IT Systems Engineer - Platform.sh

About Upsun (formerly Platform.sh)

Upsun is the cloud application platform built for hybrid teams, where AI agents write and test code and humans focus on solving complex problems. Developers, DevOps engineers, and platform teams use Upsun to build, ship, and scale confidently without wrestling with backend infrastructure.

Upsunners are a remote, global workforce thriving in a multicultural environment. We are committed to open source and an open, welcoming team.

Impact of an IT Systems Engineer

As an IT Systems Engineer, you will take the identity plane from working to well-run: automated, governed, and consistent. Reporting to the IT Director, you will drive the internal systems layer around identity—from our SaaS estate to Google Workspace.

You are the person who makes identity quietly reliable: predictable, documented, and automated, while remaining flexible enough to support the wider IT function as our scaling remote organization evolves.

What to Expect

• Identity and access management: Own Okta as the backbone of access, managing the app catalog, policy management (MFA, device trust), and directory hygiene. Run identity day to day, refine SSO and SCIM integrations, and keep joiner, mover, and leaver flows accurate from our HR system.
• Lifecycle and access automation: Automate provisioning and deprovisioning. Build and maintain workflows with tools like Okta Workflows and n8n, manage access configuration as code, and keep SCIM provisioning in sync with our HR system.
• Process and governance: Structure and harmonize clear procedures around the identity plane, ensuring access requests, approvals, and reviews follow a consistent, documented path.
• Internal IT systems and SaaS administration: Own our internal systems end-to-end. Integrate, secure, and validate our SaaS stack, administer Google Workspace as our core collaboration suite, and connect tools through Okta and our HR system.
• Compliance engineering: Implement and evidence access controls for ISO 27001 and SOC 2 Type 2 with our Security team, ensuring access reviews and audit logs are built directly into our systems.
• Endpoint and device management: Partner on administrating JumpCloud MDM across macOS, Windows, and Linux, sharing endpoint management with IT Operations.
• Wider IT support: Flex across adjacent systems work and support the wider IT function as needs evolve.

What You Bring

• Identity expertise: Deep, hands-on experience with Okta or a comparable identity provider, including SSO, SCIM, lifecycle automation, and API-driven provisioning.
• IT Experience: Typically 5 or more years in IT systems, identity, or access engineering, including time in a developer-heavy or engineering-led environment.
• Automation skills: Experience building automation with Okta Workflows, n8n, or similar, comfortable with APIs, webhooks, and scripting in Python or a comparable language.
• Process optimization: Ability to bring order to rapidly growing environments, writing clear procedures and standardizing workflows.
• SaaS-first operations: Experience running and integrating SaaS-based environments where identity and APIs are paramount.
• Compliance fluency: Familiarity with ISO 27001 or SOC 2 (ideally Type 2) and what auditors require.
• Remote collaboration: Ability to work well without close supervision in a fully remote team with clear communication skills.
• Google Workspace administration: Hands-on Google Workspace administration including users, groups, policies, and security settings.