IT Solutions Engineer (Remote) (copy)

Finom; United States; Remote; USD 110,000 - 160,000; Full time

Benefits offered by this job

Stock options

Work & Swim program

Remote work options

Job summary

Finom is seeking an IT Solutions Engineer to design and build automation across identity, HR, device, and SaaS governance ecosystems. You’ll own provisioning and deprovisioning workflows, connect JumpCloud, Google Workspace, and Jira Service Management, and ensure reliable, scalable operations.

You will script where no-code tools fall short, drive security-conscious configurations, and collaborate with Security, People Ops, and DevOps to deliver end-to-end solutions rather than quick fixes.

Qualifications

• 3+ years in IT support, systems administration, or IT/DevOps engineering with hands-on Windows and macOS experience.
• Strong IAM experience: JumpCloud (SSO, SCIM, SAML) including integrations and provisioning debugging.
• MDM/UEM experience: JumpCloud MDM (or Intune/Jamf), profiles and scripts for zero-touch deployment.
• Automation-first mindset with real scripting skills (PowerShell, Bash, Python) for scalable solutions.
• API fluency: comfortable with REST, webhooks, SCIM; experience with n8n or similar iPaaS.
• Proficiency with Google Workspace (or M365) and ITSM tools, ideally Jira Service Management.
• Clear English communication across technical and non-technical audiences.
• Advanced use of AI tools to accelerate troubleshooting and automation.

Responsibilities

• Build the access lifecycle automation layer for provisioning/deprovisioning across top apps.
• Integrate core systems into a cohesive, event-driven lifecycle using REST, SCIM, and n8n.
• Manage identity and access at the backend: SSO/SCIM/SAML in JumpCloud; maintain end-to-end SSO integrations.
• Deliver security controls programs: least-privilege, admin removal, and SOC 2/DORA alignment.
• Administer and optimize Jira Service Management and Atlassian Suite, Slack, and Notion workflows.
• Own endpoint automation: JumpCloud MDM device policies and zero-touch deployment across Windows/macOS.
• Drive SaaS optimization: monitor usage and implement license reclamation flows.
• Document everything: technical configs, automation flows, API maps for repeatability.
• Lead technical projects end-to-end: new SSO app, JSM form, or new system integration.

Skills

IAM experience

Scripting

API fluency

n8n or iPaaS

Jira Service Management

JumpCloud

Google Workspace/M365

Windows/macOS

Tools

JumpCloud

n8n

Google Workspace

Jira Service Management

Tequipy

Slack

Notion

Job description

About the Role
We're looking for an IT Solutions Engineer who thinks like a systems builder - someone who doesn't just run internal infrastructure, but engineers it away where it shouldn't need a human at some point. This is a build-focused role on our IT Operations team. As we scale past 600 employees, our biggest lever is no longer closing tickets faster - it's removing the work that generates them.
You'll own the automation and integration layer that connects our identity, HR, device, and SaaS-governance systems, so that provisioning, deprovisioning, and access lifecycle events happen reliably and automatically instead of by hand. You'll pair closely with our Solutions Engineer, help set the technical standard for how automations are built and documented, and work cross-functionally with Security, People Ops, and DevOps to design end-to-end solutions rather than point fixes.
A DevOps and API background is exactly what this role is built around: you're comfortable reading API docs, wiring 2-3 systems together, scripting from scratch when a no-code tool won't cut it, and thinking about reliability, edge cases, and security from the first line. Above all, you're curious - about the systems you build, the people who depend on them, and how your engineering decisions impact the business.

What You'll Do

• Build the access lifecycle automation layer: Own the design, build, and maintenance of automated provisioning and deprovisioning across our top applications by ticket volume. Implement birthright roles for our highest-volume employee profiles and HiBob-driven trigger events (joiners, movers, leavers) that flow through to downstream systems without manual intervention.
• Integrate our core systems: Build and maintain the integrations that tie HiBob → JumpCloud → Tequipy (and Google Workspace, Slack, Notion, and the wider SaaS estate) into one coherent, event-driven lifecycle. Use REST APIs, SCIM, and our self-hosted n8n instance to create complex, reliable workflows.
• Manage identity and access at the backend: Configure and debug SSO/SCIM and SAML flows in JumpCloud as our Identity Provider. Own SSO app integrations end to end, troubleshoot complex provisioning and authentication issues, and keep access governance clean and auditable.
• Deliver the Security controls programme: Build the automations behind our security and compliance initiatives - local admin removal, least-privilege enforcement - contributing directly to DORA, ISO 27001, and SOC 2 efforts. Security is embedded in every config and every script, not bolted on afterward.
• Administer and optimize business-critical platforms: Manage the technical backend of Jira Service Management as our ITSM platform - configuring workflows, request types, forms, and automations to streamline internal processes - alongside the wider Atlassian Suite, Slack, and Notion.
• Own endpoint automation: Build and test JumpCloud MDM device policies, profiles, and scripts for zero-touch deployment across Windows and macOS endpoints (via Apple Business Manager), handling software deployment and OS-level configuration at scale.
• Drive SaaS and budget optimization: Monitor system logs, performance, and SaaS usage to identify waste and cost-saving opportunities, and implement the technical changes that reclaim them (e.g. license reclamation flows).
• Document everything you build: Proactively create and maintain technical documentation configs, automation flows, API maps - so that what you build can be run, understood, and extended by the rest of the team. Reliable, documented, alerted workflows are the standard, not the exception.
• Lead technical projects: Lead smaller technical projects end to end a new SSO app integration, a JSM form build-out, a new integration between systems - owning them from requirement to delivery, and providing technical guidance to the team as you go.

Who You Are

• At least 3 years in IT support , systems administration, or IT/DevOps engineering, with hands-on expertise across Windows and macOS environments.
• Strong IAM experience: JumpCloud (or a comparable IdP) for SSO, SCIM, and SAML - including configuring integrations and debugging complex provisioning and authentication issues.
• Strong MDM / UEM experience: endpoint management via JumpCloud MDM (or Intune / Jamf), including profiles and scripts for zero-touch deployment.
• An automation-first mindset with real scripting skills - PowerShell, Bash, Python, or similar - to build reliable, scalable solutions from scratch, not just wire up templates.
• API fluency: comfortable reading API documentation and integrating multiple systems (REST APIs, webhooks, SCIM). Experience with n8n or a comparable automation/iPaaS platform.
• Proficiency administering Google Workspace (or M365) and experience with ITSM tools - ideally Jira Service Management (workflows, request types, automations).
• Clear, concise communication in English across technical and non-technical audiences - able to explain configs and tradeoffs to Security, People, and Engineering alike.
• Advanced use of AI tools to accelerate troubleshooting, draft automations, and continuously raise the bar on operational efficiency.

Strong Plus

• Familiarity with security frameworks (ISO 27001, DORA, SOC 2) and SaaS governance / management tooling.
• Experience with HRIS-driven automation (HiBob or similar) and hardware lifecycle tooling (Tequipy or similar).
• Experience in high-growth, modern infrastructure environments.
• ITIL 4 Foundation and JumpCloud Core Certification (or willingness to certify).

What We Offer

What We Offer
As a growing fintech with ambitious goals, we offer you the chance to make a real impact on the infrastructure that powers Finom's teams and products. You'll work with genuine ownership, autonomy, and the freedom to shape how we build and operate our internal systems.
This is a role for a curious builder - someone who wants the internal platform to be a product, engineered to be reliable, automated, and secure by design. If the idea of deleting an entire category of manual work by building the right integration is what gets you out of bed, this is your team.

What You Will Get In Return

What You Will Get In Return
Make a genuine impact on the product
Join our upward trajectory, and grow with us. We provide the resources and opportunities for continuous personal and professional development, empowering you to make a genuine impact on our evolving product.
Work in the EU
Embark on this exciting journey with us and enjoy the flexibility of traveling and working remotely or in a hybrid model across Europe.
Become a stock options holder
Unlock your inner entrepreneur and align your aspirations with ours through our Stock Options Program. This exciting opportunity is available to every team member, from junior team members to our founders.
Receive unwavering support and care
Finom stands by you at every step, embodying our commitment to your well-being and success reflected in our modern, friendly, and eco-conscious corporate culture. We offer constant support and care to ensure your Finom experience is successful and fulfilling.
Work & Swim program
Immmer yourself in our exclusive Work & Swim Program. Spend one month in a comfortable corporate apartment in enchanting Cyprus. It's the ideal opportunity to strike the perfect work-life balance while enjoying breathtaking Mediterranean views.
Equal Opportunity Statement
At Finom, we're an equal opportunity employer and value diversity at our company. We embrace diversity and invite applications from all walks of life. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, disability status, or other applicable legally protected characteristics.