[Hiring] IT Solutions Engineer @Finom

Role Description

We're looking for an IT Solutions Engineer who thinks like a systems builder - someone who doesn't just run internal infrastructure, but engineers it away where it shouldn't need a human at some point. This is a build-focused role on our IT Operations team. As we scale past 600 employees, our biggest lever is no longer closing tickets faster - it's removing the work that generates them.

You'll own the automation and integration layer that connects our identity, HR, device, and SaaS-governance systems, so that provisioning, deprovisioning, and access lifecycle events happen reliably and automatically instead of by hand. You'll pair closely with our Solutions Engineer, help set the technical standard for how automations are built and documented, and work cross-functionally with Security, People Ops, and DevOps to design end-to-end solutions rather than point fixes.

A DevOps and API background is exactly what this role is built around: you're comfortable reading API docs, wiring 2-3 systems together, scripting from scratch when a no-code tool won't cut it, and thinking about reliability, edge cases, and security from the first line. Above all, you're curious - about the systems you build, the people who depend on them, and how your engineering decisions impact the business.

Qualifications

• At least 3 years in IT support, systems administration, or IT/DevOps engineering, with hands-on expertise across Windows and macOS environments.
• Strong IAM experience: JumpCloud (or a comparable IdP) for SSO, SCIM, and SAML - including configuring integrations and debugging complex provisioning and authentication issues.
• Strong MDM / UEM experience: endpoint management via JumpCloud MDM (or Intune / Jamf), including profiles and scripts for zero-touch deployment.
• An automation-first mindset with real scripting skills - PowerShell, Bash, Python, or similar - to build reliable, scalable solutions from scratch, not just wire up templates.
• API fluency: comfortable reading API documentation and integrating multiple systems (REST APIs, webhooks, SCIM). Experience with n8n or a comparable automation/iPaaS platform.
• Proficiency administering Google Workspace (or M365) and experience with ITSM tools - ideally Jira Service Management (workflows, request types, automations).
• Clear, concise communication in English across technical and non-technical audiences - able to explain configs and tradeoffs to Security, People, and Engineering alike.
• Advanced use of AI tools to accelerate troubleshooting, draft automations, and continuously raise the bar on operational efficiency.

Requirements

• Build the access lifecycle automation layer:
• Own the design, build, and maintenance of automated provisioning and deprovisioning across our top applications by ticket volume.
• Implement birthright roles for our highest-volume employee profiles and HiBob-driven trigger events (joiners, movers, leavers) that flow through to downstream systems without manual intervention.
• Integrate our core systems:
• Build and maintain the integrations that tie HiBob → JumpCloud → Tequipy (and Google Workspace, Slack, Notion, and the wider SaaS estate) into one coherent, event-driven lifecycle.
• Use REST APIs, SCIM, and our self-hosted n8n instance to create complex, reliable workflows.
• Manage identity and access at the backend:
• Configure and debug SSO/SCIM and SAML flows in JumpCloud as our Identity Provider.
• Own SSO app integrations end to end, troubleshoot complex provisioning and authentication issues, and keep access governance clean and auditable.
• Deliver the Security controls programme:
• Build the automations behind our security and compliance initiatives - local admin removal, least-privilege enforcement - contributing directly to DORA, ISO 27001, and SOC 2 efforts.
• Security is embedded in every config and every script, not bolted on afterward.
• Administer and optimize business-critical platforms:
• Manage the technical backend of Jira Service Management as our ITSM platform - configuring workflows, request types, forms, and automations to streamline internal processes - alongside the wider Atlassian Suite, Slack, and Notion.
• Own endpoint automation:
• Build and test JumpCloud MDM device policies, profiles, and scripts for zero-touch deployment across Windows and macOS endpoints (via Apple Business Manager), handling software deployment and OS-level configuration at scale.
• Drive SaaS and budget optimization:
• Monitor system logs, performance, and SaaS usage to identify waste and cost-saving opportunities, and implement the technical changes that reclaim them (e.g. license reclamation flows).
• Document everything you build:
• Proactively create and maintain technical documentation configs, automation flows, API maps - so that what you build can be run, understood, and extended by the rest of the team.
• Reliable, documented, alerted workflows are the standard, not the exception.
• Lead technical projects:
• Lead smaller technical projects end to end a new SSO app integration, a JSM form build-out, a new integration between systems - owning them from requirement to delivery, and providing technical guidance to the team as you go.

Benefits

• Make a genuine impact on the product.
• Join our upward trajectory, and grow with us. We provide the resources and opportunities for continuous personal and professional development, empowering you to make a genuine impact on our evolving product.
• Work in the EU: Enjoy the flexibility of traveling and working remotely or in a hybrid model across Europe.
• Become a stock options holder: Unlock your inner entrepreneur and align your aspirations with ours through our Stock Options Program.
• Receive unwavering support and care: Finom stands by you at every step, embodying our commitment to your well-being and success.
• Work & Swim program: Spend one month in a comfortable corporate apartment in enchanting Cyprus.

Equal Opportunity Statement

At Finom, we're an equal opportunity employer and value diversity at our company. We embrace diversity and invite applications from all walks of life. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, disability status, or other applicable legally protected characteristics.