Senior IT Operations Engineer, BigID

• 7+ years in IT operations, DevOps, cloud engineering, or IAM engineering, including 2+ years automating IT processes. Equivalent experience will be considered
• Hands-on Okta administration, including Okta Workflows, and experience with Auth0 custom logic such as Actions or rules
• Working knowledge of AWS (Lambda, API Gateway, CloudFront, IAM) and GCP (projects, IAM, BigQuery)
• Experience building integrations with Workato or a similar iPaaS tool
• Proficiency in at least one automation language (Python, Go, or Node.js) and experience with REST APIs and webhooks
• Experience with infrastructure as code (Terraform or Pulumi) and CI/CD pipelines, ideally GitLab
• Practical experience with Claude or comparable LLM tools, connectors, and MCP servers, with an understanding of their security implications
• Experience with Cloudflare (DNS, certificates, Workers) and strong Google Workspace administration
• A solid understanding of SSO (SAML, OIDC), MFA, SCIM, RBAC, DNS, and email authentication
• Familiarity with an MDM such as Iru Kandji or Intune, and experience troubleshooting Windows and macOS
• Strong analytical and problem-solving skills, with attention to detail
• Excellent written and verbal English, with strong documentation habits
• Discretion with confidential information
• You lead without direct reports
• You set direction, see projects through to completion, and make decisions
• You think about security in every process and treat identity as the front door, so you check what an app or connector can reach before approving it
• You start from what a team is trying to accomplish and design automation around that goal
• You bring an employee-experience mindset, so you treat every issue, large or small, with empathy and follow through
• You are a generalist who enjoys learning new tools, and in a single week you might work across Okta, Auth0, AWS, GCP, Cloudflare, and Google Workspace

Desirable

• Reports to: VP of IT
• BigID is hiring a Senior IT Operations Engineer to be the person teams turn to when a workflow crosses several tools, and nobody owns the gaps between them. You will build the automation that connects our systems, run the identity layer that controls access, and bring AI tooling to teams across the company
• This is an individual contributor role with a lot of room to lead. You will set your own technical direction, take projects from first request through rollout, and handle both planned project work and service desk escalations, so you will move between long builds and quick fixes
• We run internal IT with a DevOps mindset: systems are defined as code, changes ship through CI/CD, and repetitive work gets automated before it gets done by hand. Part of the global IT team is in Tel Aviv, so you will also be the North American contact for urgent requests, escalations, and production incidents when they are offline
• Most of your work happens with the Security, R&D, People, Support, Engineering, and GTM teams. You will work with them to understand a process that currently depends on someone copying data between tools, design the fix, build it, document it, and keep it running
• Automation and integration. You will own automation in AWS (Lambda, API Gateway) and GCP, defined as code with Terraform and deployed through GitLab CI/CD. You will also own Okta Workflows, our main automation engine, along with Workato, REST APIs, and webhooks. You will write scripts in Python or Go, support the integrations around Salesforce (Auth0, Slack, Jira, and our data warehouse), and set up backups for critical systems such as Jira, GitHub, and Okta Workflows. You will also look across IT processes to find and build new automation
• AI enablement. You will own the Claude rollout, including its connectors and Claude Tag in Slack. You will host and govern MCP servers, including the Cloudflare MCP portal, and support other AI tools teams request, such as Gemini and Copilot. You will review each new connector for security and access scope, and support internal agents
• Identity and access. You will own Okta and Auth0 administration, including Auth0 Actions, SCIM, MFA, device trust, and joiner, mover, and leaver processes. You will also connect Okta to access governance tools such as Entitle or Lumos
• Security and edge. You will own DNS, PKI, WAF, and rate limiting in Cloudflare, along with email authentication (SPF, DKIM, DMARC). You will support the CloudFront sites customers use, coordinate hosting changes with web agencies, and help the security team investigate findings
• Workplace tools and support. You will own Google Workspace, Jira, JSM, Confluence, Slack, and GitLab, and work alongside the owners of Zoom, Microsoft 365, and the wider SaaS stack. You will handle Tier 2 and Tier 3 service desk escalations, troubleshoot Windows and macOS endpoints, and manage vendor support cases. You will also support device-based access policies with the team that manages Iru Kandji and Intune
• Documentation and continuous improvement. You will write runbooks, architecture notes, and handoff documents so no system depends on one person’s memory. You will document and implement processes, maintain an accurate inventory of hardware, software, and resources, and manage IT vendor and contractor relationships. You will also look for weak points in our processes and update infrastructure so it scales, repeats reliably, and stays secure
• Example Projects
• Connecting Claude to a team’s tools, such as adding an MCP-backed data source to a Slack channel and deciding what access it gets
• Building an Okta Workflow that applies conditional access to strengthen our security posture
• Writing an AWS Lambda behind API Gateway to link two systems, defined in Terraform and deployed through GitLab CI/CD
• Diagnosing a failing Workato recipe caused by a malformed payload
• Tracing an email bounce to its root cause in Google Workspace