> Markdown version of [/jobs/ext/4281630-systems-engineer](https://www.wearedevelopers.com/jobs/ext/4281630-systems-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Systems Engineer - **Company:** Bamboo Health - **Location:** United States (Remote available) - **Experience:** Starter - **Salary:** $120,000.0 - $180,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Confluence, JIRA, User Authentication, Software as a Service, Collaborative Software, Identity and Access Management, Issue Tracking Systems, Azure Active Directory, Microsoft Copilot, Security Assertion Markup Language (SAML), Software Engineering, User Provisioning Software, Generative AI, Microsoft InTune, AI Platforms, Information Technology, Atlassian Tools, Claude, Intelligent Document Processing, GPT - **Published:** October 12, 2026 - **Apply:** https://www.builtincolorado.com/job/it-systems-engineer/11635098?handler=ApplyRedirect ## About the Role * 2+ years of experience in IT support, systems administration, or a related identity/access role. * Working knowledge of Azure AD/Entra ID, SSO/SAML concepts, and basic SCIM provisioning (or strong aptitude and willingness to ramp quickly). * Comfort working in a ticketing system (Jira Service Management or similar) and managing a queue of concurrent requests with competing priorities. * Familiarity with common enterprise SaaS administration (user provisioning, license management) is a plus. * Interest in AI tooling and willingness to learn enterprise AI platform administration (Claude/Anthropic, Bedrock, MCP integrations) - no prior AI-specific experience required. * Strong written communication - this role documents its own work and hands off context clearly. * Comfort being the first point of contact on escalated, sometimes urgent, end-user issues. * Comfort using or learning AI-supported tools (e.g., ChatGPT, CoPilot, or role-specific tools) to improve daily workflows. * A forward-thinking, curious mindset with an openness to experimenting with new technologies. * Strong analytical and problem-solving skills, with sound judgment and creativity in designing solutions. * Proven ability to thrive in fast-paced, high-growth, and rapidly evolving environments. * Ability to work effectively in a remote-first environment, ensuring high-quality virtual interactions with minimal distractions. * The ability to travel periodically for work. ## Description We're hiring a Systems Engineer to work directly alongside our Senior Systems Engineer, taking ownership of the day-to-day, high-volume execution work across identity and access management, SaaS/vendor administration, and AI tooling support. This person will handle routine and escalated tickets, keep recurring operational work (access provisioning, certificate renewals, procurement intake, license/access requests) moving reliably, and free up the senior engineer to focus on architecture, vendor strategy, and higher-risk security work. This is a strong role for someone who wants hands-on exposure to modern identity infrastructure and emerging AI platform administration, with a clear growth path toward a senior identity/systems engineering role. What You'll Do: * Process day-to-day Azure AD/Entra access requests: group membership changes, access package assignments, and standard onboarding/offboarding. * Monitor and action alerts for registered-app secrets and SSO/SAML certificates approaching expiration; execute routine renewals under senior engineer guidance. * Handle first-pass triage and provisioning for SCIM-based app access requests. * Support Atlassian (Jira/Confluence) group access requests and routine permission changes. * Own intake and initial documentation for new SaaS vendor procurement reviews (e.g., Zip requests), preparing them for senior/security review. * Execute standard software lifecycle tasks - user provisioning/deprovisioning, license tracking, renewal reminders - for existing SaaS tools. * Assist with license and cost audits to support ongoing SaaS cost-management initiatives. * Handle routine AI tool access requests (e.g., Claude/Anthropic license grants, Bedrock access requests) and standard troubleshooting for existing MCP integrations. * Support configuration and rollout tasks for AI vendor tools (e.g., Letter AI, Clay, Granola) - SSO/SCIM setup, basic integration troubleshooting - under senior engineer direction. * Document AI tool setup procedures and known issues to build a self-serve knowledge base for common requests. * Execute assigned phases of endpoint management rollouts (Intune Suite, NinjaOne) and OS end-of-life remediation projects. * Apply routine patches and respond to standard CVE remediation tasks as assigned. * Serve as first-line owner for escalated help-desk (ITHD) tickets involving access grants, credential issues, and standard cross-system troubleshooting. * Triage incoming escalations, resolve what's within scope, and flag higher-risk or ambiguous issues to the senior engineer with clear context. * Execute routine MFA/conditional access policy changes as directed. * Flag anomalous activity or potential security events for senior engineer review; assist with documented remediation steps. What Success Looks Like… In 3 months… * Gain proficiency in the organization's core platforms (Entra ID, SaaS applications, endpoint management, and AI tooling) and independently perform routine access, provisioning, and lifecycle management tasks. * Resolve standard identity, access, SaaS, and endpoint-related tickets while adhering to documented procedures, security controls, and SLA expectations. * Build foundational platform knowledge by completing required training and creating or updating documentation for common processes, troubleshooting steps, and support workflows. * Identify at least one opportunity in your role to pilot or apply AI or automation (e.g., streamlining a task, summarizing data, generating content). In 6 months… * Independently manage assigned operational responsibilities, including SCIM provisioning, SSO/SAML certificate renewals, license management, endpoint administration, and AI platform support. * Troubleshoot cross-platform issues involving identity, authentication, device management, and SaaS integrations, escalating only higher-risk or complex issues. * Contribute to process improvement efforts through documentation enhancements, automation opportunities, cost optimization initiatives, or workflow standardization. In 12 months… * Serve as the primary owner for one or more technology areas, consistently delivering reliable administration, maintenance, and support for assigned platforms. * Lead assigned components of system implementations, upgrades, integrations, or remediation projects while collaborating effectively with security, infrastructure, and business stakeholders. * Demonstrate engineering-level impact by identifying operational risks, implementing efficiency improvements, and acting as a technical resource for peers and service desk teams., Develop and maintain internal full-stack applications using C#/Blazor or Python. Build CI/CD pipelines and infrastructure automation with GitLab, Azure DevOps, GitHub, Artifactory, and SonarQube. Partner with cross-functional teams to improve software delivery, code quality, security, compliance, and operational visibility. Implement scalable enterprise solutions, infrastructure as code, secure development practices, and DevSecOps workflows. Top Skills: ArtifactoryAzure DevopsBicepBlazorC#Ci/CdDevsecopsGitGitlabInfrastructure As CodePythonRbacSonarqubeSsoTerraform, Anthropic, Owns the IT aspects of mergers and acquisitions, including technical due diligence, risk assessment, integration planning, migrations, cutovers, and systems retirement. The role administers identity, applications, endpoints, infrastructure, and collaboration platforms while building automation and an M&A playbook. It partners with Security, Legal, Corporate Development, People, Finance, and IT teams, and contributes to broader Corporate Systems projects when acquisition work is limited. Top Skills: ClaudeEndpoint ManagementGoogle WorkspaceMobile Device Management (Mdm)PythonSaas ApisSlackSso Thatch (thatch.ai)