Senior IT Engineer (Corporate IT)

Enline Energy Solutions; Porto; Hybrid; EUR 65,000 - 95,000; Full time

Job summary

Enline Energy Solutions is seeking an experienced IT leader to own corporate IT end to end, including identity, devices, third-party services, cloud organization administration, and compliance. The role partners with Cybersecurity on controls and audits and requires strong automation skills.

You’ll report to the Head of Technology, drive ISO 27001, SOC 2, NIS2, and IEC 62443-4-1 readiness, and manage vendor spend and IT governance in a fully remote, Portugal-based team.

Qualifications

• 5+ years in IT or systems administration, including ownership of corporate IT end to end.
• Deep identity knowledge: SAML, OIDC, SCIM, directory services, MFA, and privileged access management.
• Multi-platform endpoint management: macOS (Apple Business Manager), Windows and Linux.
• Google Workspace administration beyond basics.
• Cloud organization-level administration in GCP/AWS/Azure.
• Automation: shell, Python or PowerShell, Git, and infrastructure as code.
• Experience leading ISO27001/SOC2/NIS2 audits as a control owner.
• Vendor, contracts, renewals, and license true-ups; budget tracking.
• Strong technical writing; documentation is part of the job.
• High autonomy; deliver finished, documented work without chasing.
• Fluent English, written and spoken.

Responsibilities

• Own corporate IT end to end: identity, devices, third‑party services, cloud org administration, and compliance.
• Lead the IT workstream for ISO 27001, SOC 2, NIS2, and IEC 62443-4-1 projects through to audit.
• Manage IAM, SSO, and device lifecycle; collaborate with Cybersecurity on controls and incidents.
• Automate using Terraform, scripts, and Git; create clear runbooks and documentation.
• Work with Operations to manage IT spend and vendor relationships.

Skills

IT systems administration

Identity management

Endpoint management

Cloud administration

Automation

ISO27001 SOC2 audit

Vendor & budget management

Technical writing

Autonomy

Fluent English

Tools

JumpCloud

Google Workspace

CrowdStrike Falcon

Tailscale

1Password Business

Terraform

GitHub

Job description

ENLINE is a growing European technology company established in 2019. We have global ambitions and are already present on 5 continents. Our goal is to help optimize power grids around the world, promoting a fast, safe and affordable green energy transition. Our unique offering combines software and sensors to increase the capacity of existing power grids. This technology enables the integration of more renewable energy and the electrification of consumption. Using what we already have more efficiently reduces our carbon footprint while creating value for society, industry and our shareholders. We are experiencing significant demand for our solutions and need capable, creative, dedicated professionals to help us capitalize on our previous success and continue to grow to our full potential. At ENLINE we value and benefit from the wide-ranging perspectives that come from a diverse and inclusive work environment.

About Enline
Enline builds software products that help transmission system operators and utilities manage their electrical lines and grids. We're a fully remote, Portugal-based company of around 50 people, working on software that keeps critical energy infrastructure running.

Our customers hold us to critical-infrastructure security standards, and we're building an ISMS to match.
The foundations of our corporate IT are designed and partly in place: an HR-driven identity chain, managed devices, and a single IT security policy. We need someone to own it.

The role
You’ll own Enline's corporate IT end to end: identity, devices, third-party services, cloud organization administration, and the IT side of compliance. This is not a helpdesk role. You’ll take systems that are designed and half-built, finish them, run them, and document them. Your first major project: leading the IT workstream that gets Enline certified for ISO 27001 and SOC 2, and compliant with NIS2.

You’ll report to the Head of Technology, who approves tool choices, architecture, and budget. You’ll bring the evaluations and recommendations; once a decision is made, deployment, operation, and documentation are yours. You’ll work closely with our Cybersecurity team on controls, incidents, and audits.

Where the line sits:

• The Head of Technology decides which tools we use, the architecture, and the budget. Your recommendations carry real weight in those decisions.
• You own the deployment and operation of everything employees and admins log into, carry, or install, every third-party service we use, and cloud organization-level administration (IAM, SSO, org policies, billing).
• Platform/Infrastructure owns the product's infrastructure and workloads inside those cloud organizations, all managed as code through a GitOps and ChatOps workflow. You’re welcome to work in it too, via pull requests and chat commands.
• Cybersecurity owns the ISMS and risk management; you own and operate the IT controls within it.
• Operations owns company finance; together with them, you manage spend against the approved IT budget.

What you’ll own

• Identity and access. The joiner-mover-leaver lifecycle from HR system to directory to identity provider. SSO and SCIM for every SaaS app, MFA everywhere, and our privileged access model:
  separate admin accounts and just-in-time elevation instead of standing admin rights.
• Endpoints. A remote fleet of macOS, Windows, and Linux machines: zero-touch enrollment, MDM, EDR, patching, encryption, and software distribution. Device logistics too (provisioning, shipping, retrieval, and wipes) with no office to fall back on.
• Third-party services. Running every vendor and SaaS tool we use: access (SSO, provisioning, admin roles), vendor support, contracts, renewals, and billing. With our Operations team, you’ll manage spend against the approved IT budget: tracking costs, forecasting, flagging overruns, and keeping SaaS sprawl in check.
• Cloud organization administration. Our GCP organization and remaining AWS accounts at org level: resource hierarchy, org policies, IAM, SSO federation, billing accounts, budgets, and cost visibility.
• Compliance. Driving the IT workstream of our certification push (ISO 27001, SOC 2, NIS2, and IEC 62443-4-1) through to audit, then operating those controls: evidence collection, quarterly access reviews, policy enforcement, and customer security questionnaires.
• Automation. Configuration as code wherever it’s possible: Terraform, ACLs in Git, scripts over click-ops. If you do something twice, the third time is automated.
• Documentation. A living knowledge base: how our systems work, runbooks for operations, and clear guides for the rest of the company, with short decision records where they matter. In a fully remote company, undocumented systems don’t exist.
• Support. Being the IT person for ~50 people across time zones, async-first, with self-service as the goal.

Your first 90 days

• By day 30: You’ve inventoried every system, vendor, admin account, device, and license (with owners and costs), read our documentation and policies, and taken over onboarding and offboarding.
• By day 60: Directory and device management are rolled out across the whole fleet (macOS, Windows, and Linux), with HR and identity-provider integrations live and SSO covering our core apps.
• By day 90: You’ve agreed an ISO 27001, CRA, and NIS2 gap assessment and remediation plan, mediating the process between external consultants and auditors and internal teams, and a repeatable evidence process is running. Runbooks exist for joiners, movers, leavers, device lifecycle, and incidents, and the first quarterly access review is done.

Our stack

The main choices are made. Where they’re still in rollout, you’ll finish them.

Area Tools

• HR and employee lifecycle Deel
• Directory and device management JumpCloud, Apple Business Manager
• Identity provider and productivity Google Workspace
• Endpoint security CrowdStrike Falcon
• Network access Tailscale
• Secrets and passwords 1Password
• Work and knowledge management Linear, Outline, Attio
• Code and config as code GitHub, Terraform

How we work

• Full-time position. Hybrid in Porto preferred, with flexibility. The company is fully remote and has no physical office (yet).
• Async and written first. Slack for conversations, knowledge lives in Outline, work is tracked in Linear, and key decisions get a short written record.
• Clear ownership. You research and recommend; the Head of Technology decides. From there, delivery and operation are fully yours.

Requirements

What we’re looking for

• 5+ years in IT or systems administration, including at least 2 years owning corporate IT end to end at a remote or distributed company.
• Deep identity knowledge: SAML, OIDC, SCIM, directory services, MFA, and privileged access management.
• Multi-platform endpoint management: macOS with Apple Business Manager and MDM, plus Windows and Linux.
• Google Workspace administration beyond the basics: org units, context-aware access, admin roles, and audit logs.
• Cloud organization-level administration in GCP, AWS, or Azure: resource hierarchy, org policies, IAM, and billing.
• Real automation skills: shell plus Python or PowerShell, Git, and infrastructure as code (Terraform or similar).
• Hands-on experience taking a company through an ISO 27001 or SOC 2 audit as a control owner.
• You know what good evidence looks like.
• Vendor and budget management: contracts, renewals, license true-ups, and tracking spend with finance or operations.
• Strong technical writing. Documentation is part of the job, not an afterthought.
• High autonomy: you turn direction into finished, documented work without being chased.
• Fluent English, written and spoken.

Nice to have

• Hands-on experience with JumpCloud, CrowdStrike Falcon, Tailscale, or 1Password Business.
• Managing SaaS configuration as code (e.g. Terraform providers for Google Workspace or Tailscale).
• Working in GitOps or ChatOps workflows: pull-request-driven changes and chat-driven automation.
• Fleet-scale package management on macOS (Homebrew, Workbrew, Munki, or similar).
• Experience in energy, utilities, or other critical-infrastructure environments, or with IEC 62443.
• Building small internal tools or integrations to remove manual work.