1 week ago

Staff IT Systems Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 7 hours agoStatus: Live

Job Summary

Own Obsidian’s identity, endpoint, and IT platform foundation as the senior technical owner. Lead Okta architecture and lifecycle orchestration from HRIS to Okta (joiner/mover/leaver, same-hour offboarding), manage SSO application catalog and access governance, and operate core IT as code in GitHub using Terraform/OpenTofu. Set standards for AI-augmented IT operations, build automation/self-service workflows, and harden device and zero-trust access across the fleet.

Location: Palo Alto

Workplace: Onsite

Employment Type: Full time

Job Function: IT Operations (Systems/Network Admin)

Key Responsibilities

•Own Okta identity foundation including Universal Directory, SSO, MFA, conditional access, device access, and Okta identity governance for certifications and reporting.
•Own lifecycle orchestration from HR events into Okta (joiner/mover/leaver flows) with same-hour offboarding.
•Manage the SSO application catalog: integration sequencing, role-based group access enforcement, and definition of sanctioned access.
•Operate IT as code by managing Okta and Jamf configuration as version-controlled code in GitHub, using OpenTofu/Terraform, and managing Google Workspace via scripts and workload identity federation.
•Set the standard for AI-augmented operations by authoring configuration with AI assistance, using read-only observability/drift tooling with human-gated production changes, and building automation/self-service workflows to resolve routine access and provisioning requests without tickets.

Pay and Benefits

Salary: USD 203,000 - 224,000 annually

Perks:Health InsuranceDentalVision401kEquityPaid LeavePaid HolidaysParental Leave

Key Requirements

•8+ years building and operating IT systems, identity, or platform infrastructure in production with clear ownership.
•Deep, hands-on Okta ownership across SSO, MFA, Universal Directory, lifecycle management, and conditional access, ideally including identity governance.
•Hands-on Jamf Pro expertise managing a production Mac fleet (configuration profiles, policies, smart groups, patch workflows).
•Proven infrastructure-as-code ownership using Terraform or OpenTofu, delivered via pull-request GitOps (e.g., GitHub Actions).
•Scripting fluency in Python or PowerShell (or similar) and comfort automating against SaaS/platform APIs.

Experience:8+ yearsSaaSCybersecurityIdentityInfrastructure-as-code

Skills:Written communicationVerbal communicationDrift triageLog investigationAutomation

Languages:English

Tech Stack:OktaUniversal DirectorySSOMFAOkta Verify FastPassFIDO2Okta Identity GovernanceHRISJamf ProMDMIntuneGitHubGoogle CloudOpenTofuTerraformWorkload Identity FederationGoogle WorkspaceGitOpsGitHub ActionsWorkato

Company Brief

Obsidian Security

Provides cloud-native security solutions that detect and respond to identity- and configuration-based threats across SaaS, IaaS, and cloud identity platforms. Focuses on discovering risky exposures, prioritizing alerts, and enabling remediation for enterprise cloud environments.

Industry: Cybersecurity

Headquarters: San Mateo, United States

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Obsidian Security

1 week ago

Staff IT Systems Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 7 hours agoStatus: Live

Job Summary

Location: Palo Alto

Workplace: Onsite

Employment Type: Full time

Job Function: IT Operations (Systems/Network Admin)

Key Responsibilities

•Own Okta identity foundation including Universal Directory, SSO, MFA, conditional access, device access, and Okta identity governance for certifications and reporting.
•Own lifecycle orchestration from HR events into Okta (joiner/mover/leaver flows) with same-hour offboarding.
•Manage the SSO application catalog: integration sequencing, role-based group access enforcement, and definition of sanctioned access.
•Operate IT as code by managing Okta and Jamf configuration as version-controlled code in GitHub, using OpenTofu/Terraform, and managing Google Workspace via scripts and workload identity federation.
•Set the standard for AI-augmented operations by authoring configuration with AI assistance, using read-only observability/drift tooling with human-gated production changes, and building automation/self-service workflows to resolve routine access and provisioning requests without tickets.

Pay and Benefits

Salary: USD 203,000 - 224,000 annually

Perks:Health InsuranceDentalVision401kEquityPaid LeavePaid HolidaysParental Leave

Key Requirements

•8+ years building and operating IT systems, identity, or platform infrastructure in production with clear ownership.
•Deep, hands-on Okta ownership across SSO, MFA, Universal Directory, lifecycle management, and conditional access, ideally including identity governance.
•Hands-on Jamf Pro expertise managing a production Mac fleet (configuration profiles, policies, smart groups, patch workflows).
•Proven infrastructure-as-code ownership using Terraform or OpenTofu, delivered via pull-request GitOps (e.g., GitHub Actions).
•Scripting fluency in Python or PowerShell (or similar) and comfort automating against SaaS/platform APIs.

Experience:8+ yearsSaaSCybersecurityIdentityInfrastructure-as-code

Skills:Written communicationVerbal communicationDrift triageLog investigationAutomation

Languages:English

Company Brief

Obsidian Security

Industry: Cybersecurity

Headquarters: San Mateo, United States

Website LinkedIn