Systems Engineer

As a Systems Engineer at WorkOS, you will be the technical backbone of our internal IT organization — designing the systems, automations, and infrastructure that scale our internal operations. This is not a help desk role: you will architect endpoint management workflows, write scripts, ship automation, and build the foundation that keeps a fast-growing company running smoothly.

We have an MSP partner handling tier 1 support. Your job is to architect the systems the MSP executes against, automate everything upstream, and serve as the escalation point for complex tier 2/3 issues. You will own identity, device management, SaaS lifecycle, and the automation layer that ties it all together.

Who We're Looking For

We're looking for engineers who build and automate, not just operate. You think in systems — understanding how identity, devices, SaaS tools, and cloud infrastructure connect — and your instinct is to eliminate manual work. You might be a great fit if you:

• Have deep Okta expertise — not just user administration, but Workflows, integrations, and policy design
• Write scripts ( Python , Bash ) to automate what others do manually
• Use Terraform to manage infrastructure as code — not just for cloud, but for identity and SaaS configuration
• Understand SSO protocols (SAML, OAuth, SCIM) deeply enough to troubleshoot and architect, not just configure
• Are comfortable managing a macOS fleet end-to-end — zero-touch provisioning, policy enforcement, MDM
• Think about AI as a tool for IT automation — you are curious about using LLMs and agentic workflows to eliminate toil
• Take ownership, work independently, and follow through from identifying a problem to shipping a solution

Responsibilities

• Own and evolve our identity infrastructure — Okta (SSO, MFA, Workflows, SCIM provisioning, lifecycle management) , Google Workspace , and downstream SaaS integrations
• Architect and ship automation across the IT stack — onboarding/offboarding workflows, access controls, license governance, and SaaS lifecycle management
• Own macOS endpoint management end-to-end — zero-touch provisioning, policy enforcement, detection and remediation scripting via MDM
• Manage infrastructure as code using Terraform for identity, SaaS, and cloud resources
• Serve as the escalation point for complex systems issues (tier 2/3) — working with our MSP partner to ensure smooth resolution
• Evaluate and enable new SaaS tools — pilot emerging technologies including AI-powered IT automation
• Create documentation and runbooks that reduce operational toil and increase durability
• Drive an automation-first culture across the IT function — if it can be automated, it should be

Qualifications

• 7+ years in IT systems, infrastructure, or identity engineering roles — with clear examples of designing, building, and automating at scale (not just operating)
• Deep experience with Okta — Workflows, integrations, policy design, SCIM provisioning (not just user administration)
• Proficiency in scripting ( Python , Bash ) and comfort with REST APIs , webhooks, and authentication flows
• Hands-on Terraform experience for managing infrastructure and configuration as code
• Strong macOS fleet management — MDM (Jamf, Kandji, or equivalent) , scripting, zero-touch provisioning
• Deep understanding of SSO protocols (SAML, OAuth 2.0) and SCIM provisioning patterns
• Experience with Google Workspace administration at scale
• Solid understanding of networking fundamentals — DNS, APIs, VPNs, firewalls

Nice to Have

• Experience with AI/LLM tools for IT automation (agentic workflows, ChatGPT/Claude for scripting, Okta + AI integrations)
• GitOps or declarative approaches to device and identity management
• Cloud infrastructure experience ( GCP or AWS )
• SOC 2 or ISO 27001 compliance experience
• Experience operating in an MSP-augmented IT model