Remote Lead IT Systems Engineer – Identity & Security

RemoFirst; Town of Poland (NY); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Fully remote

Global-scale systems

International teams

Autonomy

Culture of excellence

Job summary

RemoFirst is a remote-first company hiring a Lead-level IC to own workforce identity and endpoint security end-to-end. You will design and build a model where the HRIS is the single source of truth for identity and access management, ensuring correct access on hire, role changes, or departure without tickets.

You will manage entitlements, automate joins/moves/leaves via HRIS integrations, and secure our core SaaS estate with SOC 2 and ISO 27001-aligned processes while enabling self-service

Qualifications

• Deep hands-on Okta experience as an administrator and builder with Workflows and SCIM.
• Built HRIS-driven joiner/mover/leaver automation where HRIS tooling is lacking.
• Led an access-governance program that withstood SOC 2 or ISO 27001 audits.
• Practical endpoint management experience with Jamf or equivalent, and device posture awareness.
• Explain access decisions in terms of risk and business need; say no when needed.

Responsibilities

• Design and implement joiner/mover/leaver automation via Workable, Okta, and middleware.
• Own entitlement model: groups, roles, and attributes governing access.
• Handle contractors, EOR workers, future-dated changes, internal transfers, and country variations.
• Oversee access across Okta, Google Workspace, Slack, Confluence/Jira, Workable, and more.
• Run SOC 2 and ISO 27001-aligned access reviews and certification campaigns.
• Build self-service request-and-approval flows to replace Slack DMs.
• Integrate devices and posture with access controls using Okta Device Trust or equivalent.
• Own secure remote access approaches (Tailscale, Cloudflare Zero Trust) and improvements.

Skills

Okta experience

Joiner/Mover/Leaver automation

Access governance

Endpoint management

Risk-based decisions

Tools

Okta

Jamf

Tailscale

Cloudflare

Job description

RemoFirst is a remote-first company hiring a Lead-level IC to own workforce identity and endpoint security end-to-end. You will design and build a model where the HRIS is the single source of truth for identity and access management, ensuring correct access on hire, role changes, or departure without tickets.

You will manage entitlements, automate joins/moves/leaves via HRIS integrations, and secure our core SaaS estate with SOC 2 and ISO 27001-aligned processes while enabling self-service