IT Systems Engineer

Identity and access management: Own Okta as the backbone of how people get access, managing the app catalog (SSO integrations for new SaaS tools), policy management (MFA, device trust), and directory hygiene (Universal Directory, group management, breakglass access). Run identity day to day, refine our SSO and SCIM integrations, and keep joiner, mover, and leaver flows accurate from our HR system.

Lifecycle and access automation: Automate provisioning and deprovisioning so access is granted and revoked automatically, not by hand. Build and maintain workflows with tools like Okta Workflows and n8n, manage access configuration as code, and keep SCIM provisioning in sync with our HR system.

Process and governance: Structure and harmonize clear procedures around the identity plane, so access requests, approvals, and reviews follow one consistent, documented path instead of ad hoc steps.

Internal IT systems and SaaS administration: Own our internal systems end to end. Integrate, secure, and validate our SaaS stack, administer Google Workspace as our core collaboration suite, connect our tools through Okta and our HR system, and own the application validation process.

Compliance engineering: Implement and evidence access controls for ISO 27001 and SOC 2 Type 2 with our Security team, ensuring access reviews and audit logs are a by-product of well-built systems, not a quarterly scramble.

Endpoint and device management (shared): Partner on administrating Jumpcloud our MDM across macOS, Windows, and Linux, sharing endpoint and device management with our IT Operations and Endpoint Manager so coverage scales with the team.

Where the team needs you: We are a small, growing IT team, so scope will flex over time. You are happy to pick up adjacent systems work and support across the wider IT function as our needs evolve.

Identity expertise: Deep, hands-on experience with Okta or a comparable identity provider, including SSO, SCIM, lifecycle automation, and API-driven provisioning

IT Experience: Typically 5 or more years in IT systems, identity, or access engineering, including time in a developer-heavy or engineering-led environment.

Automation skills: You build automation with tools like Okta Workflows, n8n, or similar, you are comfortable with APIs and webhooks, and you script in Python or a comparable language.

Process optimization: You bring order to environments that grew quickly. You write clear procedures, standardize how things are done, and leave systems better documented than you found them.

SaaS-first operations: You have run and integrated a SaaS-based environment, where identity and APIs matter more than racks and networks.

Compliance fluency: You have worked inside ISO 27001 or SOC 2, ideally Type 2 where evidence is continuous, and you understand what auditors actually need.

Remote collaboration: You work well without close supervision in a fully remote team, and you communicate clearly with technical and non-technical colleagues alike

Google Workspace administration: We are a Google shop, so hands-on Google Workspace administration is core to this role: users, groups, policies, and security settings.

Working style: You are comfortable wearing several hats in a small IT team, picking up adjacent systems and endpoint work, and flexing as priorities shift.

Comfort managing configuration through Git-based workflows, or infrastructure as code with Terraform.

Professional proficiency in French.

At Upsun, remote work isn't just a trend - it's our foundation. The freedom of remote work with the support of a diverse, global team has been our successful model for over a decade. Our culture celebrates flexibility and collaboration, and while we have team members in over 30 countries around the globe, we are currently focused on hiring for this role in Canada, France, Germany, Spain, and the United Kingdom . Although we’re unable to provide visa sponsorship at this time, we welcome applications from all qualified candidates who are legally authorized to work in these countries.

We know that a great hire won’t meet every requirement that we’ve outlined. If you can see yourself elevating the team, we want to hear your story. Few of us would be here had we not taken a chance.

You can expect 4 interviews on Google Meet to follow the order below. Should you successfully move through the entire process you will have the opportunity to meet with a variety of Upsunners. Our goal is to ensure you can make the most informed decision on whether this role, and our culture aligns with what you’re looking for in your future working environment.

45 Minutes with Talent Acquisition

60 Minutes with Hiring Manager (Director, IT)

60 Minutes with Team (Senior Director, Site Reliability Engineering & Senior IT Manager)

45 Minutes with Executive (Senior Director, FP&A & IT)

All roles require background checks.

At Upsun, we celebrate diversity in all its forms and are committed to fostering an inclusive, equitable, and supportive workplace where everyone can thrive. We embrace and value different perspectives, backgrounds, and experiences, because they make us stronger as a team. Whoever you are, wherever you're from, and whatever path you've taken, you are welcome here. We encourage you to bring your whole self to work, connect with others, and share your passion. If you need accommodations at any stage of our hiring process, please let us know. We're here to ensure an accessible and comfortable experience for you.