Senior Systems Engineer (Identity and Access)

At Flexport we believe global trade can move the human race forward. Thats why its our mission to make global commerce so easy there will be more of it. Were shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today companies of all sizesfrom emerging brands to Fortune 500suse Flexport technology to move more than $19B of merchandise across 112 countries a year.

The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission solutions and people. Ready to tackle global challenges that impact business society and the environment Come join us.

Flexport IT is looking for a Senior Systems Engineer (Identity & Access). In this role you will design implement and administer our Identity and Access Management (IAM) solutions to ensure secure efficient user lifecycle management.

While you are our resident Okta expert you are also a high-level IT generalist. You will oversee our broader SaaS ecosystem (Google Workspace Slack Jira) and endpoint management infrastructure (Jamf Intune). Your expertise will drive automation protect sensitive data mitigate security risks and maintain compliance in a heavily regulated industry.

You will continually strive towards automation of toil. If you are still manually doing the same operational tasks 18 months from now something has gone wrong. Flexports book of business is growing fast but the promise of technology is that we can grow our business faster than our headcount. The automation you build will be a key factor in that effort.

• IAM Architecture: Design implement and maintain the end-to-end lifecycle of Identity and Access Management platforms.
• Okta & Directory Trust: Administer Okta directory services Multi-Factor Authentication (MFA) and advanced password management.
• SaaS Operations: Manage core collaboration tools including Google Workspace Microsoft O365 Slack and Jira/Confluence.
• Unified Endpoint Management: Oversee our global fleet of Mac and Windows devices using Jamf and MS Intune.
• Lifecycle Automation: Build automated workflows for provisioning deprovisioning and application access.
• Identity Governance: Establish role-based access control (RBAC) entitlement reviews and access certification processes.
• SSO Integration: Lead the technical onboarding of new SaaS applications for Single Sign-On (SSO).
• Security Partnership: Collaborate closely with the Security team to embed security best practices into our IT infrastructure.
• Documentation & Roadmaps: Author technical operating procedures engineering roadmaps and compliance policies.
• Operations Support: Provide high-tier technical leadership and escalation support for complex IT operations.

• Experience: 5 years of experience in IAM systems engineering paired with broad IT infrastructure management.
• Okta Expertise: Deep hands-on mastery of Okta configuration policy creation and application integration.
• Core Protocols: Strong knowledge of IAM standards including SAML SCIM OAuth OIDC IGA RBAC and LDAP.
• Automation Skills: Experience with scripting (e.g. Python Bash or PowerShell) and Okta Workflows to automate IT tasks.
• SaaS & Endpoint Ecosystem: Proven track record managing Google Workspace Slack Jira Jamf (macOS) and Intune (Windows).
• Education: Bachelors degree in Computer Science a related field or equivalent practical engineering experience.
• Compliance Mindset: A compliance-first attitude to navigate the rigorous requirements of a heavily regulated industry.
• Soft Skills: Excellent problem-solving abilities paired with strong collaborative and interpersonal communication.

#LI-onsite