Systems Engineer (Identity and Access)

Flexport Inc.
San Francisco, CA, United States
9 days ago
Apply on www.dice.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Compensation
$130,000.0 - $170,000.0
Working hours
Regular working hours
Job source

Tech stack

Microsoft Windows Application Integration Architecture Confluence JIRA Bash Shell Software as a Service Collaborative Software Multi-Factor Authentication Identity and Access Management Information Technology Operations Python (Programming Language) Lightweight Directory Access Protocols (LDAP)
+17 more
OAuth OpenID Password Management Windows PowerShell Role-Based Access Control Security Assertion Markup Language (SAML) Single Sign-On User Provisioning Software Scripting Okta Office365 Microsoft InTune Information Technology Slack Casper Suite Gsuite Unified Endpoint Management

Job description

While you are our resident Okta expert, you are also a high-level IT generalist. You will oversee our broader SaaS ecosystem (Google Workspace, Slack, Jira) and endpoint management infrastructure (Jamf, Intune). Your expertise will drive automation, protect sensitive data, mitigate security risks, and maintain compliance in a heavily regulated industry.

You will continually strive towards automation of toil. If you are still manually doing the same operational tasks 18 months from now, something has gone wrong. Flexport’s book of business is growing fast, but the promise of technology is that we can grow our business faster than our headcount. The automation you build will be a key factor in that effort. You Will

  • IAM Architecture: Design, implement, and maintain the end-to-end lifecycle of Identity and Access Management platforms.
  • Okta & Directory Trust: Administer Okta, directory services, Multi-Factor Authentication (MFA), and advanced password management.
  • SaaS Operations: Manage core collaboration tools including Google Workspace, Microsoft O365, Slack, and Jira/Confluence.
  • Unified Endpoint Management: Oversee our global fleet of Mac and Windows devices using Jamf and MS Intune.
  • Lifecycle Automation: Build automated workflows for provisioning, deprovisioning, and application access.
  • Identity Governance: Establish role-based access control (RBAC), entitlement reviews, and access certification processes.
  • SSO Integration: Lead the technical onboarding of new SaaS applications for Single Sign-On (SSO).
  • Security Partnership: Collaborate closely with the Security team to embed security best practices into our IT infrastructure.
  • Documentation & Roadmaps: Author technical operating procedures, engineering roadmaps, and compliance policies.
  • Operations Support: Provide high-tier technical leadership and escalation support for complex IT operations.

Requirements

  • Experience: 5+ years of experience in IAM systems engineering paired with broad IT infrastructure management.
  • Okta Expertise: Deep, hands-on mastery of Okta configuration, policy creation, and application integration.
  • Core Protocols: Strong knowledge of IAM standards including SAML, SCIM, OAuth, OIDC, IGA, RBAC, and LDAP.
  • Automation Skills: Experience with scripting (e.g., Python, Bash, or PowerShell) and Okta Workflows to automate IT tasks.
  • SaaS & Endpoint Ecosystem: Proven track record managing Google Workspace, Slack, Jira, Jamf (macOS), and Intune (Windows).
  • Education: Bachelor’s degree in Computer Science, a related field, or equivalent practical engineering experience.
  • Compliance Mindset: A “compliance-first” attitude to navigate the rigorous requirements of a heavily regulated industry.
  • Soft Skills: Excellent problem-solving abilities paired with strong collaborative and interpersonal communication.

LI-onsite

Benefits & conditions

The range displayed on each job posting reflects the minimum and maximum target for new hire base salary for the position in the posting’s respective region. Our salary ranges are determined by role, level, and location. Within the range displayed, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education and / or training. Base salary is just one part of our total rewards package at Flexport, which also includes bonus, equity, and comprehensive benefit offerings such as medical, dental, and flexible time off.

The US base salary range for this position (this does not include bonus, equity and benefits):

$130,000-$170,000 USD

About the company

At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes-from emerging brands to Fortune 500s-use Flexport technology to move more than $19B of merchandise across 112 countries a year.

The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.dice.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:30 min

Operating developer-friendly identity infrastructure using Affinity Elements

Adam Larter Adam Larter · World Congress 2024

1:14 min

Automating user bug triage and resolutions using Slack agents

Brian Lovin Brian Lovin · World Congress 2026 Europe

2:33 min

Introduction to security advocacy and automation testing

Chris Heilmann +2 · LIVE

3:05 min

Integrating an assistant application with Jira software

Felix Augenstein · LIVE

5:36 min

Integrating agentic coding models into Slack

Chris Heilmann +2 · LIVE

4:37 min

Architecting single sign-on flows across multiple application domains

Gift Egwuenu · World Congress 2023

Videos

See all

Related articles

See all