Job Description

We're seeking a IT Platform & Automation Engineer who treats internal infrastructure like a product—not a firefighting exercise. This is not a traditional helpdesk or "break-fix" role. You'll be the architect behind our internal employee experience, acting as the connective tissue between our office network, collaboration services, security stack, and core business systems (People Tech, CRM, and Engineering tools).

If you prefer writing Python scripts over manually resetting passwords, and if you get excited about connecting Claude AI to Greenhouse via custom Slack workflows, we want to talk to you.

This role is NOT:

• A traditional helpdesk position. You won't be resetting passwords or shipping laptops.
• A pure networking role. You'll touch networks, but automation is the priority.
• A machine learning engineer role. You'll experiment with AI, but you won't build vector databases or train models.

What You will Do

Identity, Endpoint & Network (The Foundation)

• Identity & Access Management: Own our IdP (Okta/Auth0). Implement and automate SSO, MFA enforcement, and SCIM provisioning across all SaaS tools. Enforce zero-trust principles everywhere.
• Endpoint Lifecycle: Own the full hardware and MDM lifecycle. Automate device provisioning, configuration, and secure deployment using Jamf and Intune. Build zero-touch onboarding workflows. (Note: You will own the automation and security profiles; physical device shipping/fulfillment is handled by our IT Ops coordinators.)
• Network Engineering: Design, deploy, and maintain high-availability office networking (cloud-managed switching/routing, Wi-Fi) and secure remote access solutions (ZTNA/VPN) for a hybrid workforce. We prioritize automation-first engineers.

Custom Integrations & Automation (The Builder Work)

• API Integrations: Architect and build custom integrations between our core SaaS stack—syncing data between Okta, Greenhouse, Notion, and our CRM to eliminate manual data entry.
• Workflow Orchestration: Own our internal automation layer. We currently use a mix of lightweight no-code tools (Zapier, App Script, AppSheet) and custom Python. We're actively phasing out low-code for mission-critical paths—you'll have permission to replace them with proper code. To be clear: this is a coding-heavy role. You'll spend the majority of your time writing code, not clicking in UIs. The no-code tools are placeholders—we expect you to replace or maintain them.
• Internal Tooling: Build and maintain internal dashboards and Slack apps that give employees self-service access to IT, HR, and facilities requests.

AI & LLM Experimentation (The Innovation Work)

• AI Integrations: Review and assess connectors (MCP) if available. Otherwise, build lightweight API wrappers and prompt engineering pipelines to connect LLMs (Claude, OpenAI) to internal tools like Slack and Notion.
• R&D Time: Dedicated time each sprint to experiment with new AI models and identify productivity gains for the company.

Security Automation & Compliance (The Glue)

• Security Scripting: Write robust scripts (Python, Bash, PowerShell) to automate security monitoring, endpoint patch management, and compliance reporting.
• Alert Correlation: Architect centralized alerting pipelines by integrating EDR/SIEM webhooks into Slack via native integrations (CrowdStrike), filtering noise and surfacing only actionable security anomalies.
• Compliance Automation: Create automated audit trails, access reviews, and reporting to support SOC2 / ISO compliance efforts—no more manual spreadsheet work.

Tech Stack Summary: Python, Okta/Azure AD, Jamf/Intune, Slack API, Greenhouse API, Notion API, Claude/OpenAI APIs, CrowdStrike, Meraki/cloud-networking, Google Workspace + GAM, Jira.

Who You Are

Foundation (Must-Have Baseline)

• Experience: 4+ years in IT Engineering, Systems Engineering, or Platform roles with a heavy emphasis on automation and APIs.
• Coding Proficiency: Advanced Python or JavaScript/Node.js. You treat your scripts like software—git, CI/CD, testing, and documentation are non-negotiable. Our current automation stack is built on Python. Familiarity with either is sufficient—we don't expect you to know both.
• API Fluency: Proven experience building custom integrations using REST/GraphQL APIs. You know how to read documentation, handle OAuth2, and parse JSON in your sleep.
• IdP & MDM Experience: Hands-on experience with Okta or Azure AD (SCIM, Workflows, automation) AND at least one MDM solution (Jamf and Intune).
• Security-First Mindset: You understand least privilege, automated patching, and think about security in every integration you build.

Primary Focus Areas (Where You'll Spend Most of Your Time)

• Core: Identity & Workflow Automation (Okta, SCIM, custom scripting)
• Core: Endpoint Management & security ops related (MDM, zero-touch deployment, patching)
• Secondary: Networking (TCP/IP, VLANs, Wi-Fi, VPN/ZTNA—enough to troubleshoot and configure, not necessarily design from scratch)

We prioritize automation-first engineers who can learn networking depth on the job. If you're a networking rockstar who's also strong on MDM and automation, even better.

High-Value Differentiators (Stand Out From the Crowd)

• Direct experience with Okta, People Tech (Rippling and Greenhouse), Notion, or Slack APIs
• Hands-on experience building with LLM APIs (Anthropic Claude, OpenAI) for internal tools
• Familiarity with Infrastructure as Code (Terraform)
• Experience preparing IT systems for SOC2 or ISO 27001 audits
• Experience with Google Workspace administration and GAM
• Experience with zero-touch deployment workflows (Apple Business Manager, Windows Autopilot)