Senior IT Systems Engineer

Role overview

This is a senior-level IT Systems Engineer position for a security-minded generalist who enjoys both identity and email hardening and hands-on network engineering. The role blends roughly 60% security/identity/email systems work with 40% network engineering, owning the controls that keep a distributed workforce authenticated, communicating, and connected. The engineer partners closely with Security and Help Desk teams to resolve escalated issues and keep infrastructure aligned with company security standards.

Responsibilities

- Administer and secure an enterprise identity/SSO platform, managing authentication policies, access provisioning, and downstream application integrations. - Architect and operate the company email and collaboration platform, including mail flow rules, spam and phishing filtering, SPF/DKIM/DMARC configuration, and data loss prevention policies. - Own operations, monitoring, and incident response across network, email, and identity security controls, including firewall policy and threat detection. - Triage incidents, remediating directly or escalating per documented response procedures. - Administer and maintain core network infrastructure (switches, routers, firewalls, wireless access points, VPN), including capacity planning and performance monitoring for a distributed workforce. - Design and implement network changes such as VLANs, routing updates, and firewall rule modifications with minimal business disruption, while maintaining accurate topology and configuration documentation and managing vendor and support contracts.

Requirements

- Hands-on production experience administering an identity/SSO platform such as Okta, including access policies and app integrations. - Experience configuring and maintaining email security controls, including SPF, DKIM, DMARC, and anti-phishing or anti-spam tooling. - Experience administering a cloud email and collaboration platform such as Google Workspace, Microsoft 365, or an equivalent. - Hands-on production experience administering enterprise network infrastructure: switches, routers, firewalls, and VPN. - Working knowledge of network security principles, including segmentation, firewall policy management, and VPN architecture. - Demonstrated ability to troubleshoot complex network, identity, and email connectivity issues with minimal escalation.

Benefits and work setup

- Remote-friendly work environment supporting a distributed workforce. - Equity package in the form of stock options for full-time employees. - Flexible vacation policy and generous parental leave.