Staff IT Systems Engineer

Obsidian Security
Palo Alto
Workplace: OnsiteFull timeUSD 203,000 - 224,000 annuallyFunction: IT Operations (Systems/Network Admin)Experience: 8+ yearsSkills: ["Written communication","Verbal communication","Drift triage","Log investigation","Automation"]

Own Obsidian’s identity, endpoint, and IT platform foundation as the senior technical owner. Lead Okta architecture and lifecycle orchestration from HRIS to Okta (joiner/mover/leaver, same-hour offboarding), manage SSO application catalog and access governance, and operate core IT as code in GitHub using Terraform/OpenTofu. Set standards for AI-augmented IT operations, build automation/self-service workflows, and harden device and zero-trust access across the fleet.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Obsidian Security
Obsidian Security
2 months ago

Staff IT Systems Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 13 hours agoStatus: Live

Job Summary

Own Obsidian’s identity, endpoint, and IT platform foundation as the senior technical owner. Lead Okta architecture and lifecycle orchestration from HRIS to Okta (joiner/mover/leaver, same-hour offboarding), manage SSO application catalog and access governance, and operate core IT as code in GitHub using Terraform/OpenTofu. Set standards for AI-augmented IT operations, build automation/self-service workflows, and harden device and zero-trust access across the fleet.
Location: Palo Alto
Workplace: Onsite
Employment Type: Full time
Job Function: IT Operations (Systems/Network Admin)

Key Responsibilities

  • •Own Okta identity foundation including Universal Directory, SSO, MFA, conditional access, device access, and Okta identity governance for certifications and reporting.
  • •Own lifecycle orchestration from HR events into Okta (joiner/mover/leaver flows) with same-hour offboarding.
  • •Manage the SSO application catalog: integration sequencing, role-based group access enforcement, and definition of sanctioned access.
  • •Operate IT as code by managing Okta and Jamf configuration as version-controlled code in GitHub, using OpenTofu/Terraform, and managing Google Workspace via scripts and workload identity federation.
  • •Set the standard for AI-augmented operations by authoring configuration with AI assistance, using read-only observability/drift tooling with human-gated production changes, and building automation/self-service workflows to resolve routine access and provisioning requests without tickets.

Pay and Benefits

Salary: USD 203,000 - 224,000 annually
Perks:Health InsuranceDentalVision401kEquityPaid LeavePaid HolidaysParental Leave

Key Requirements

  • •8+ years building and operating IT systems, identity, or platform infrastructure in production with clear ownership.
  • •Deep, hands-on Okta ownership across SSO, MFA, Universal Directory, lifecycle management, and conditional access, ideally including identity governance.
  • •Hands-on Jamf Pro expertise managing a production Mac fleet (configuration profiles, policies, smart groups, patch workflows).
  • •Proven infrastructure-as-code ownership using Terraform or OpenTofu, delivered via pull-request GitOps (e.g., GitHub Actions).
  • •Scripting fluency in Python or PowerShell (or similar) and comfort automating against SaaS/platform APIs.
Experience:8+ yearsSaaSCybersecurityIdentityInfrastructure-as-code
Skills:Written communicationVerbal communicationDrift triageLog investigationAutomation
Languages:English
Tech Stack:OktaUniversal DirectorySSOMFAOkta Verify FastPassFIDO2Okta Identity GovernanceHRISJamf ProMDMIntuneGitHubGoogle CloudOpenTofuTerraformWorkload Identity FederationGoogle WorkspaceGitOpsGitHub ActionsWorkato

Company Brief

Obsidian Security
Provides cloud-native security solutions that detect and respond to identity- and configuration-based threats across SaaS, IaaS, and cloud identity platforms. Focuses on discovering risky exposures, prioritizing alerts, and enabling remediation for enterprise cloud environments.
Industry: Cybersecurity
Headquarters: San Mateo, United States
WebsiteLinkedIn