Senior IT Engineer

About the role

The Senior IT Engineer at Amplitude is responsible for owning and evolving the IT automation platform with Okta Workflows, managing identity and access configurations, designing and implementing SAML and OIDC integrations, administering macOS device management, and championing AI adoption within IT.

Responsibilities

• Own and evolve Amplitude's IT automation platform with Okta Workflows as the primary engine.
• Design and deliver reliable, scalable automations across onboarding and offboarding, access provisioning, SaaS license management, and compliance workflows.
• Own the full Okta configuration surface, SSO integrations, SCIM provisioning, group rules, adaptive MFA, RBAC lifecycle automation, and access review workflows in Lumos.
• Debug the full federation layer including attribute mapping, JIT provisioning, and SCIM reconciliation, and maintain production-grade configurations across the fleet.
• Administer macOS device management at scale via Kandji, including zero-touch provisioning, Blueprint and Library Item configuration, software deployment, and security policy enforcement.
• Maintain fleet compliance through automated checks and diagnose complex endpoint issues without escalation.
• Manage the lifecycle of Amplitude's corporate SaaS stack, vendor onboarding integrations, license optimization, app security reviews, and offboarding automation.
• Support SOC 2 evidence collection and access review workflows, including building and maintaining automated pipelines that surface access anomalies, generate reviewer-ready reports, and track remediation to closure.
• Own the full onboarding and offboarding lifecycle end-to-end - from Day 1 provisioning through final access termination - across Okta, Google Workspace, Kandji, and the broader SaaS stack.
• Partner with IT Security, Engineering, People Ops, and Finance to deliver high-impact projects.

Requirements

• 5–8+ years in IT systems engineering, with hands-on depth in at least three of: Okta/IdP administration, SAML/OIDC federation engineering, macOS endpoint management (Kandji or Jamf), Google Workspace administration, IT automation and integration, or SOC 2/compliance operations.
• Identity & federation depth: Built net-new SAML 2.0 and OIDC integrations from scratch on both the SP and IdP sides, debug assertion failures, fix attribute mapping mismatches, troubleshoot SCIM sync errors, and own the full federation lifecycle without escalating to a vendor or another engineer.
• Automation architecture: Demonstrated track record of building multi-step, multi-system automation workflows with measurable business impact, Okta Workflows experience is strongly preferred. Design for maintainability, not just function.
• Technical skills: Comfortable writing Python, Bash, or equivalent to extend low-code platforms, build lightweight tooling, or debug integration issues. Move quickly without looping in engineering.
• AI proficiency: Actively use AI tools (Claude, Copilot, or similar) to accelerate your own work, build or design AI-powered automations or agentic workflows, and have genuine curiosity about leveraging LLMs and AI-native tooling in IT operations.
• Autonomy & ownership: Work through ambiguous problems independently from initial triage through remediation and documentation. Don't wait for perfect requirements.
• Communication: Strong cross-functional collaboration skills. Able to translate complex technical decisions for non-technical stakeholders and work effectively with Legal, People, Security, and Engineering.

Qualifications

• Deep Okta Workflows experience including complex branching, error handling, and cross-app orchestration.
• Experience with enterprise iPaaS platforms (Workato or equivalent) in addition to Okta Workflows.
• Familiarity with AI tool governance - acceptable use policies, connector security reviews, and data classification in AI contexts.
• Experience supporting M&A technical integrations or cross-tenant identity migrations.
• Zero-trust architecture patterns, CASB/SSPM tooling, or ZTNA experience.
• Prior experience at a high-growth tech company with a lean IT team and large scope.

Skills

• Python, Bash, or equivalent scripting languages.
• Okta Workflows experience.
• Experience with SAML 2.0 and OIDC integrations.
• Knowledge of macOS endpoint management tools (Kandji or Jamf).
• Google Workspace administration.
• IT automation and integration experience.
• Experience with SOC 2 compliance operations.
• Experience with AI-native tooling and LLMs.

Benefits

Amplitude offers a comprehensive benefits package including:

• Competitive pay and benefits packages with 100% employer-paid premiums for medical, dental, and vision insurance.
• Flexible time off, paid holidays, and generous stipends for wellness, commuting, learning and development, home office equipment, and more.
• Parental benefits including 12-20 weeks of Paid Parental Leave, fertility benefits, and back-up child care support.
• Mental health and wellness benefits including no-cost employee access to Modern Health coaching & therapy sessions and high-quality physician office experience via One Medical membership.
• Employee Stock Purchase Program (ESPP).
• Unlimited PTO, 10 to 13 holidays annually (will vary), medical, dental, and vision PPO and CDHP plans.
• A company-sponsored 401(k) retirement plan.

Pay

$98,000 - $147,000 base salary (Colorado)

$110,000 - $165,000 base salary (New York City)

$110,000 - $165,000 base salary (California)

$98,000 - $147,000 base salary (Washington state)

Schedule

Full-time