> Markdown version of [/jobs/ext/4686780-principal-systems-engineer](https://www.wearedevelopers.com/jobs/ext/4686780-principal-systems-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Systems Engineer - **Company:** Nasuni Corporation - **Location:** Denver, CO, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Training Data, Application Programming Interfaces (APIs), Artificial Intelligence, Application Integration Architecture, Systems Engineering, Software as a Service, Software Documentation, Data Infrastructure, Multi-Factor Authentication, Identity and Access Management, Python (Programming Language), OpenID, Windows PowerShell, Runbook, Security Assertion Markup Language (SAML), Single Sign-On, Systems Integration, Unstructured Data, User Provisioning Software, Scripting, Okta, Microsoft InTune, Information Technology, Patch Management, Casper Suite - **Published:** November 12, 2026 - **Apply:** https://www.builtincolorado.com/auth/login?destination=/job/principal-systems-engineer/12187196 ## About the Role * Significant professional experience in systems engineering, enterprise IT infrastructure, or identity and access management, including substantial hands-on platform ownership. * Deep technical expertise administering and designing enterprise Okta environments, including SSO, MFA, application integrations, and automated user provisioning. * Hands-on experience managing enterprise endpoint platforms and implementing security, configuration, provisioning, and patch management standards. * Experience designing and implementing identity governance, least-privilege access, and audit-supporting controls. * Proven ability to troubleshoot complex infrastructure issues, lead technical escalations, and deliver permanent solutions. * Demonstrated ability to mentor engineers, improve technical documentation, and influence engineering practices without formal management authority. * Strong communication and stakeholder collaboration skills, with the ability to explain technical decisions to technical and non-technical audiences. * Ability to collaborate effectively with distributed teams across the United States, India, Poland, and the United Kingdom., * Experience with Microsoft Intune, Jamf, or comparable enterprise endpoint management platforms. * Experience with identity automation, SCIM, SAML, OIDC, APIs, PowerShell, or Python. * Experience supporting SOC 2, ISO 27001, or comparable security and compliance requirements. * Experience integrating identity and endpoint environments following mergers or acquisitions. * Experience using AI-assisted troubleshooting, scripting, documentation, or workflow automation with appropriate security and validation practices. Ideal Candidate You have owned enterprise identity and endpoint platforms-not simply supported them. You bring strong technical judgment, enjoy remaining close to work, and take pride in creating secure, scalable systems that other engineers can operate confidently. You are equally comfortable resolving a complex incident, designing long-term architecture, or coaching a teammate through a difficult technical challenge. Experience Guideline: Typically, 10+ years in IT infrastructure or systems engineering, including 5+ years of substantial identity and access management experience. Equivalent expertise demonstrated will be considered. A bachelor's degree in computer science, Information Technology, or a related field is valued; equivalent practical experience is welcome. ## Description Nasuni is seeking a Principal Systems Engineer to lead the architecture, security, reliability, and continuous improvement of our enterprise identity, access, and endpoint management platforms. This is a highly visible, hands-on technical leadership role for an experienced engineer who enjoys solving complex problems, building secure and scalable systems, and helping others become stronger engineers. You will serve as the primary technical owner of Okta, identity and access management (IAM), and endpoint management across Nasuni's global environment. Working closely with Security, IT, and business stakeholders, you will strengthen access governance, improve automation, support compliance requirements, and ensure our employees can work securely and efficiently. Equally important, you will help elevate the IT team's technical capabilities through mentorship, documentation, and collaborative problem-solving. What You'll Do * Own enterprise identity platforms: Lead the architecture, configuration, operational health, and continuous improvement of Okta, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity lifecycle management. * Strengthen identity governance: Design and maintain role-based access controls, least-privilege standards, access certification processes, and audit-ready identity controls in partnership with Security. * Lead endpoint engineering: Establish and maintain scalable endpoint provisioning, configuration, patching, compliance, and security standards across a geographically distributed workforce. * Drive automation and operational excellence: Improve joiner, mover, and leaver workflows, application provisioning, endpoint operations, and IT service delivery through scripting, integrations, and automation. * Resolve complex technical challenges: Serve as the senior escalation resource for identity, access, and endpoint incidents. Lead root cause analysis and implement sustainable corrective actions. * Remain hands-on: Participate in the IT team's regular support rotation, directly resolving tickets and supporting escalations at all levels. * Develop technical talent: Mentor engineers through troubleshooting, technical coaching, pairing, knowledge-sharing sessions, and practical guidance. * Build scalable knowledge: Own documentation standards and improve the quality of troubleshooting guides, runbooks, and knowledge base articles to reduce repeat incidents and unnecessary escalations. * Partner across the business: Collaborate with Security and business stakeholders on technology integrations, application onboarding, acquisitions, and evolving identity and endpoint requirements. * Apply AI responsibly: Use approved AI-enabled tools and automation to improve troubleshooting, technical documentation, operational analysis, and workflow efficiency while validating outputs and protecting sensitive information.