secure, and validate our SaaS stack, administer Google Workspace as our core collaboration suite, connect our tools through Okta and our HR system, and own the application validation process.

Compliance engineering

Implement and evidence access controls for ISO27001 and SOC2 Type2 with our Security team, ensuring access reviews and audit logs are a by‑product of well‑built systems, not a quarterly scramble.

Endpoint and device management (shared)

Partner on administrating Jumpcloud our MDM across macOS, Windows, and Linux, sharing endpoint and device management with our IT Operations and Endpoint Manager so coverage scales with the team.

Where the team needs you

We are a small, growing IT team, so scope will flex over time. You are happy to pick up adjacent systems work and support across the wider IT function as our needs evolve.

What you bring

• Identity expertise: Deep, hands‑on experience with Okta or a comparable identity provider, including SSO, SCIM, lifecycle automation, and API‑driven provisioning.
• IT Experience: Typically 5 or more years in IT systems, identity, or access engineering, including time in a developer‑heavy or engineering‑led environment.
• Automation skills: You build automation with tools like Okta Workflows, n8n, or similar, you are comfortable with APIs and webhooks, and you script in Python or a comparable language.
• Process optimization: You bring order to environments that grew quickly. You write clear procedures, standardize how things are done, and leave systems better documented than you found them.
• SaaS‑first operations: You have run and integrated a SaaS-based environment, where identity and APIs matter more than racks and networks.
• Compliance fluency: You have worked inside ISO27001 or SOC2, ideally Type2 where evidence is continuous, and you understand what auditors actually need.
• Remote collaboration: You work well without close supervision in a fully remote team, and you communicate clearly with technical and non‑technical colleagues alike.
• Google Workspace administration: We are a Google shop, so hands‑on Google Workspace administration is core to this role: users, groups, policies, and security settings.
• Working style: You are comfortable wearing several hats in a small IT team, picking up adjacent systems and endpoint work, and flexing as priorities shift.
• Bonus points: Comfort managing configuration through Git‑based workflows, or infrastructure as code with Terraform.
• Professional proficiency in French.

Where we hire

At Upsun, remote work isn't just a trend - it's our foundation. The freedom of remote work with the support of a diverse, global team has been our successful model for over a decade. Our culture celebrates flexibility and collaboration, and while we have team members in over 30 countries around the globe, we are currently focused on hiring for this role in Canada, France, Germany, Spain, and the United Kingdom. Although we're unable to provide visa sponsorship at this time, we welcome applications from all qualified candidates who are legally authorized to work in these countries.

How we hire

We know that a great hire won't meet every requirement that we've outlined. If you can see yourself elevating the team, we want to hear your story. Few of us would be here had we not taken a chance.

• 45 Minutes with Talent Acquisition
• 60 Minutes with Hiring Manager (Director, IT)
• 60 Minutes with Team (Senior Director, Site Reliability Engineering & Senior IT Manager)
• 45 Minutes with Executive (Senior Director, FP&A & IT)

All roles require background checks.

What we offer

• A product you can believe in – Join us in transforming how businesses build and manage web applications, driven making a positive impact as a proud B Corp.
• An Award‑Winning Workplace – We've been recognized by Forbes' Top30 Companies for Remote Jobs and France's Best Workplaces for Women.
• A culture that values your voice – Join a flexible, open, and inclusive work environment where your voice is encouraged, and your ideas shape our growth and evolution.
• A global team – Collaborate with colleagues from diverse backgrounds across the world, embracing different perspectives.
• Benefits and perks – Make the most of what matters to you Flexible PTO Comprehensive healthcare coverage (UK, Canada, France, Spain) Company stock options Professional development budget Office equipment budget Wellness budget Annual team gatherings Internet reimbursement Inclusive parental leave Remote work travel program

You belong here

At Upsun, we celebrate diversity in all its forms and are committed to fostering an inclusive, equitable, and supportive workplace where everyone can thrive. We embrace and value different perspectives, backgrounds, and experiences, because they make us stronger as a team. Whoever you are, wherever you're from, and whatever path you've taken, you are welcome here. We encourage you to bring your whole self to work, connect with others, and share your passion. If you need accommodations at any stage of our hiring process, please let us know. We're here to ensure an accessible and comfortable experience for you.