Senior IT Operations Engineer

Who we are:

BigID is an innovative tech startup that focuses on solutions for data security, compliance, privacy, and AI data management. We're leading the market in all things data: helping our customers reduce risk, drive business innovation, achieve compliance, build customer trust, make better decisions, and get more value from their data.

We are building a global team passionate about innovation and next-gen technology. BigID has been recognized for:

• BigID named one of Forbes America's Best Startup Employers 2026 - ranked #15 overall and #1 in Security
• BigID named Hot Company in Artificial Intelligence and Machine Learning at the Global InfoSec Awards
• Citizens JMP Cyber 66 List of Hottest Privately Held Cybersecurity Companies
• CRN 100 list named BigID as one of the 20 Coolest Identity Access Management and Data Protection Companies (3 years running)
• DUNS 100 Best Tech Companies to Work for
• Top 3 Big Data and AI Vendors to Watch in the 2023 BigDATAwire Readers and Editors Choice Awards
• 2024 Inc. 5000 list for the 4th consecutive year!
• Shortlisted for the 2024 AI Awards in the category of Best Use of AI in Cybersecurity

At BigID, our team is the foundation of our success. Join a people-centric culture that is fast-paced and rewarding: you’ll have the opportunity to work with some of the most talented people in the industry who value innovation, diversity, integrity, and collaboration.

Senior IT Operations Engineer

Location: EST Time Zone
Compensation: $145,000-$165,000 + 13-15% bonus
Reports to: VP of IT

About the Role

BigID is hiring a Senior IT Operations Engineer to be the person teams turn to when a workflow crosses several tools, and nobody owns the gaps between them. You will build the automation that connects our systems, run the identity layer that controls access, and bring AI tooling to teams across the company.

This is an individual contributor role with a lot of room to lead. You will set your own technical direction, take projects from first request through rollout, and handle both planned project work and service desk escalations, so you will move between long builds and quick fixes.

We run internal IT with a DevOps mindset: systems are defined as code, changes ship through CI/CD, and repetitive work gets automated before it gets done by hand. Part of the global IT team is in Tel Aviv, so you will also be the North American contact for urgent requests, escalations, and production incidents when they are offline.

Most of your work happens with the Security, R&D, People, Support, Engineering, and GTM teams. You will work with them to understand a process that currently depends on someone copying data between tools, design the fix, build it, document it, and keep it running.

Example Projects

• Connecting Claude to a team’s tools, such as adding an MCP-backed data source to a Slack channel and deciding what access it gets

• Building an Okta Workflow that applies conditional access to strengthen our security posture

• Writing an AWS Lambda behind API Gateway to link two systems, defined in Terraform and deployed through GitLab CI/CD

• Diagnosing a failing Workato recipe caused by a malformed payload

• Tracing an email bounce to its root cause in Google Workspace

What You’ll Do

Automation and integration. You will own automation in AWS (Lambda, API Gateway) and GCP, defined as code with Terraform and deployed through GitLab CI/CD. You will also own Okta Workflows, our main automation engine, along with Workato, REST APIs, and webhooks. You will write scripts in Python or Go, support the integrations around Salesforce (Auth0, Slack, Jira, and our data warehouse), and set up backups for critical systems such as Jira, GitHub, and Okta Workflows. You will also look across IT processes to find and build new automation.

AI enablement. You will own the Claude rollout, including its connectors and Claude Tag in Slack. You will host and govern MCP servers, including the Cloudflare MCP portal, and support other AI tools teams request, such as Gemini and Copilot. You will review each new connector for security and access scope, and support internal agents.

Identity and access. You will own Okta and Auth0 administration, including Auth0 Actions, SCIM, MFA, device trust, and joiner, mover, and leaver processes. You will also connect Okta to access governance tools such as Entitle or Lumos.

Security and edge. You will own DNS, PKI, WAF, and rate limiting in Cloudflare, along with email authentication (SPF, DKIM, DMARC). You will support the CloudFront sites customers use, coordinate hosting changes with web agencies, and help the security team investigate findings.

Workplace tools and support. You will own Google Workspace, Jira, JSM, Confluence, Slack, and GitLab, and work alongside the owners of Zoom, Microsoft 365, and the wider SaaS stack. You will handle Tier 2 and Tier 3 service desk escalations, troubleshoot Windows and macOS endpoints, and manage vendor support cases. You will also support device-based access policies with the team that manages Iru Kandji and Intune.

Documentation and continuous improvement. You will write runbooks, architecture notes, and handoff documents so no system depends on one person’s memory. You will document and implement processes, maintain an accurate inventory of hardware, software, and resources, and manage IT vendor and contractor relationships. You will also look for weak points in our processes and update infrastructure so it scales, repeats reliably, and stays secure.

What You’ll Bring

• 7+ years in IT operations, DevOps, cloud engineering, or IAM engineering, including 2+ years automating IT processes. Equivalent experience will be considered.

• Hands-on Okta administration, including Okta Workflows, and experience with Auth0 custom logic such as Actions or rules

• Working knowledge of AWS (Lambda, API Gateway, CloudFront, IAM) and GCP (projects, IAM, BigQuery)

• Experience building integrations with Workato or a similar iPaaS tool

• Proficiency in at least one automation language (Python, Go, or Node.js) and experience with REST APIs and webhooks

• Experience with infrastructure as code (Terraform or Pulumi) and CI/CD pipelines, ideally GitLab

• Practical experience with Claude or comparable LLM tools, connectors, and MCP servers, with an understanding of their security implications

• Experience with Cloudflare (DNS, certificates, Workers) and strong Google Workspace administration

• A solid understanding of SSO (SAML, OIDC), MFA, SCIM, RBAC, DNS, and email authentication

• Familiarity with an MDM such as Iru Kandji or Intune, and experience troubleshooting Windows and macOS

• Strong analytical and problem-solving skills, with attention to detail

• Excellent written and verbal English, with strong documentation habits

• Discretion with confidential information

How You Work

You lead without direct reports. You set direction, see projects through to completion, and make decisions. You think about security in every process and treat identity as the front door, so you check what an app or connector can reach before approving it. You start from what a team is trying to accomplish and design automation around that goal. You bring an employee-experience mindset, so you treat every issue, large or small, with empathy and follow through. You are a generalist who enjoys learning new tools, and in a single week you might work across Okta, Auth0, AWS, GCP, Cloudflare, and Google Workspace.

Nice to Have

• Salesforce Apex and Flow

• Custom MCP servers or agent frameworks

• SQL, and experience with BigQuery, Snowflake, or Databricks

• Azure or other public cloud experience

• Access governance or SaaS security tools such as Entitle or Lumos

• SOC 2 or ISO 27001 experience, including vulnerability management

• HRIS-driven provisioning (for example, HiBob to Okta)

• Relevant certifications (AWS, GCP, Okta)

We’re committed to creating a culture of inclusion and equality – across race, gender, sexuality, and disability – where innovation and growth thrive, every voice is heard, and everybody belongs. Learn more about us here.

Job Candidate Privacy Notice

Must be able to exercise independent judgment with little or no oversight.

BigID is an E-Verify Participant.