Senior IT Systems Engineer

Zipline; South San Francisco (CA); On-site; USD 160,000 - 185,000; Full time

Job summary

Zipline in South San Francisco seeks a Senior IT Infrastructure Engineer to own identity and access management, automation, and core enterprise platforms. You’ll drive standards for Okta, Google Workspace, Slack, and API integrations while shaping scalable RBAC and provisioning practices.

You will develop automation in Python/Bash, oversee AWS/GCP environments and MDM/endpoint management, and mentor team members in a cloud-first, secure IT landscape.

Qualifications

• Experience designing and implementing IAM solutions across enterprise apps.
• Strong scripting and automation skills using Python and Bash.
• Hands-on with SaaS platforms and identity systems.
• Experience with RBAC, provisioning, and lifecycle management.
• Familiarity with OAuth, SAML, SCIM, and OIDC.

Responsibilities

• Lead architecture for identity and access management across enterprise apps.
• Define RBAC models, provisioning policies, and joiner/mover/leaver workflows.
• Build and maintain API integrations between systems; design reusable patterns.
• Develop automation tooling and administrative interfaces.
• Maintain and evolve cloud infrastructure standards (AWS/GCP) and MDM/endpoint management.

Skills

IAM concepts

Scripting (Python/Bash)

Cloud platforms

SaaS administration

RBAC design

API integrations

OAuth/SAML/OIDC

Communication skills

Tools

Okta

Google Workspace

Slack

Iru

Jamf

Intune

Hexnode

AWS

GCP

Terraform

Job description

About Zipline

Zipline is the world’s largest and most experienced drone delivery service. We are on a mission to serve all humans equally by ensuring access to food, medicine and essential goods anytime, anywhere. We design, build, and operate the world’s largest autonomous logistics system, delivering critical supplies quickly and reliably. Today, Zipline operates on four continents, makes a delivery somewhere in the world every 30 seconds, and has completed millions of deliveries to date, including blood, vaccines, medical supplies, food, and retail products.

Our customers include the world’s largest and most prominent healthcare systems, governments, retailers, restaurants and global businesses who rely on us to save lives, reduce emissions, increase economic opportunity, and provide delivery from point A to point B as fast as possible. The drone is only 15% of what we’ve built to enable seamless, reliable, global operations.

Our system strengthens supply chains, reduces congestion, and gives people time back. With more than 140 million commercial autonomous miles safely flown, Zipline is redefining access to healthcare, consumer products, and food across the globe.

We operate at a global scale and are looking for practical problem solvers who thrive on real-world challenges and rapid growth. Our team is motivated by building systems that have a direct, meaningful impact on people’s lives and by scaling the future of logistics. We are seeking people who sculpt from first principles, enjoy facing adversity, and can do the impossible at record breaking speeds.

About You and The Role

We are looking for a Senior IT Infrastructure Engineer to help design, operate, automate, and scale the systems that support our employees and business operations. This role will provide technical ownership and direction for several of our core enterprise platforms, including Okta, Google Workspace, Slack, endpoint management, and the API integrations that connect our internal systems. You will set technical standards, make architecture decisions, and lead complex improvements across these systems while maintaining a secure, reliable, scalable, and highly automated IT environment. A key focus of this role will be designing and maturing identity and access management capabilities across the organization, including role-based access control, automated software provisioning, and scalable joiner, mover, and leaver workflows. You will establish patterns and standards that can be consistently operated and extended as the company grows. The ideal candidate has deep experience administering modern SaaS platforms, strong scripting and automation skills, a strong understanding of modern identity standards, and hands‑on experience managing infrastructure in a public cloud environment such as AWS or Google Cloud Platform. You have demonstrated sound technical judgment and can design scalable solutions for complex, cross-system problems. This is a senior individual contributor role for someone who is comfortable serving as a technical lead for critical systems, resolving ambiguous cross-system issues, making architectural tradeoffs, and partnering across IT, Security, Engineering, and business teams. You will also provide technical guidance and mentorship to other members of the IT team.

What You'll Do

• Provide technical ownership, architecture, standards, security, reliability, and ongoing improvement for core IT platforms, including:
  • Okta
  • Google Workspace
  • Slack
  • Related enterprise SaaS applications
• Define the architecture for and lead implementation of scalable identity and access management solutions across enterprise applications.
• Define and mature role-based access control (RBAC) across systems, including access models, groups, roles, entitlements, and provisioning policies.
• Define and evolve software provisioning and deprovisioning patterns that reduce manual administration, improve access consistency, strengthen security, and scale across the organization.
• Design and maintain automated joiner, mover, and leaver workflows that ensure users receive the appropriate access based on role, department, location, employment status, or other business attributes.
• Architect, build, maintain, and troubleshoot complex API‑based integrations between enterprise systems, establishing reusable integration patterns where appropriate.
• Manage identity and access management workflows, including authentication, SSO, MFA, provisioning, deprovisioning, lifecycle management, access reviews, and role‑based access.
• Develop automation and administrative tooling using Python, Bash, APIs, and other appropriate technologies.
• Identify repetitive or manual IT processes and build scalable automation to improve efficiency, reliability, and user experience.
• Define standards for and manage infrastructure and services running in a public cloud environment such as AWS or GCP.
• Own the technical strategy, standards, and ongoing evolution of mobile device management (MDM) and endpoint management platforms such as Iru, Jamf,
• Microsoft Intune, and Hexnode, including device enrollment, configuration profiles, security policies, application deployment, compliance, OS update management, and device lifecycle operations.
• Develop and maintain integrations using REST APIs, webhooks, service accounts, OAuth, and other common authentication and integration patterns.
• Implement and support modern identity federation and provisioning standards, including SAML, SCIM, OAuth, and OpenID Connect (OIDC).
• Monitor the health, security, performance, and availability of critical IT systems and integrations.
• Lead troubleshooting and root‑cause analysis for complex infrastructure, identity, application, authentication, provisioning, and integration issues that span multiple systems.
• Establish and maintain configuration standards, documentation, operational procedures, and system architecture documentation.
• Partner with Security teams to implement and maintain appropriate access controls, security policies, logging, monitoring, and audit capabilities.
• Partner with Engineering and business systems teams on integrations, automation, identity, and infrastructure initiatives.
• Lead technical evaluation, design, implementation, and migration efforts for enterprise technologies.
• Establish technical standards, design patterns, and best practices for IT infrastructure, SaaS administration, automation, identity management, endpoint management, and access governance.
• Serve as a technical escalation point and subject matter expert for complex IT infrastructure and identity issues.
• Mentor other members of the IT team and help improve the team's technical capabilities and operational maturity.

What You'll Bring

• 7+ years of professional IT experience.
• 5+ years of hands‑on experience administering and managing enterpriseinfrastructure, SaaS platforms, identity systems, or related technologies.
• Significant hands‑on experience administering Okta or a comparable enterpriseidentity and access management platform.
• Significant hands‑on experience administering Google Workspace in a mid‑sized orlarge enterprise environment.
• Experience administering Slack or a comparable enterprise collaboration platform.
• Hands‑on experience administering and supporting MDM and endpoint
• management platforms such as Iru, Jamf, Microsoft Intune, Hexnode, orcomparable solutions.
• Strong scripting and automation skills using Python and Bash.
• Demonstrated experience designing, building, maintaining, and troubleshooting
• API integrations between enterprise applications.
• Strong understanding of REST APIs, JSON, webhooks, service accounts, and serviceto-service authentication.
• Deep understanding of modern identity and authentication standards andprotocols, including OAuth, SAML, SCIM, and OpenID Connect (OIDC).
• Strong understanding of identity and access management concepts, including SSO,MFA, federation, identity lifecycle management, RBAC, provisioning,deprovisioning, and access governance.
• Demonstrated experience designing and implementing role‑based access controlmodels across enterprise applications.
• Experience automating application and software provisioning using identityattributes, groups, roles, APIs, SCIM, workflows, or similar technologies.
• Hands‑on experience designing and managing infrastructure or services in AWS,Google Cloud Platform, or a comparable public cloud environment.
• Experience troubleshooting complex issues across SaaS applications, identityplatforms, networks, APIs, and cloud services.
• Strong understanding of security principles and enterprise IT best practices.
• Experience creating clear technical documentation, runbooks, and operationalprocedures.
• Strong communication skills and the ability to work effectively with both technicaland non-technical stakeholders.

Preferred Qualifications

• Experience managing Okta at enterprise scale, including Workflows, Lifecycle
• Management, application integrations, group rules, advanced security policies, andautomated provisioning.
• Experience designing access models based on attributes such as department, role,location, employment type, or organizational hierarchy.
• Experience implementing access certification, entitlement management, or identitygovernance processes.
• Experience with Google Workspace automation and administration using toolssuch as GAM, Google APIs, or Apps Script.
• Experience working with Slack APIs, Slack administration, Enterprise Grid, orautomated Slack workflows.
• Experience with infrastructure-as-code tools such as Terraform is a plus.
• Experience with source control and software development practices using Git andCI/CD workflows.
• Experience designing or improving endpoint management, device trust, zero-trust,compliance, and device lifecycle programs across a diverse fleet.
• Experience with secrets management, certificate management, or privileged accessmanagement.
• Experience working in a highly automated, cloud‑first environment.
• Experience supporting environments with strong security, compliance, or auditrequirements.

What Success Looks Like

In this role, you will set technical direction for an IT environment that is increasinglyautomated, reliable, secure, and easy to operate. You will establish scalable patterns andstandards, reduce manual administrative work, improve the reliability of critical integrations, strengthen our identity and access management practices, and create technical foundations that can support the company as it grows.You will be successful when access is increasingly determined by well‑defined roles andbusiness attributes rather than manual requests, provisioning and deprovisioning arehighly automated, joiner, mover, and leaver processes are reliable and scalable, and theplatforms and integrations you own are well‑architected, documented, supportable, andrequire fewer manual interventions.Our goal is to move toward an environment where the right users receive the right accessto the right systems automatically, with clear controls, visibility, and governance aroundhow that access is granted and removed.

What Else You Need To Know

The starting cash range for this role is $160,00 - $185,000; please note that this is a target, starting cash range for a candidate who meets the minimum qualifications for this role. We are always open to negotiation. The final cash pay for this role will depend on a variety of factors, including a specific candidate's experience, qualifications, skills, working location, and projected impact. The total compensation package for this role may also include: equity compensation; overtime pay; discretionary annual or performance bonuses; sales incentives; benefits such as medical, dental and vision insurance; paid time off; and more.

This is a fully onsite role requiring in‑person attendance at our South San Francisco location five days per week.

Zipline is an equal opportunity employer and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws or our own sensibilities.

We value diversity at Zipline and welcome applications from those who are traditionally underrepresented in tech.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self‑identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Zipline ’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.