Staff IT Systems Engineer

Requirements: 8 or more years building and operating IT systems, identity, or platform infrastructure in production, with clear ownership of the systems you ran. Deep, hands-on Okta ownership across SSO, MFA, Universal Directory, Lifecycle Management, and conditional access, ideally including Identity Governance. You have owned an Okta tenant end to end. Hands-on Jamf Pro expertise managing a production Mac fleet, including configuration profiles, policies, smart groups, and patch workflows. Proven infrastructure-as-code ownership with Terraform or OpenTofu managing real infrastructure or SaaS configuration in production, shipped through a pull-request-based GitOps workflow such as GitHub Actions. Daily use of AI coding tools to ship production work. Hands-on MDM depth with Jamf or Intune at fleet scale, including device compliance and trust. Scripting fluency in Python, PowerShell, or a comparable language, and comfort automating against SaaS and platform APIs. Clear written and verbal communication. You can explain an access policy or automation decision to an engineer and to a business stakeholder with equal clarity. Preferred Experience with a lifecycle or identity-governance orchestration layer and with HRIS-driven provisioning (Rippling, Workday, or similar). Google Workspace administration at scale, including GAM7. Secrets and non-human credential management (HashiCorp Vault, Doppler, Secret Manager, or equivalent). Workflow and integration automation on an iPaaS or agent platform such as Workato, including human-in-the-loop steps and MCP-style tooling. Zero-trust network access (Jamf Connect, Zscaler, Tailscale, or similar) and enterprise browser deployments. Exposure to compliance-driven controls and evidence automation for SOC 2 or ISO 27001 and 27701, and tooling such as Drata. Google Cloud Platform and familiarity with agentic or MCP tooling for operations. B2B SaaS or cybersecurity domain background. Employee Benefits Our competitive benefits packages are designed to support our employees' well-being, both at work and at home. Our US based employees enjoy: Competitive compensation with equity and 401k Comprehensive healthcare with dental and vision coverage Flexible paid time off and paid holiday time off 12 weeks of new parent or family leave Personal and professional development resources For more details on our US benefits, or for information on our international benefits, please see here . Pay Transparancy Please note that the base pay range is a guideline and for candidates who receive an offer, the base pay will vary based on factors such as work location, as well as the knowledge, skills and experience of the candidate. In addition to a competitive base salary, this position is eligible for equity awards and may be eligible for sales commission or incentive compensation based on the role or function within the company. At Obsidian, we are proud to be an equal-opportunity employer. We value diversity and hire for talent, passion, and compassion. In compliance with federal law, all persons hired will be required to submit satisfactory proof of identity and legal authorization. If you have a need that requires accommodation, please contact accommodations@obsidiansecurity.com Information collected and processed as part of any job applications you choose to submit is subject to Obsidian’s Applicant . Base Salary Range $203,000 — $224,000 USD