Senior Systems Engineer (Identity and Access)

About the role

Flexport IT is looking for a Senior Systems Engineer (Identity & Access) to design, implement, and administer our Identity and Access Management (IAM) solutions, ensuring secure and efficient user lifecycle management. As the resident Okta expert, you will also oversee our broader SaaS ecosystem (Google Workspace, Slack, Jira) and endpoint management infrastructure (Jamf, Intune). Your role will focus on driving automation, protecting sensitive data, mitigating security risks, and maintaining compliance in a heavily regulated industry. The goal is to automate repetitive operational tasks—if you're still manually performing the same tasks 18 months from now, something has gone wrong.

Flexport’s business is growing rapidly, and technology should enable us to scale faster than our headcount. The automation you build will be critical to that effort.

Responsibilities

• IAM Architecture: Design, implement, and maintain the end-to-end lifecycle of Identity and Access Management platforms.
• Okta & Directory Trust: Administer Okta, directory services, Multi-Factor Authentication (MFA), and advanced password management.
• SaaS Operations: Manage core collaboration tools including Google Workspace, Microsoft O365, Slack, and Jira/Confluence.
• Unified Endpoint Management: Oversee our global fleet of Mac and Windows devices using Jamf and MS Intune.
• Lifecycle Automation: Build automated workflows for provisioning, deprovisioning, and application access.
• Identity Governance: Establish role-based access control (RBAC), entitlement reviews, and access certification processes.
• SSO Integration: Lead the technical onboarding of new SaaS applications for Single Sign-On (SSO).
• Security Partnership: Collaborate closely with the Security team to embed security best practices into our IT infrastructure.
• Documentation & Roadmaps: Author technical operating procedures, engineering roadmaps, and compliance policies.
• Operations Support: Provide high-tier technical leadership and escalation support for complex IT operations.

Requirements

• 5+ years of experience in IAM systems engineering paired with broad IT infrastructure management.
• Okta Expertise: Deep, hands-on mastery of Okta configuration, policy creation, and application integration.
• Core Protocols: Strong knowledge of IAM standards including SAML, SCIM, OAuth, OIDC, IGA, RBAC, and LDAP.
• Automation Skills: Experience with scripting (e.g., Python, Bash, or PowerShell) and Okta Workflows to automate IT tasks.
• SaaS & Endpoint Ecosystem: Proven track record managing Google Workspace, Slack, Jira, Jamf (macOS), and Intune (Windows).
• Bachelor’s degree in Computer Science, a related field, or equivalent practical engineering experience.
• Compliance Mindset: A "compliance-first" attitude to navigate the rigorous requirements of a heavily regulated industry.
• Soft Skills: Excellent problem-solving abilities paired with strong collaborative and interpersonal communication.

Pay

The US base salary range for this position is $130,000 - $170,000 USD per year. This range reflects the minimum and maximum target for new hire base salary in the posting’s region. Individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education and/or training. Base salary is just one part of Flexport’s total rewards package, which also includes bonus, equity, and comprehensive benefits such as medical, dental, and flexible time off.