IT Engineer

Black Forest Labs
Freiburg, San Francisco
Workplace: HybridFull timeEUR 95,000 - 110,000 annuallyFunction: IT Operations (Systems/Network Admin)Skills: ["Ownership","Automation mindset","Security mindset","Customer focus"]

Own the full lifecycle of a growing, all-macOS endpoint fleet—purchasing, zero-touch setup, management, and retrieval—while completing an MDM migration and moving to self-service, code-defined infrastructure. Lead identity and access automation across SaaS vendors using SSO/SAML and SCIM joiner–mover–leaver flows, build internal tooling and reporting, and implement secure endpoint/workforce controls. Provide local and remote workplace support and manage video conferencing equipment across offices.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Black Forest Labs
Black Forest Labs
3 days ago

IT Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 7 hours agoStatus: Live

Job Summary

Own the full lifecycle of a growing, all-macOS endpoint fleet—purchasing, zero-touch setup, management, and retrieval—while completing an MDM migration and moving to self-service, code-defined infrastructure. Lead identity and access automation across SaaS vendors using SSO/SAML and SCIM joiner–mover–leaver flows, build internal tooling and reporting, and implement secure endpoint/workforce controls. Provide local and remote workplace support and manage video conferencing equipment across offices.
Location: Freiburg, San Francisco
Workplace: Hybrid
Employment Type: Full time
Job Function: IT Operations (Systems/Network Admin)

Key Responsibilities

  • •Own the full endpoint lifecycle for the (currently all-macOS) fleet, including purchasing, issuance, zero-touch setup, management, and retrieval.
  • •Complete the MDM migration across the endpoint fleet.
  • •Own identity and access across SaaS vendor stack, replacing manual access administration with automated joiner–mover–leaver lifecycle using SSO, SCIM, and provisioning/de-provisioning.
  • •Build automation and internal tooling to remove routine human work; define IT infrastructure as code with configuration, provisioning, and access managed in version control.
  • •Implement and maintain identity, access, and endpoint security controls for workforce systems and provide workplace technical support across offices.

Pay and Benefits

Salary: EUR 95,000 - 110,000 annually
Equity and Bonus:Equity

Key Requirements

  • •Hands-on IT/corporate engineering experience in a fast-growing startup and comfort being the primary day-to-day IT contact.
  • •macOS fleet management and MDM experience (Iru, Jamf, or similar) including Apple Business Manager / ADE and zero-touch provisioning.
  • •Identity and access administration with an IdP, including SSO/SAML and SCIM-based lifecycle automation across SaaS applications.
  • •Scripting and automation experience (e.g., Python, shell) plus infrastructure-as-code experience (e.g., Terraform).
  • •Security mindset for workforce systems, balancing control and usability for endpoints and access.
Experience:StartupSaaSSecurityWorkforce systems
Skills:OwnershipAutomation mindsetSecurity mindsetCustomer focus
Languages:English
Tech Stack:MacOSMDMIruJamfApple Business ManagerADESSOSAMLSCIMPythonShellInfrastructure as codeTerraform

Company Brief

Black Forest Labs
Develops AI-driven solutions and provides machine learning consultancy to help businesses integrate advanced models and data-driven workflows. Focuses on prototyping, model deployment, and bespoke AI services to address industry-specific problems.
Industry: Consulting
Website