IT Engineer

Figma; San Francisco (CA); Remote; USD 122,000 - 215,000; Full time

Job summary

A leading design platform is looking for an IT Engineer to manage and optimize their Okta Identity and Access Management system. The ideal candidate has over 3 years of experience in Okta and GitOps practices, and is passionate about enhancing security and employee experience. This role can be remote or based in the US hubs and offers a competitive salary range of $122,000 — $215,000 depending on experience.

Benefits

Health, dental & vision insurance

Retirement with company contribution

Generous PTO and recharge days

Learning & development stipend

Qualifications

• 3+ years of experience managing Okta Identity Engine and Workflows.
• Experience with GitOps and configuration as code.
• Knowledge of identity and access management concepts.
• Familiarity with macOS endpoint management.

Responsibilities

• Manage and optimize the Okta Identity and Access Management platform.
• Develop IAM workflows and integrations to automate tasks.
• Implement Identity Governance practices to ensure security.
• Assist in managing the macOS endpoint infrastructure.

Skills

Okta Identity Engine management

GitOps/configuration as code

Identity and Access Management

Communication skills

Tools

GitHub

Terraform

Jamf Pro

Job description

Overview

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma's platform helps teams bring ideas to life-whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us!

As a member of the IT Engineering team, you will collaborate closely with IT, Security, and other multi-functional partners to develop, handle, and secure Figma's internal IT services. This role has a strong emphasis on Identity & Access Management (IAM), Identity Governance, and GitOps-driven automation, while also supporting endpoint management and SaaS platforms used daily by Figmates.

Our team owns and supports crucial services such as Okta, Google Workspace, and Slack, as well as backend solutions including Jamf, Okta Workflows, and Terraform-based infrastructure. You'll help scale and automate these systems to ensure security, compliance, and a seamless employee experience.

This is a full time role that can be held from one of our US hubs or remotely in the United States.

What you'll do at Figma:

Responsibilities

• Be responsible for the ongoing management and optimization of the Okta Identity and Access Management platform, including advanced configurations and lifecycle policies
• Build, develop, and maintain IAM workflows and integrations using Okta Workflows, APIs, or custom code to automate repetitive and manual tasks
• Define and implement Identity Governance practices (RBAC, ABAC, access reviews, device trust policies) to strengthen Figma's security posture
• Assist in the management and maintenance of our macOS endpoint infrastructure, ensuring efficient performance and security
• Deploy and handle systems via GitOps practices, using GitHub, Terraform, YAML, or similar tooling
• Collaborate with Security and IT Ops to ensure endpoints and SaaS integrations align with company policies and compliance standards
• Build and maintain documentation and runbooks for supported applications, processes, and training materials for internal employees and IT staff

We'd love to hear from you if you have

• 3+ years of experience managing Okta Identity Engine and Okta Workflows
• Proven experience with GitOps/configuration as code (GitHub, Terraform)
• In-depth knowledge of identity and access management concepts and practices
• Knowledge of device trust and zero trust security models
• Knowledge of macOS endpoint management (Jamf Pro or similar)
• Good communication and interpersonal skills; able to work cross-functionally with Security, Ops, and Engineering teams

Perks and Inclusion

At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you're excited about this role but your past experience doesn't align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles.

Pay Transparency Disclosure

If based in Figma's San Francisco or New York hub offices, this role has the annual base salary range stated below.

Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. The listed range is a guideline, and the range for this role may be modified. For roles that are available to be filled remotely, the pay range is localized according to employee work location by a factor of between 80% and 100% of range. Please discuss your specific work location with your recruiter for more information.

Figma offers equity to employees, as well a competitive package of additional benefits, including health, dental & vision, retirement with company contribution, parental leave & reproductive or family planning support, mental health & wellness benefits, generous PTO, company recharge days, a learning & development stipend, a work from home stipend, and cell phone reimbursement. Figma also offers sales incentive pay for most sales roles and an annual bonus plan for eligible non-sales roles. Figma's compensation and benefits are subject to change and may be modified in the future.

Annual Base Salary Range (SF/NY Hub):

$122,000 — $215,000 USD

At Figma we celebrate and support our differences. We are an equal opportunity workplace and are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity/expression, veteran status, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.

We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to [e-mail]. These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities.

Examples of accommodations include but are not limited to:

• Holding interviews in an accessible location
• Enabling closed captioning on video conferencing
• Ensuring all written communication be compatible with screen readers
• Changing the mode or format of interviews

To ensure the integrity of our hiring process and facilitate a more personal connection, we require all candidates keep their cameras on during video interviews. Additionally, if hired you will be required to attend in person onboarding.

By applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with Figma's Candidate Privacy Notice.