Platform Engineer

Fullsteam; Oregon; Hybrid; USD 90,000 - 102,000; Full time

Job summary

Fullsteam, a leading provider of vertical software and embedded payments, seeks an experienced Enterprise IT Engineer to build and maintain CI/CD pipelines and integrate AI connectors. You will secure Microsoft 365 and Azure environments, implement SSO/ID management, and collaborate across teams to deliver scalable engineering solutions.

Join a dynamic, growth-oriented company committed to innovation and enterprise-grade security, with opportunities to influence architecture and tooling across

Qualifications

• 5+ years of combined professional experience and education in Information Technology or related field.
• Bachelor's degree required; 4+ years may substitute for degree.
• Experience building CI/CD pipelines and automation using GitHub Enterprise.
• Experience developing and integrating RESTful APIs.
• Proficiency in PowerShell and/or Python scripting.

Responsibilities

• Build and maintain the Enterprise IT GitHub pipeline with CI/CD workflows, branching strategies, and automation standards.
• Develop and maintain automated playbooks and tooling for rapid, low-error operations.
• Design, develop, and maintain APIs and integrations (RESTful) connecting enterprise systems and data.
• Co-manage MCP connectors that integrate AI tools with enterprise data and services.
• Strengthen identity and data security across Microsoft 365 and Azure (CA, PIM, Entra ID, DLP, labeling, data classification).
• Provide technical guidance on architecture, integration, and secure access to Microsoft 365 and Azure data.
• Build and maintain Azure infrastructure for scalable, secure enterprise solutions.
• Implement IAM day-to-day including SSO (SAML/OIDC), SCIM provisioning, role-to-group mapping, Entra ID app registrations, and least privilege permissions.
• Administer the Microsoft 365 tenant and governance posture (SharePoint Online, Exchange Online policies, retention, sharing, deprecations, data recovery).
• Implement security measures and monitor configurations to protect data and maintain compliance.
• Partner with Corporate IT and stakeholders to translate requirements into scalable engineering solutions and maintain documentation.

Skills

PowerShell

Python

BASH

RESTful APIs

CI/CD pipelines

Azure

Microsoft 365

Identity & Access Management

SAML/OIDC

Entra ID

MFA

GitHub Enterprise

API integration

Education

Bachelor's degree in Computer Science / Software Engineering / MIS / Cyber Security

Tools

GitHub Enterprise

Job description

It's fun to work in a company where people truly BELIEVE in what they're doing!Fullsteam is a leading provider of vertical software and embedded payments technology dedicated to helping businesses flourish by providing their customers with seamless experiences. With a dynamic and growing team of over 1,900 employees, we are committed to driving innovation and delivering best-in-class software and payment solutions that empower small and medium-sized businesses across numerous industries. Our purpose is to help our customers grow their businesses and delight their customers. Join us and be a part of a forward-thinking company that values growth, excellence, and the success of our clients.

Primary Responsibilities:

• Build and maintain the Enterprise IT GitHub pipeline alongside the Senior Platform Engineer, including CI/CD workflows, branching strategies, and automation standards.
• Develop and maintain automated playbooks and tooling that support rapid, low-error operations.
• Design, develop, and maintain APIs and integrations (such as RESTful APIs) that connect enterprise systems, services, and data.
• Co-manage the Model Context Protocol (MCP) connectors that integrate the organization's AI tools with enterprise data and services, ensuring secure, least-privilege access.
• Strengthen identity and data security across Microsoft 365 and Azure, including Conditional Access, Privileged Identity Management (PIM), Entra ID Protection, and Microsoft Purview data loss prevention (DLP), sensitivity labels, and data classification.
• Provide technical guidance to AI platforms and projects across the organization, advising on architecture, integration, and secure access to Microsoft 365 and Azure data.
• Build and maintain Azure infrastructure to support scalable and secure enterprise solutions.
• Implement and maintain identity and access management day-to-day, including SSO integrations (SAML and OIDC), SCIM-based user and group provisioning, role-to-group mapping, Entra ID app registrations, and scoping of Microsoft Graph API permissions to least privilege, following the architecture and standards set by the architect and Senior Platform Engineer.
• Administer the Microsoft 365 tenant and help maintain its governance posture, including SharePoint Online and Exchange Online policy configuration, retention and sharing controls, tracking and remediating Microsoft service deprecations and roadmap changes, and data recovery and restore operations.
• Implement security measures and monitor configurations to protect data and maintain compliance.
• Partner with Corporate IT, Business Units, and stakeholders to translate requirements into scalable engineering solutions, and maintain clear documentation and standards.

Skills & Competencies:

• Experience across Microsoft 365, including Exchange Online, OneDrive/SharePoint Online, Teams, and Power Platform.
• Experience in cloud computing and architecture, specifically Microsoft Azure.
• Experience building and maintaining CI/CD pipelines and automation workflows using GitHub Enterprise.
• Experience designing and developing APIs and integrations, such as RESTful APIs.
• Experience with identity and data security controls, including Conditional Access, Privileged Identity Management (PIM), and Microsoft Purview (DLP, sensitivity labels, information protection).
• Familiarity with enterprise AI platforms and integrating AI tools via connectors, such as the Model Context Protocol (MCP).
• Experience in Identity & Access Management, SSO, and MFA implementations using Entra ID.
• Experience with cyber security controls and best practices in cloud environments, specifically Microsoft Defender tools.
• Proficiency in scripting and automation with PowerShell, Python, BASH, and/or Bicep.
• Strong communication and collaboration skills with both technical and non-technical stakeholders.
• Strong team player who delivers client-focused solutions and continually improves processes.

Minimum Qualifications:

• 5+ years of combined professional experience and education in Information Technology, Information Systems, Software Engineering, Cyber Security, or a related field.
• Bachelor's degree in Computer Science, Software Engineering, Management Information Systems, Cyber Security, or a related field (4+ years of relevant work experience may substitute for a degree).
• Experience building and maintaining CI/CD pipelines and automation using GitHub Enterprise (or a comparable platform).
• Experience developing and integrating APIs (such as RESTful APIs).
• Proficiency in PowerShell and/or Python scripting.

Preferred Qualifications:

• Experience building or integrating AI tool connectors (e.g., Model Context Protocol / MCP).
• Experience implementing data security and governance with Microsoft Purview, such as data loss prevention, sensitivity labeling, and insider risk management.
• Experience with role-based Identity and Access Management in a modern cloud environment (Entra ID).
• Experience with Infrastructure as Code (e.g., Bicep, ARM templates).
• Experience supporting services and processes adhering to security frameworks such as NIST CSF.
• Knowledge of defense-in-depth, least-privilege, and secure-by-design principles.
• Understanding of PCI DSS.
• Payments industry exposure is a plus.
• Experience working on Agile/Scrum teams.

Salary Range: $90,000 - $102,000 USD

Fullsteam supports an inclusive workplace that values diversity of thought, experience, and background. Fullsteam is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state, or local law.