Senior Identity & Endpoint Systems Engineer

Colonial Group; Salt Lake City (UT); On-site; USD 130,000 - 145,000; Full time

Job summary

Colonial Group seeks an experienced IT professional to own the Okta deployment, automate identity and device workflows, and manage a large SaaS portfolio. The role focuses on zero-touch provisioning, MDM, and lifecycle management across Apple, Windows, and cloud services.

You will design and enforce identity standards, perform access reviews, and drive automation using scripting and APIs. Strong communication and problem-solving are essential in a fast-paced corporate IT team.

Qualifications

• 6+ years in corporate IT with identity and endpoint management expertise.
• Hands-on Okta administration including Workflows for automation.
• 3+ years implementing modern identity standards (SAML, OIDC, OAuth 2.0, SSO, MFA, SCIM).
• Experience with identity governance platforms and access reviews.

Responsibilities

• Own Cosm's Okta deployment: config, integrations, Workflows, identity roadmap.
• Build zero-touch provisioning and device deployment across locations.
• Administer 100+ SaaS applications: SSO, SCIM, entitlements, lifecycle.
• Manage Apple Business Manager, Intune, and Jamf for endpoint fleet.
• Perform recurring access reviews and support audit requirements.
• Automate routine administration via scripting and vendor APIs.
• Collaborate with Service Management on hardware inventory and asset lifecycle.
• Mentor teammates and serve as technical resource across IT.

Skills

Okta administration

SAML/OIDC/SSO/MFA

MDM (Intune/JAMF)

macOS/Windows management

PowerShell/Bash/Python

Active Directory/Entra ID

Scripting via vendor APIs

Identity governance & access reviews

Zero-trust/Network security basics

Education

Bachelor's degree or equivalent

Tools

Okta

JAMF

Intune

Terraform/Pulumi (IaC)

Azure AD/Entra ID

Job description

Colonial Group seeks an experienced IT professional to own the Okta deployment, automate identity and device workflows, and manage a large SaaS portfolio. The role focuses on zero-touch provisioning, MDM, and lifecycle management across Apple, Windows, and cloud services.

You will design and enforce identity standards, perform access reviews, and drive automation using scripting and APIs. Strong communication and problem-solving are essential in a fast-paced corporate IT team.