Note: The job is a remote job and is open to candidates in USA. BigID is hiring a Senior IT Operations Engineer to build and maintain automation, integrations, identity systems, and AI tools across the company. The role also covers security infrastructure, workplace systems, escalated support, documentation, and continuous improvement.
Responsibilities
- Automation and integration. You will own automation in AWS (Lambda, API Gateway) and GCP, defined as code with Terraform and deployed through GitLab CI/CD. You will also own Okta Workflows, our main automation engine, along with Workato, REST APIs, and webhooks. You will write scripts in Python or Go, support the integrations around Salesforce (Auth0, Slack, Jira, and our data warehouse), and set up backups for critical systems such as Jira, GitHub, and Okta Workflows. You will also look across IT processes to find and build new automation
- AI enablement. You will own the Claude rollout, including its connectors and Claude Tag in Slack. You will host and govern MCP servers, including the Cloudflare MCP portal, and support other AI tools teams request, such as Gemini and Copilot. You will review each new connector for security and access scope, and support internal agents
- Identity and access. You will own Okta and Auth0 administration, including Auth0 Actions, SCIM, MFA, device trust, and joiner, mover, and leaver processes. You will also connect Okta to access governance tools such as Entitle or Lumos
- Security and edge. You will own DNS, PKI, WAF, and rate limiting in Cloudflare, along with email authentication (SPF, DKIM, DMARC). You will support the CloudFront sites customers use, coordinate hosting changes with web agencies, and help the security team investigate findings
- Workplace tools and support. You will own Google Workspace, Jira, JSM, Confluence, Slack, and GitLab, and work alongside the owners of Zoom, Microsoft 365, and the wider SaaS stack. You will handle Tier 2 and Tier 3 service desk escalations, troubleshoot Windows and macOS endpoints, and manage vendor support cases. You will also support device-based access policies with the team that manages Iru Kandji and Intune
- Documentation and continuous improvement. You will write runbooks, architecture notes, and handoff documents so no system depends on one person’s memory. You will document and implement processes, maintain an accurate inventory of hardware, software, and resources, and manage IT vendor and contractor relationships. You will also look for weak points in our processes and update infrastructure so it scales, repeats reliably, and stays secure
Skills
- 7+ years in IT operations, DevOps, cloud engineering, or IAM engineering, including 2+ years automating IT processes. Equivalent experience will be considered
- Hands-on Okta administration, including Okta Workflows, and experience with Auth0 custom logic such as Actions or rules
- Working knowledge of AWS (Lambda, API Gateway, CloudFront, IAM) and GCP (projects, IAM, BigQuery)
- Experience building integrations with Workato or a similar iPaaS tool
- Proficiency in at least one automation language (Python, Go, or Node.js) and experience with REST APIs and webhooks
- Experience with infrastructure as code (Terraform or Pulumi) and CI/CD pipelines, ideally GitLab
- Practical experience with Claude or comparable LLM tools, connectors, and MCP servers, with an understanding of their security implications
- Experience with Cloudflare (DNS, certificates, Workers) and strong Google Workspace administration
- A solid understanding of SSO (SAML, OIDC), MFA, SCIM, RBAC, DNS, and email authentication
- Familiarity with an MDM such as Iru Kandji or Intune, and experience troubleshooting Windows and macOS
- Strong analytical and problem-solving skills, with attention to detail
- Excellent written and verbal English, with strong documentation habits
- Discretion with confidential information
- Must be able to exercise independent judgment with little or no oversight
- Salesforce Apex and Flow
- Custom MCP servers or agent frameworks
- SQL, and experience with BigQuery, Snowflake, or Databricks
- Azure or other public cloud experience
- Access governance or SaaS security tools such as Entitle or Lumos
- SOC 2 or ISO 27001 experience, including vulnerability management
- HRIS-driven provisioning (for example, HiBob to Okta)
- Relevant certifications (AWS, GCP, Okta)
Company Overview
Company H1B Sponsorship