[Hiring] Senior IT Systems Engineer @Pantheon Systems, Inc

Role Description

As a Senior IT Systems Engineer, you are curious, poised, persistent, logical, clever, and possess a love for technology. You are not only an expert systems engineer and integrator, but an effective communicator and key stakeholder in enterprise-wide projects and objectives. You will leverage your technical skills to administrate, design, implement, and manage Pantheon's enterprise IT infrastructure with a meaningful focus on identity and access management across our cloud platforms and development tooling.

This role owns Pantheon's identity governance program:

• Okta-driven provisioning and least-privilege baselines across GCP, AWS, and GitHub Enterprise
• Endpoint/MDM governance (Kandji/Intune)
• SaaS management via Torii
• ITSM/AI workflow design and development via Serval

It is also the named owner of active ISO 27001 risk register remediation:

• Role-based access reviews
• Endpoint admin-rights policy
• Access adjustment on role change

The ideal candidate is resourceful, articulate, and energized by working across teams to deliver high-quality solutions to complex problems. You bring a security-first mindset, thrive in fast-paced SaaS environments, and take real ownership over the systems you build and maintain.

Cool Stuff You'll Do

• Architect and build enterprise IT systems that scale with a fast-growing global company
• Partner with cross-functional teams to untangle complex business problems and deliver technology solutions that actually move the needle
• Be the connective tissue between IT, Enterprise Systems, and business stakeholders at every level of the organization
• Automate the tedious stuff — deploy workflows using Workato, Zapier, or Okta Workflows that save time and reduce human error
• Be the technical lifeline for the IT support team when things get gnarly
• Own SaaS management and governance through Torii, and design and build ITSM/AI workflows in Serval
• Lead Pantheon's identity governance program across GCP, AWS, and GitHub Enterprise — building Okta-driven provisioning workflows, enforcing least-privilege access, and establishing departmental access baselines that actually reflect how we work
• Own ISO 27001 risk register remediation for IT systems: build out role-based access review processes, govern endpoint admin rights, and establish an access-adjustment process for role changes
• Evaluate our current IAM landscape and chart the path forward — deciding where Okta integrates with, runs alongside, or replaces existing infrastructure-as-code workflows
• Close the loop on compliance — ensuring audit trails are complete and that what we document matches what's actually running in production

Qualifications

• 6+ years of IT systems engineering experience or related field in a fast-paced SaaS startup environment
• Experience integrating multiple business-critical systems
• Project leadership experience — skilled in organizing and prioritizing competing priorities and complexities using agile methodologies
• Advanced knowledge and experience leveraging Okta for identity and access management, including SSO/SAML/SCIM integrations and Okta Workflows
• Hands-on experience with GCP IAM (Cloud Identity), AWS IAM (including IAM Identity Center and federated access), and GitHub Enterprise administration
• Familiarity with infrastructure-as-code tools (Terraform, CloudFormation, etc.) is a plus, but not a requirement for this role today
• Advanced experience with mobile device management tools, such as Jamf and Intune
• Advanced knowledge and understanding of security policies and procedures, including firewalls, IDS, and EDR tools
• Experience building or maturing identity governance programs that support compliance requirements (SOC 2, ISO 27001)
• Experience with SaaS management/governance platforms (e.g., Torii) and ITSM platforms, ideally with AI-driven workflow design (e.g., Serval)
• Experience with or working knowledge of Privileged Access Management (PAM) concepts — JIT access, least-privilege enforcement, privileged session monitoring — even without formal PAM tooling in place
• Provided senior level technical guidance and served as an escalation point in a fast-paced SaaS startup environment
• Experience utilizing scripts (specifically Bash or Python) to perform bulk operations such as patch/software deployments, user management, and policy enforcement
• Comfortable working with and manipulating large datasets in Excel, Google Sheets, etc.
• Excellent communication background with strong relationship management skills
• Clear and empathic communicator and a creative problem solver
• Ability to interface with key stakeholders at all levels of the organization
• Ability to learn and adapt quickly to changes in process, tools, and workflows
• Able to diagnose and resolve challenging technical issues while demonstrating a sense of urgency
• Analytical thinker with strong skills in problem solving, coordination, strategic planning, and quality management
• Integrity and honesty, ability to be trusted and to work with highly sensitive and confidential information
• Resourceful, self-motivated with a strong sense of ownership in areas of responsibility
• Organized, exceptional attention to detail

Benefits

• Industry competitive compensation and equity plan
• Flexible time off, sick days, and 13 paid holidays
• Comprehensive medical insurance including Health, Dental and Vision
• Paid parental leave (plus fertility, adoption and other family planning benefits)
• In-office workspace (San Francisco and New York)
• Monthly allowance for wellness, reading and access to LinkedIn Learning for continued development
• Events and activities both team-based and company wide that inspire, educate and cultivate
• Robust Vacation Package with 28 days of Holiday
• Private medical and dental coverage
• Life and Critical illness insurance
• Attractive Workplace Pension scheme
• Access to Employee Resource Platform
• Top-of-line equipment