← All roles

Systems Engineer

WorkOS· IT
Apply on company site
RemoteFull-timePosted 2mo ago

About the role

Systems Engineer at WorkOS responsible for designing and automating internal IT systems, identity, device management, and automation layer to scale operations, acting as escalation point for complex issues, and collaborating with MSP partner.

Responsibilities

  • Own and evolve our identity infrastructure — Okta (SSO, MFA, Workflows, SCIM provisioning, lifecycle management), Google Workspace, and downstream SaaS integrations
  • Architect and ship automation across the IT stack — onboarding/offboarding workflows, access controls, license governance, and SaaS lifecycle management
  • Own macOS endpoint management end-to-end — zero-touch provisioning, policy enforcement, detection and remediation scripting via MDM
  • Manage infrastructure as code using Terraform for identity, SaaS, and cloud resources
  • Serve as the escalation point for complex systems issues (tier 2/3) — working with our MSP partner to ensure smooth resolution
  • Evaluate and enable new SaaS tools — pilot emerging technologies including AI-powered IT automation
  • Create documentation and runbooks that reduce operational toil and increase durability
  • Drive an automation-first culture across the IT function — if it can be automated, it should be

Qualifications

  • 7+ years in IT systems, infrastructure, or identity engineering roles — with clear examples of designing, building, and automating at scale (not just operating)
  • Deep experience with Okta — Workflows, integrations, policy design, SCIM provisioning (not just user administration)
  • Proficiency in scripting (Python, Bash) and comfort with REST APIs, webhooks, and authentication flows
  • Hands-on Terraform experience for managing infrastructure and configuration as code
  • Strong macOS fleet management — MDM (Jamf, Kandji, or equivalent), scripting, zero-touch provisioning
  • Deep understanding of SSO protocols (SAML, OAuth 2.0) and SCIM provisioning patterns
  • Experience with Google Workspace administration at scale
  • Solid understanding of networking fundamentals — DNS, HTTP, APIs, VPNs, firewalls

Skills

Required:Okta workflows and policy designScriptingTerraformmacOS fleet managementSSO protocolsGoogle Workspace administration

Benefits

  • 401k matching
  • Competitive Equity
  • Healthcare, dental and vision coverage
  • FSA, ST/LT Disability, Voluntary Life
  • Carrot fertility benefits
  • 20 days paid vacation + 10 holidays + unlimited sick leave
  • 12 weeks fully paid parental leave
  • Fitness: Monthly stipend for gyms, yoga classes, race registrations or whatever keeps you active
  • Wellness: Monthly stipend for a massage, meditations class, therapy, or activities that enhance your well-being
  • Commuter benefits for hybrid employees in SF/NYC
  • Unlimited token usage!
Last updated Oct 19, 2026. Interested? Apply on the company site.

About WorkOS

Your app, Enterprise Ready.

Developer APIs/SDKs for Enterprise Ready features like Single Sign-On, Directory Sync, Audit Logging, and more. Get started for free.

APIsSDKsSingle Sign-OnDirectory SyncAudit LoggingEnterprise Features
Company profileWebsite

More open roles at WorkOS