Systems Engineer, WorkOS

• We're looking for engineers who build and automate, not just operate. You think in systems — understanding how identity, devices, SaaS tools, and cloud infrastructure connect — and your instinct is to eliminate manual work. You might be a great fit if you:
• Have deep Okta expertise — not just user administration, but Workflows, integrations, and policy design
• Write scripts (Python, Bash) to automate what others do manually
• Use Terraform to manage infrastructure as code — not just for cloud, but for identity and SaaS configuration
• Understand SSO protocols (SAML, OAuth, SCIM) deeply enough to troubleshoot and architect, not just configure
• Are comfortable managing a macOS fleet end-to-end — zero-touch provisioning, policy enforcement, MDM
• Think about AI as a tool for IT automation — you are curious about using LLMs and agentic workflows to eliminate toil
• Take ownership, work independently, and follow through from identifying a problem to shipping a solution
• 7+ years in IT systems, infrastructure, or identity engineering roles — with clear examples of designing, building, and automating at scale (not just operating)
• Deep experience with Okta — Workflows, integrations, policy design, SCIM provisioning (not just user administration)
• Proficiency in scripting (Python, Bash) and comfort with REST APIs, webhooks, and authentication flows
• Hands-on Terraform experience for managing infrastructure and configuration as code
• Strong macOS fleet management — MDM (Jamf, Kandji, or equivalent), scripting, zero-touch provisioning
• Deep understanding of SSO protocols (SAML, OAuth 2.0) and SCIM provisioning patterns
• Experience with Google Workspace administration at scale
• Solid understanding of networking fundamentals — DNS, HTTP, APIs, VPNs, firewalls

Desirable

• As a Systems Engineer at WorkOS, you will be the technical backbone of our internal IT organization — designing the systems, automations, and infrastructure that scale our internal operations
• This is not a help desk role: you will architect endpoint management workflows, write scripts, ship automation, and build the foundation that keeps a fast-growing company running smoothly
• We have an MSP partner handling tier 1 support
• Your job is to architect the systems the MSP executes against, automate everything upstream, and serve as the escalation point for complex tier 2/3 issues
• You will own identity, device management, SaaS lifecycle, and the automation layer that ties it all together
• Own and evolve our identity infrastructure — Okta (SSO, MFA, Workflows, SCIM provisioning, lifecycle management), Google Workspace, and downstream SaaS integrations
• Architect and ship automation across the IT stack — onboarding/offboarding workflows, access controls, license governance, and SaaS lifecycle management
• Own macOS endpoint management end-to-end — zero-touch provisioning, policy enforcement, detection and remediation scripting via MDM
• Manage infrastructure as code using Terraform for identity, SaaS, and cloud resources
• Serve as the escalation point for complex systems issues (tier 2/3) — working with our MSP partner to ensure smooth resolution
• Evaluate and enable new SaaS tools — pilot emerging technologies including AI-powered IT automation
• Create documentation and runbooks that reduce operational toil and increase durability
• Drive an automation-first culture across the IT function — if it can be automated, it should be