Sr. Systems Administrator (Employee Systems)

Cosm is a global technology company that brings experiences to life in immersive environments. We help our partners create spaces and content that blur the lines of real and virtual across three primary markets: Sports and Entertainment, Science and Education, and Parks and Attractions. Cosm was born from the fusion of some of the greatest innovators in the history of technology. Evans & Sutherland, Spitz, Inc., and Cosm Immersive combined forces to power the immersive experiences of the future as Cosm. Innovation is in our DNA.

IMPORTANT NOTICE FROM THE COSM HUMAN RESOURCES & RECRUITING TEAM REGARDING A RECRUITING SCAM: Your security and trust matter to us. Please note that Cosm Recruiters will ALWAYS communicate with you from an official "@Cosm.com" email address or through authorized platforms such as LinkedIn. We will NEVER request payments, banking details, or personal financial information during the recruitment process. If you receive a suspicious communication or job offer claiming to be from Cosm, please do not respond or share personal information. For official Cosm opportunities, always visit

Summary:

The Enterprise Systems and Employee Technology (ESET) team makes sure Cosm's employees have the tools they need to work quickly and efficiently: computers, SaaS services, and software. This team owns zero-touch provisioning, MDM, and device deployments across the organization, administers Cosm's portfolio of 100+ SaaS applications, maintains and optimizes the employee onboarding/offboarding lifecycle, and keeps Cosm's growing Okta deployment running smoothly. This role reports to the Director of Enterprise Systems and Employee Technology.

Responsibilities:

• Own Cosm's Okta deployment: configuration, integrations, Workflows, and the identity roadmap as the environment scales.
• Design and maintain automated joiner–mover–leaver processes across the full employee lifecycle, in partnership with People Operations.
• Build and continuously improve zero-touch provisioning and device deployment across all Cosm locations and platforms.
• Administer Cosm's portfolio of 100+ SaaS applications: tenant configuration, SSO and SCIM integrations, entitlement models, and lifecycle management.
• Administer and optimize Apple Business Manager, Microsoft Intune, and Jamf, keeping the endpoint fleet current, compliant, and consistently configured.
• Run recurring account and access reviews, and produce evidence supporting [NIST CSF 2.0 / SOX ITGC] audit requirements.
• Automate routine administration through scripting and vendor APIs, reducing manual toil across the team.
• Partner with Service Management on hardware inventory and asset lifecycle across all locations.
• Act as the escalation point for identity, SaaS, and endpoint issues escalated by the Service Desk — resolving root causes and reducing recurrence through automation, configuration, and knowledge transfer.
• Create and maintain technical documentation and runbooks, and raise what the Service Desk can resolve independently through training and self-service enablement.
• Mentor teammates on identity and endpoint management practices, and act as a technical resource across the IT organization.

Qualifications:

• 6+ years in corporate IT, with demonstrated depth in identity and endpoint management. Equivalent practical experience is welcome in place of a degree.
• Hands-on Okta administration experience, including Workflows for non-trivial automation use cases.
• 3+ years implementing and managing modern identity standards — SAML, OIDC, OAuth 2.0, SSO, MFA, and SCIM provisioning.
• Experience with an Identity Governance & Administration platform and with entitlement and access review design (Okta IGA, Sailpoint, etc)
• 3+ years managing macOS and Windows at scale with modern MDM (Intune, JAMF, Kandji/Iru, etc).
• Demonstrated experience building or maintaining zero-touch provisioning in a production environment.
• Working knowledge of Active Directory and Entra ID.
• Comfortable scripting to automate routine work (PowerShell, Bash, or Python) and integrating systems via vendor APIs.
• Solid grounding in core IT fundamentals — DNS, DHCP, TCP/IP, SMB, NFS, and certificate management.
• Strong communicator and self-starter with a methodical approach to troubleshooting and the ability to prioritize a varied workload independently or as part of a team.

Preferred Skills:

• Okta Certified Administrator (Level 2) or Okta Certified Professional.
• Experience managing Okta configuration as code through Terraform, Pulumi, or a similar platform HIGHLY preferred
• Jamf 200 certification.
• Experience with Zero Trust, SASE, or DLP solutions (Zscaler, Cloudflare, or similar).
• Experience with additional device management platforms (Kandji, Autopilot).
• Familiarity with modern ITSM platforms (ServiceNow preferred).
• Experience supporting SaaS license management, renewals, and utilization reporting.

The annualized salary range for this position in California is $130,000 to $145,000. The base pay offered will factor in internal equity and may also vary depending on the candidate's geographic region, job-related knowledge, skills, and relevant experience, among other factors

All applicants must be at least 18 years of age at the time of employment. This requirement is in accordance with applicable federal, state, and local labor laws. Cosm is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.