Senior IT Systems Engineer

About Upsun (formerly Platform.sh)

Upsun is the cloud application platform humans and robots love. It is built for today’s hybrid teams, where AI agents write and test code and humans focus on solving the problems that really matter. Developers, DevOps engineers, and platform teams use Upsun to build, ship, and scale confidently without wrestling with backend infrastructure. We give you your time back. You get:

Predictable performance, even at scale

Secure, compliant environments by default

Real-time observability and profiling built in

Cloning, configuration, and provisioning in seconds

AI-ready features that plug directly into your stack

The name says it all. "Up" means uptime, reliability, and acceleration. "Sun" reflects our follow-the-sun-support, a 24x7, globally distributed support team keeping the lights on while you rest. Our core belief is that software should power brighter solutions and greater innovation.

Upsunners are a remote, global workforce, and we thrive in a multicultural team. We are committed to open source and an open, welcoming environment. Our team spans the globe and the experience spectrum.

What's our commonality, our cultural fabric? A curious spirit and a thirst for knowledge; an eagerness for innovative ideas and cultures. We believe we can build anything together in an environment that frees you to do your best work.

Our values:

🌿 We make a positive impact.

✨ We aim for the stars.

💚 We care for each other.

Impact of a Senior IT Systems Engineer

• As a Senior IT Engineer, you help shape and improve the systems that our 250+ person remote company relies on every day. Your work spans identity and access, Google Workspace, device management, and our wider SaaS environment.
• Reporting to the IT Director, you take ownership of complex problems and lead improvements from initial assessment through delivery. You identify what needs attention, recommend priorities, and make thoughtful decisions that balance security, reliability, and employee experience. You also help the team build stronger practices through clear documentation, shared knowledge, and practical guidance.

What to expect

Identity platform: Improve our identity and access services, with Okta at the core. This includes single sign-on, automated account provisioning, multi-factor authentication, access policies, and emergency access. Work with IT and Security to make access secure, consistent, and straightforward.

Google Workspace: Lead the administration and improvement of our Google Workspace environment, including users, groups, Gmail, Drive, shared drives, and security settings. Improve how people collaborate, manage sharing and access, and keep our configuration aligned with business needs.

Device management: Help lead the rollout and ongoing development of JumpCloud and our device management practices across macOS, Windows, and Linux. Define and implement device configurations, security policies, software deployment, and onboarding processes in partnership with IT Operations and Security.

Automation and employee lifecycle: Design and improve onboarding, role changes, and offboarding across identity, devices, and SaaS tools. Use tools such as Okta Workflows, n8n, Python, and APIs to reduce manual work and make processes more reliable.

Continuous improvement: Assess our current systems, identify gaps, and turn findings into practical improvements. Investigate complex issues across connected services, address root causes, and follow through until changes are working well.

SaaS administration and governance: Administer our core internal tools and help evaluate new applications. Establish clear practices for application setup, integrations, access requests, approvals, and access reviews.

Security and compliance: Partner with Security and the Risk and Audit team to implement and maintain controls across identity, Google Workspace, devices, and SaaS tools. Automate evidence collection where practical to support ISO 27001 and SOC 2 Type 2.

Project delivery and mentoring: Lead projects from scoping and technical design through rollout and handover. Coordinate dependencies, communicate risks and progress, and help colleagues grow through documentation, reviews, and knowledge sharing.

What you bring

Broad IT engineering experience: You have hands-on experience across identity, collaboration tools, endpoint management, and SaaS administration. You understand how these systems connect and can troubleshoot problems across them.

Depth in a core area: You bring strong expertise in at least one of Okta, Google Workspace, or JumpCloud, along with the ability to work across the others. We welcome different strengths; you do not need to be equally expert in all three.

Device management deployment: You have helped deploy or significantly improve an MDM or endpoint management platform. You can turn security and operational requirements into workable configurations, test them, and roll them out with minimal disruption.

Automation and scripting: You build reliable automation using workflow tools, APIs, webhooks, and Python or a comparable scripting language. You consider error handling, monitoring, and ongoing maintenance.

A track record of improvement: You can share examples of systems or processes you assessed, improved, and delivered, with clear results for employees or the IT team.

Proactive judgment and ownership: You work independently, make sound technical decisions, and know when to involve others. You can turn an unclear problem into a practical plan, explain trade-offs, and take responsibility for the outcome.

Security and compliance awareness: You have implemented controls such as access reviews, secure configurations, or device policies, and understand how to document and demonstrate that they work. Experience supporting ISO 27001 or SOC 2 is valuable.

Clear communication and collaboration: You work effectively in a fully remote team and communicate clearly with technical and non-technical colleagues across cultures. You share knowledge and help others become more effective.

Experience: Typically six or more years in IT engineering, systems administration, identity, or endpoint management, with increasing responsibility for technical decisions and project delivery. Equivalent experience matters more than a specific number of years.

Bonus points

Experience supporting mergers and acquisitions, including assessing and integrating identity systems, Google Workspace environments, devices, or SaaS tools.

Experience in a developer-heavy or engineering-led company.

Experience supporting both ISO 27001 and SOC 2 Type 2, including automated evidence collection.

Professional proficiency in French.

Where we hire

At Upsun, remote work isn't just a trend - it's our foundation. The freedom of remote work with the support of a diverse, global team has been our successful model for over a decade. Our culture celebrates flexibility and collaboration, and while we have team members in over 30 countries around the globe, we are currently focused on hiring for this role in Canada, France, Germany, Spain, and the United Kingdom . Although we’re unable to provide visa sponsorship at this time, we welcome applications from all qualified candidates who are legally authorized to work in these countries.

How we hire

We know that a great hire won’t meet every requirement that we’ve outlined. If you can see yourself elevating the team, we want to hear your story. Few of us would be here had we not taken a chance.

You can expect 4 interviews on Google Meet to follow the order below. Should you successfully move through the entire process you will have the opportunity to meet with a variety of Upsunners. Our goal is to ensure you can make the most informed decision on whether this role, and our culture aligns with what you’re looking for in your future working environment.

45 Minutes with Talent Acquisition

60 Minutes with Hiring Manager (Di