> Markdown version of [/jobs/ext/3124040-it-engineer](https://www.wearedevelopers.com/jobs/ext/3124040-it-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# It Engineer

- **Company:** Thunes Ltd.
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Apple Mac Systems, Confluence, JIRA, BitLocker Drive Encryption, System Configuration, Identity and Access Management, Information Technology Operations, Zero Trust Network Access, Okta, Information Technology, Slack, Gsuite, CIS Benchmarks, Api Design, Api Management
- **Published:** September 28, 2026
- **Apply:** https://www.buscojobs.com.es/it-engineer-en-madrid-ID-372342083

## About the Role

Minimum 5 years of relevant Internal IT experience in a fast-paced, scale-up, or regulated Fintech environment.
Hands-on Okta Expertise: Proven experience building workflows with Okta Workflows and managing SCIM/LCM app integrations.
Google Workspace Administration: Deep knowledge of GWS as a primary IdP, including domain security settings, OU management, and admin workflows.
MDM Policy Creation: Direct experience creating, testing, and deploying compliance baselines, FileVault/BitLocker policies, and configuration profiles in JumpCloud (or equivalent cloud MDM).
OS & Endpoint Proficiency: Strong track record supporting and securing both macOS and Windows workstations.
Automation-First Mindset: Demonstrated ability to automate manual administrative tasks using native workflow hooks or API integrations.
Security & UX Focus: Solid understanding of Zero Trust architecture, least-privilege principles, and security baselines, paired with a focus on seamless user experience.
Communication: Fluent in English at a professional working level with excellent documentation skills.
#J-*****-Ljbffr

## Description

About The Role We are looking for a hands-onIT Systems Administratorto join our Internal IT team in a fast-growth environment.In this role, you will operate at the intersection of startup speed and banking-grade security.You won't just be resolving tickets; you will actively build and refine our identity architecture, design automated lifecycle workflows (Joiner/Mover/Leaver), and author device compliance policies across our fleet.ResponsibilitiesIdentity & Access Management: Administer Google Workspace as our master source of identity (Primary IdP) for authentication and access control.Workflow & Provisioning Automation: Design, build, and maintain automated lifecycle management (JML) using Okta Workflows and SCIM provisioning to downstream apps (Slack, Jira, Zoom, 1Password, etc.).MDM Policy & Configuration: Author, deploy, and audit system configuration profiles and compliance policies in JumpCloud across both macOS and Windows fleets.Service Desk & Escalations: Provide high-UX, tier-2/3 support via Jira Service Management (JSM) and Slack, using ticket data to identify root causes and automate repeat issues.Security & Compliance Enforcement: Maintain Zero Trust access controls, enforce SOC2/ISO ***** compliance standards, and manage endpoint protection (Sophos) with minimal user friction.Global Standardization: Work closely with the team to author knowledge base documentation in Confluence, standardizing IT operations across international offices.Proactive Maintenance: Monitor IT infrastructure, audit permissions, and recommend tooling or API-first improvements to eliminate manual workload.Professional Experience & QualificationsMinimum 5 years of relevant Internal IT experience in a fast-paced, scale-up, or regulated Fintech environment.Hands-on Okta Expertise: Proven experience building workflows with Okta Workflows and managing SCIM/LCM app integrations.Google Workspace Administration: Deep knowledge of GWS as a primary IdP, including domain security settings, OU management, and admin workflows.MDM Policy Creation: Direct experience creating, testing, and deploying compliance baselines, FileVault/BitLocker policies, and configuration profiles in JumpCloud (or equivalent cloud MDM).OS & Endpoint Proficiency: Strong track record supporting and securing both macOS and Windows workstations.Automation-First Mindset: Demonstrated ability to automate manual administrative tasks using native workflow hooks or API integrations.Security & UX Focus: Solid understanding of Zero Trust architecture, least-privilege principles, and security baselines, paired with a focus on seamless user experience.Communication: Fluent in English at a professional working level with excellent documentation skills.#J-*****-Ljbffr