IT Operations Engineer

agentsync-careers; Denver (CO); On-site; USD 100,000 - 115,000; Full time

Benefits offered by this job

Health benefits

401(k)

HSA contributions

Flexible PTO

12 paid holidays

Parental leave

Job summary

AgentSync, a Denver-based venture-backed SaaS company, seeks an IT Operations Engineer to own identity, endpoint, and SaaS infrastructure. You will replace manual work with automation, scale IT operations in a fast-moving startup, and set the standard for great internal support.

You will manage Okta SSO/SAML/OIDC, JAMF macOS endpoints, AWS IAM, and Linux networking; automate onboarding/offboarding; define IT KPIs; and lead projects with a collaborative, ownership-driven mindset.

Qualifications

• Significant hands-on experience in IT Operations or IT Engineering.
• Deep experience administering identity providers at scale (Okta preferred) with SAML/SSO/OIDC.
• MacOS fleet management with an MDM (Jamf preferred).
• Working knowledge of AWS cloud identity and access management.
• Solid Linux fundamentals and networking knowledge.
• Scripting and automation experience (Python, Bash).
• Familiarity with SOC 2 and how IT controls support them.
• Experience administering ticketing and collaboration platforms.
• Track record leading projects in ambiguous environments.
• Experience mentoring or leading others.
• Strong communication to explain identity, access, and endpoint concepts.
• Ownership and scrappy mindset.

Responsibilities

• Own and mature the identity provider (Okta) — SSO/SAML/OIDC integrations and RBAC across SaaS estate.
• Build IAM foundations and automated joiner/mover/leaver workflows with access reviews.
• Design and scale macOS endpoint program in JAMF toward MDM maturity.
• Automate onboarding, offboarding, and access requests to be repeatable.
• Define and report KPIs that measure IT Operations effectiveness.
• Lead IT projects end to end with evolving requirements.
• Partner with Security and Compliance for SOC 2 evidence collection and readiness.
• Troubleshoot identity, networking, endpoints, and SaaS apps.
• Support employees with customer love and proactive issue resolution.
• Manage hardware and improve IT ticketing/collaboration platforms.

Skills

IT Operations

SRE mindset

Automation scripting

Strong communication

Mentoring / leadership

Ownership mindset

Tools

Okta

Jamf

AWS

Linux

Scripting (Python/Bash)

Ticketing platforms

Job description

AgentSync started in 2018 with one conviction: compliance shouldn't be this hard. It should enable it. We're a venture backed category-defining SaaS company headquartered in Denver. We've raised $161 million from investors including Craft Ventures, Valor Equity Partners, and Marc Benioff.

Our culture runs on four values: customer love, inspire excellence, always be curious, and act like an owner. That means no ego, no politics, and real ownership over your work. If you want to build something that matters for an industry that's ready for change, we'd love to talk.

Overview

As an IT Operations Engineer, you will own the identity, endpoint, and SaaS infrastructure that every AgentSync employee depends on to do their best work. You will help scale our IT Operations practice in a fast-moving startup environment — replacing manual, ticket-driven work with automation, standing up durable access and device management foundations, and defining the metrics that tell us whether IT is healthy. You’ll take projects from loose problem statements to production, partner closely with Engineering, Security, and the business, and set the standard for what great internal support looks like.

What You’ll Do

• Own and mature our identity provider (Okta) — SSO/SAML/OIDC integrations, SCIM provisioning, lifecycle management, and least-privilege RBAC across our SaaS estate
• Build the IAM and RBAC foundations that let us grow: consistent access models, automated joiner/mover/leaver workflows, and access reviews that hold up under audit
• Design and scale our macOS endpoint program in JAMF — zero-touch provisioning, patching, configuration profiles, and compliance baselines — with a clear roadmap toward MDM maturity
• Automate manual IT workflows with scripting and integrations so that onboarding, offboarding, and access requests are repeatable rather than tribal knowledge
• Define and report the KPIs that measure IT Operations effectiveness — response and resolution times, provisioning cycle time, patch and MDM compliance, and license utilization — and use them to drive investment decisions
• Lead IT projects end to end with loose or evolving requirements: frame the problem, plan the phases, sequence the work, communicate timelines, and deliver
• Prioritize a heavy queue of competing requests and incidents without losing the thread on long-term project work
• Partner with Security and Compliance to support SOC 2 evidence collection, access reviews, and audit readiness
• Troubleshoot escalated issues across identity, networking, endpoints, and SaaS applications — including the ones nobody has documented yet
• Support employees with genuine customer love, managing frustration with patience while getting to the real fix and preventing the repeat
• Administer and improve our ticketing and collaboration platforms so requests are routed, tracked, and measured rather than lost in DMs
• Regularly bridge the gap between IT and Engineering, Security, and business teams as a champion of cross-team collaboration
• Provision and manage employee hardware
• Participate in helping to build and maintain a culture of IT and engineering best practices

What You’ll Bring

• Significant hands-on experience in IT Operations or IT Engineering, ideally at a startup or other high-growth, fast-changing environment
• Deep experience administering an identity provider and access permissions at scale (Okta strongly preferred), including SAML, SSO, OIDC, and automated provisioning
• Strong macOS fleet management experience with an MDM (Jamf preferred), and a clear point of view on what a mature MDM solution looks like and how to get there
• Working knowledge of AWS, including cloud identity and access management
• Solid Linux fundamentals and networking knowledge — comfortable reasoning through the OSI model when troubleshooting
• Scripting and automation experience (Python, Bash) paired with an automation-first mindset
• Familiarity with security and compliance frameworks (SOC 2) and how IT controls support them
• Experience administering ticketing and collaboration platforms and improving the workflows that run on them
• A track record of leading projects without being handed direction, and of executing from scratch in ambiguous situations
• Experience mentoring, leading, or otherwise growing the people around you
• The desire to work on a collaborative, learning oriented team
• Strong verbal and written communication skills, with the ability to explain identity, access, and endpoint concepts to non-technical audiences
• A scrappy, roll-up-your-sleeves mentality — you thrive with ambiguity and ownership

Location
Our ideal candidate will live within 25 miles of our office in Denver. Other states we're able to consider candidates in CA, CO, CT, GA, IL, IN, KS, MA, MD, MI, MN, MO, NC, NY, OR, TN, TX, UT, and WA. We are not hiring or able to consider candidates in New York metro, Seattle metro, or Bay Area.

Total Compensation

The following represents AgentSync’s reasonable estimate of the range of possible compensation for this role.

$100K-$115K base salary

Annual company bonus program

Equity in the form of stock options

Health Benefits

Medical - Multiple Cigna plans to choose from, with up to 80% employer paid premiums for you and your dependents

Dental - Multiple Cigna plans with up to 80% employer paid premiums for you and your dependents

Vision - 80% paid premium plan for you and your dependents

Employee Assistance Plan, Life & AD&D Insurance

Financial Benefits

401(k) retirement savings plan

HSA employer contributions

Other Benefits

Flexible PTO

12 paid holidays per year

12 weeks parental leave w/generous return to work stipend

Candidates: AgentSync Recruiting & Talent teams will only communicate with you using @agentsync.io email addresses. When you receive communication from AgentSync, check the email address domain to ensure you're connected with our team (and not a scammer!).

We are not able to consider candidates who require a work visa now or in the future.

E-Verify: AgentSync participates in the federal E-Verify program. As required, we will verify the identity and employment eligibility of all newly hired employees through E-Verify.