IT Systems Engineer

platformsh; United States; Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

Flexible PTO

Healthcare coverage

Equity

Professional development

Equipment budget

Wellness support

Annual team gatherings

Internet reimbursement

Parental leave

Remote-work travel program

Job summary

Platform.sh is hiring to own and enhance the identity and internal systems layer for a globally distributed, remote organization. You will manage SSO, MFA, device trust, and API-driven provisioning while automating joiner/mover/leaver workflows and maintaining governance and compliance across the SaaS stack.

You will collaborate with HR, security, engineering, and IT operations to ensure reliable access, documented processes, and scalable IAM practices in a fully remote, international team.

Qualifications

• 5+ years in IT identity or access engineering.
• Experience with SaaS and ISO 27001/SOC 2 compliance.
• Proficient in Python or similar scripting.

Responsibilities

• Administer identity platform including SSO and MFA.
• Automate joiner/mover/leaver provisioning via SCIM and workflows.
• Maintain access request, approval and review processes.
• Support SaaS environment and collaboration tools across teams.
• Provide evidence for ISO 27001 and SOC 2 controls.
• Assist in endpoint and device management across OS platforms.

Skills

SSO

SCIM

APIs

Webhooks

Tools

Python scripting

Workflow tools

API tooling

Job description

Role overview

Own and improve the identity and internal systems layer for a globally distributed, remote organization. This role combines identity administration, access automation, SaaS operations, governance, and compliance engineering, with responsibility for making employee access reliable, secure, documented, and largely automatic.

Responsibilities

• Administer the organization’s identity platform, including single sign-on, multi-factor authentication, device trust, directory structure, groups, emergency access, and application integrations.
• Automate joiner, mover, and leaver processes by maintaining provisioning and deprovisioning workflows, SCIM connections, APIs, webhooks, and workflow tooling.
• Establish consistent procedures for access requests, approvals, reviews, application validation, and internal systems administration.
• Manage and integrate the SaaS environment and collaboration suite, working closely with HR, security, engineering, and IT operations.
• Implement and maintain access controls and evidence for ISO 27001 and SOC 2 Type 2 requirements.
• Partner on endpoint and device management across macOS, Windows, and Linux, while supporting adjacent internal IT needs as the organization grows.

Requirements

• Deep hands-on experience with an identity provider, including SSO, SCIM, lifecycle automation, and API-driven provisioning.
• Typically five or more years in IT systems, identity, or access engineering, ideally in a developer-heavy or engineering-led environment.
• Ability to build automation using workflow tools or similar platforms, work with APIs and webhooks, and script in Python or a comparable language.
• Experience standardizing fast-growing environments through clear procedures, documentation, and process improvement.
• Background operating and integrating a SaaS-first environment where identity and APIs are central to IT operations.
• Familiarity with ISO 27001 or SOC 2, plus strong written communication and the ability to work independently in a remote team.

Nice to have

• Experience administering a major cloud collaboration suite.
• Exposure to endpoint management, access-as-code practices, or security and audit programs.

Benefits and work setup

The role is fully remote within an international team. Listed benefits include flexible paid time off, healthcare coverage in several supported countries, equity, professional development and equipment budgets, wellness support, annual team gatherings, internet reimbursement, inclusive parental leave, and a remote-work travel program.