> Markdown version of [/jobs/ext/2101771-engineer-systems-engineer-aws-cloud-security](https://www.wearedevelopers.com/jobs/ext/2101771-engineer-systems-engineer-aws-cloud-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# engineer systems engineer aws cloud security

- **Company:** GitLab
- **Location:** Canada, KY, United States (Remote available)
- **Experience:** Expert
- **Salary:** $126,000.0 - $214,000.0
- **Contract:** Permanent contract
- **Skills:** JavaScript (Programming Language), Artificial Intelligence, Amazon Web Services, Systems Engineering, Microsoft Azure, Code Review, Desktop Virtualization, Digital Architecture, Human Resources Information System (HRIS), Python (Programming Language), Knowledge Management, Virtual Desktops, Citrix Systems, Site Reliability Engineering Practices, Runbook, Search Technologies, Software Engineering, Google Cloud, Okta, Gitlab, Information Technology, Slack, Deployment Automation, Casper Suite, Gsuite, Virtual Agents, Restful APIs, Terraform, Webhooks, Software Version Control, Workday
- **Published:** August 18, 2026
- **Apply:** https://www.workingnomads.com/job/go/1798937/

## About the Role

* Solid infrastructure-as-code experience (Terraform or similar), with change managed through version control, code review, and automated deployment rather than manual, one-off work.
 * A working command of SRE principles, including observability, monitoring and alerting, reliability targets, and blameless post-incident review, applied to the services you own.
 * Experience running workloads in a major public cloud; working knowledge across all three (AWS, GCP, and Azure) is a plus.
 * Experience designing or operating virtual desktop infrastructure (Azure Virtual Desktop, Amazon WorkSpaces, Citrix, or similar).
 * A track record automating employee lifecycle processes across HRIS, identity, and endpoint management systems for a distributed or remote workforce.
 * Experience with workflow automation and iPaaS tooling (Okta Workflows, Serval, or similar) and with an ITSM platform; experience with a major ITSM platform is a plus.
 * Familiarity with AI-enabled service capabilities such as virtual agents, AI search, and agentic resolution, and an interest in using them to resolve requests without human intervention.
 * Strong scripting and development skills (Python, JavaScript, or similar), with fluency in REST APIs, webhooks, and event-driven integration patterns.
 * Experience defining and reporting on operational metrics, with the judgment to know which automation opportunities are worth the investment and which are not.
 * Excellent written communication skills suited to an all-remote, async-first company, and the ability to influence stakeholders well outside your reporting line.

## Description

Staff Systems Engineer, IT is a senior, hands-on engineering role for a generalist who is comfortable owning a broad set of platforms. You'll own the systems and integrations behind the employee lifecycle, onboarding, role changes, and offboarding, and you'll build them the way we build software: as infrastructure-as-code, with SRE practices behind them so they are versioned, observable, and reliable. You'll be the technical owner of GitLab's ITSM platform and the AI capabilities layered on top of it, designing virtual agents, agentic workflows, and knowledge experiences that resolve requests before they ever become tickets. You'll also own shared IT infrastructure across our cloud footprint. Working with our AI-enabled ITSM, you'll replace repetitive manual work with durable automation, and you'll partner with End User Services, Security, People, and Finance to scale those solutions company-wide. You'll be measured on automation coverage of lifecycle processes, AI deflection rates,
and the reliability of the systems you build.

 * The GitLab Team Member Handbook

What You'll Do

 * Design, build, and own end-to-end automation for the employee lifecycle - onboarding, transfers, role changes, and offboarding - so provisioning and deprovisioning happen accurately and with minimal human touch.
 * Serve as the technical owner of GitLab's ITSM platform, including service catalog design, workflow, request/incident/change processes, integrations, and platform upgrades.
 * Increase AI deflection rates for all stakeholders of the ITSM system by deploying and tuning virtual agents, AI search, and agentic resolution, and by measuring what actually resolves requests without human intervention.
 * Identify repetitive, manual workflows across IT and its partner teams and replace them with automation built in our ITSM and Serval.
 * Build and maintain integrations between the ITSM platform and GitLab's core systems, including Okta, Google Workspace, Slack, Zoom, JAMF, Fleet, Workday, and GitLab itself.
 * Manage IT-owned infrastructure as code across our cloud environments, so every change ships through version control, code review, and an automated, auditable path to production.
 * Apply SRE principles to the services IT owns: meaningful monitoring and alerting, clear reliability targets, capacity and cost awareness, and blameless post-incident review.
 * Develop the knowledge management and self-service experiences that feed AI deflection: well-structured articles, catalog items, and conversational flows that stay accurate as systems change.
 * Instrument automation and AI performance with clear metrics and dashboards, deflection rate, time to resolution, automation coverage, and failure rates, and iterate publicly on the results.
 * Set engineering standards for the IT automation stack, including version control, testing, code review, environment management, and change control, and mentor support engineers across the IT organization.
 * Partner with Security and Compliance to ensure lifecycle automation and AI workflows meet access, audit, and control requirements, including SOX and SOC 2.
 * Document architecture, runbooks, and design decisions in the handbook so the systems you build are transparent, maintainable, and operable by the whole team., * Breadth as a generalist systems engineer. You have owned a wide range of platforms end to end, and you pick up unfamiliar ones fast enough to own them outright., IT Engineering builds the systems and automation that make an all-remote company run. We own the platforms behind identity, endpoints, the employee lifecycle, and IT service management, and we treat them like products: versioned, tested, measured, and iterated in the open. We operate the way GitLab builds software - all-remote, async-first, transparent by default, and biased toward automating anything we would otherwise have to do twice. We invest heavily in AI so Team Members get answers instantly and our engineers can spend their energy on higher-leverage work. IT Engineering partners closely with End User Services, Security, Workplace, People, and Finance to make GitLab a place where the tools just work., The base salary range for this role's listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.
United States Salary Range
$126,000-$213,600 USD

How GitLab Supports Full-Time Employees, Staff Systems Engineer, IT is a senior, hands-on engineering role for a generalist who is comfortable owning a broad set of platforms. You'll own the systems and integrations behind the employee lifecycle, onboarding, role changes, and offboarding, and you'll build them the way we build software: as infrastructure-as-code, with SRE practices behind them so they are versioned, observable, and reliable. You'll be the technical owner of GitLab's ITSM platform and the AI capabilities layered on top of it, designing virtual agents, agentic workflows, and knowledge experiences that resolve requests before they ever become tickets. You'll also own shared IT infrastructure across our cloud footprint. Working with our AI-enabled ITSM, you'll replace repetitive manual work with durable automation, and you'll partner with End User Services, Security, People, and Finance to scale those solutions company-wide. You'll be measured on automation coverage of lifecycle processes, AI
deflection rates, and the reliability of the systems you build.

 * The GitLab Team Member Handbook

What You'll Do

 * Design, build, and own end-to-end automation for the employee lifecycle - onboarding, transfers, role changes, and offboarding - so provisioning and deprovisioning happen accurately and with minimal human touch.
 * Serve as the technical owner of GitLab's ITSM platform, including service catalog design, workflow, request/incident/change processes, integrations, and platform upgrades.
 * Increase AI deflection rates for all stakeholders of the ITSM system by deploying and tuning virtual agents, AI search, and agentic resolution, and by measuring what actually resolves requests without human intervention.
 * Identify repetitive, manual workflows across IT and its partner teams and replace them with automation built in our ITSM and Serval.
 * Build and maintain integrations between the ITSM platform and GitLab's core systems, including Okta, Google Workspace, Slack, Zoom, JAMF, Fleet, Workday, and GitLab itself.
 * Manage IT-owned infrastructure as code across our cloud environments, so every change ships through version control, code review, and an automated, auditable path to production.
 * Apply SRE principles to the services IT owns: meaningful monitoring and alerting, clear reliability targets, capacity and cost awareness, and blameless post-incident review.
 * Develop the knowledge management and self-service experiences that feed AI deflection: well-structured articles, catalog items, and conversational flows that stay accurate as systems change.
 * Instrument automation and AI performance with clear metrics and dashboards, deflection rate, time to resolution, automation coverage, and failure rates, and iterate publicly on the results.
 * Set engineering standards for the IT automation stack, including version control, testing, code review, environment management, and change control, and mentor support engineers across the IT organization.
 * Partner with Security and Compliance to ensure lifecycle automation and AI workflows meet access, audit, and control requirements, including SOX and SOC 2.
 * Document architecture, runbooks, and design decisions in the handbook so the systems you build are transparent, maintainable, and operable by the whole team.


## Related Videos

- [Stack Overflow: Community and AI](https://www.wearedevelopers.com/videos/600-stack-overflow-community-and-ai)
- [Shipping Faster with Less: Render on Cloud Hosting, AI Workloads, and the Future of DevOps](https://www.wearedevelopers.com/videos/1894-shipping-faster-with-less-render-on-cloud-hosting-ai-workloads-and-the-future-of-devops)
- [Agentic employees in world's most downloaded FinTech app](https://www.wearedevelopers.com/videos/100123-agentic-employees-in-world-s-most-downloaded-fintech-app)
- [Leading Through Stagility: Human Capital Trends That Redefine Work](https://www.wearedevelopers.com/videos/1717-leading-through-stagility-human-capital-trends-that-redefine-work)
- [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security)

## Related Articles

- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)