Identity & Automation Engineer

Why this role exists

We got here by being scrappy. Now it's time to build IT like an engineering org: real automation, repeatable workflows, and self-service systems that scale without scaling the team.

This is the first dedicated automation hire on our IT team. You won't inherit a pile of legacy tooling or spend your day in a ticket queue. You'll design how identity and IT operations work at this company from the ground up — deciding the architecture, writing the code, and owning the outcome.

If you love building integrations and automating away manual work, this is a greenfield canvas with the autonomy to match. You'll report to the Global IT Manager.

What you'll actually do

• Build the user lifecycle from scratch. Architect end-to-end provisioning and deprovisioning by integrating our HRIS, IdP, and core apps (D365, BambooHR, Expensify, Google Workspace, JumpCloud) over REST APIs.
• Write real code. Python bridges, sync scripts, and internal tooling that eliminate manual IT work — with the logging, alerting, idempotency, and error handling of production software.
• Own the automation roadmap. Partner directly with the Global IT Manager to decide what to automate next, prioritizing systemic fixes over manual maintenance.
• Make IT self-service. Build workflows so the org provisions, requests, and resolves common needs without a human in the loop.
• Own the automation and architectural health of our identity & device stack. Manage JumpCloud (IdP + MDM) to secure the fleet and enforce granular, automated access controls.
• Use modern, AI-assisted tooling. We expect you to lean on AI to ship faster — it's part of how we work, not something we're nervous about.
• Document and harden. Maintain clear records for the systems and workflows you build so they outlast any single person.

What we're looking for

We care more about what you can build than the exact boxes you check. The strongest signal is a track record of automating real workflows between systems.

• Minimum 5 years in IT systems / operations engineering, or a related builder role.
• Hands-on API integration experience in Python — you've connected systems that didn't ship a prebuilt integration.
• Experience automating user provisioning / deprovisioning between an HRIS and an IdP.
• Experience working with relational databases (e.g., SQLite, MySQL) and writing SQL queries to support automation, reporting, and system integrations.
• Proficiency with Git for version control, collaborative development, code reviews, and change management.
• Comfort in writing, debugging code, and configuring systems to create self-service tooling.
• Strong written and verbal communication — you can document and explain what you build.
• You can juggle multiple projects, prioritize well, and work with minimal hand-holding.

Nice to have (we'll happily teach the rest)

• Working knowledge of IdP protocols — SAML, SCIM, LDAP, RADIUS.
• Managing a global identity stack across regions.
• Exposure to IT governance or data privacy frameworks (ISO 27001, GDPR).

Benefits Offered:

• Competitive compensation and equity program
• Health care plan (Medical, Dental & Vision)
• Flexible and Dependent Care Expense program
• Retirement plan (401k)
• Life Insurance (Basic, Voluntary & AD&D)
• Unlimited paid time off per year, 15 paid holidays
• Hybrid office work arrangement/flexibility

Perk Offerings include:

• Complimentary lunches, snacks, and beverages during on-site working days
• Wellness benefit allowances (towards gym membership and fitness programs)
• Internet reimbursement
• Computer Accessory Allowance

Employee Engagement Offerings:

• Departmental team building and outings
• Employee Referral Program
• Culture/Employee Satisfaction Surveys - Feedback matters!