[Hiring] Senior IT Operations Engineer @BigID

Role Description

BigID is hiring a Senior IT Operations Engineer to be the person teams turn to when a workflow crosses several tools, and nobody owns the gaps between them. You will build the automation that connects our systems, run the identity layer that controls access, and bring AI tooling to teams across the company.

This is an individual contributor role with a lot of room to lead. You will set your own technical direction, take projects from first request through rollout, and handle both planned project work and service desk escalations, so you will move between long builds and quick fixes.

We run internal IT with a DevOps mindset:

• Systems are defined as code
• Changes ship through CI/CD
• Repetitive work gets automated before it gets done by hand

Part of the global IT team is in Tel Aviv, so you will also be the North American contact for urgent requests, escalations, and production incidents when they are offline.

Most of your work happens with the Security, R&D, People, Support, Engineering, and GTM teams. You will work with them to understand a process that currently depends on someone copying data between tools, design the fix, build it, document it, and keep it running.

Example Projects

• Connecting Claude to a team’s tools, such as adding an MCP-backed data source to a Slack channel and deciding what access it gets
• Building an Okta Workflow that applies conditional access to strengthen our security posture
• Writing an AWS Lambda behind API Gateway to link two systems, defined in Terraform and deployed through GitLab CI/CD
• Diagnosing a failing Workato recipe caused by a malformed payload
• Tracing an email bounce to its root cause in Google Workspace

What You’ll Do

• Own automation in AWS (Lambda, API Gateway) and GCP, defined as code with Terraform and deployed through GitLab CI/CD
• Own Okta Workflows, our main automation engine, along with Workato, REST APIs, and webhooks
• Write scripts in Python or Go, support integrations around Salesforce (Auth0, Slack, Jira, and our data warehouse), and set up backups for critical systems such as Jira, GitHub, and Okta Workflows
• Look across IT processes to find and build new automation
• Own the Claude rollout, including its connectors and Claude Tag in Slack
• Host and govern MCP servers, including the Cloudflare MCP portal, and support other AI tools teams request, such as Gemini and Copilot
• Review each new connector for security and access scope, and support internal agents
• Own Okta and Auth0 administration, including Auth0 Actions, SCIM, MFA, device trust, and joiner, mover, and leaver processes
• Connect Okta to access governance tools such as Entitle or Lumos
• Own DNS, PKI, WAF, and rate limiting in Cloudflare, along with email authentication (SPF, DKIM, DMARC)
• Support the CloudFront sites customers use, coordinate hosting changes with web agencies, and help the security team investigate findings
• Own Google Workspace, Jira, JSM, Confluence, Slack, and GitLab, and work alongside the owners of Zoom, Microsoft 365, and the wider SaaS stack
• Handle Tier 2 and Tier 3 service desk escalations, troubleshoot Windows and macOS endpoints, and manage vendor support cases
• Support device-based access policies with the team that manages Iru Kandji and Intune
• Write runbooks, architecture notes, and handoff documents so no system depends on one person’s memory
• Document and implement processes, maintain an accurate inventory of hardware, software, and resources, and manage IT vendor and contractor relationships
• Look for weak points in our processes and update infrastructure so it scales, repeats reliably, and stays secure

What You’ll Bring

• 7+ years in IT operations, DevOps, cloud engineering, or IAM engineering, including 2+ years automating IT processes. Equivalent experience will be considered.
• Hands-on Okta administration, including Okta Workflows, and experience with Auth0 custom logic such as Actions or rules
• Working knowledge of AWS (Lambda, API Gateway, CloudFront, IAM) and GCP (projects, IAM, BigQuery)
• Experience building integrations with Workato or a similar iPaaS tool
• Proficiency in at least one automation language (Python, Go, or Node.js) and experience with REST APIs and webhooks
• Experience with infrastructure as code (Terraform or Pulumi) and CI/CD pipelines, ideally GitLab
• Practical experience with Claude or comparable LLM tools, connectors, and MCP servers, with an understanding of their security implications
• Experience with Cloudflare (DNS, certificates, Workers) and strong Google Workspace administration
• A solid understanding of SSO (SAML, OIDC), MFA, SCIM, RBAC, DNS, and email authentication
• Familiarity with an MDM such as Iru Kandji or Intune, and experience troubleshooting Windows and macOS
• Strong analytical and problem-solving skills, with attention to detail
• Excellent written and verbal English, with strong documentation habits
• Discretion with confidential information

How You Work

• Lead without direct reports, set direction, see projects through to completion, and make decisions
• Think about security in every process and treat identity as the front door
• Start from what a team is trying to accomplish and design automation around that goal
• Bring an employee-experience mindset, treating every issue, large or small, with empathy and follow through
• Be a generalist who enjoys learning new tools, working across Okta, Auth0, AWS, GCP, Cloudflare, and Google Workspace

Nice to Have

• Salesforce Apex and Flow
• Custom MCP servers or agent frameworks
• SQL, and experience with BigQuery, Snowflake, or Databricks
• Azure or other public cloud experience
• Access governance or SaaS security tools such as Entitle or Lumos
• SOC 2 or ISO 27001 experience, including vulnerability management
• HRIS-driven provisioning (for example, HiBob to Okta)
• Relevant certifications (AWS, GCP, Okta)