Systems Engineer (m/f/d)

What You’ll Do

• We are looking for a Senior Systems Engineer , specializing in Identity and Access Management to join our Employee Tech organization and take ownership of our Okta platform across the company.
• Employee Tech is responsible for delivering a secure, frictionless digital workplace experience for all employees across Europe, Canada
• India . Identity is at the heart of that experience, from day-one onboarding, to role changes, to secure offboarding, to enabling access to hundreds of SaaS applications without slowing people down.
• In this role, you will be our primary Okta expert , responsible for designing, operating
• evolving our identity and access management landscape. A key part of the role will be helping us mature our identity strategy, including the future implementation of Okta Identity Governance (OIG) .
• You’ll also help us scale identity operations through automation (Okta Workflows or similar low-code tools). Okta expertise is the core requirement
• experience integrating Okta with endpoint management especially macOS/MDM (e.g., JAMF or similar) is a strong plus.
• Own and operate our Okta Workforce Identity platform end-to-end (SSO, MFA, Lifecycle Management, integrations) for the entire group.
• Act as the technical authority for identity and access management , supporting Employee Tech and security stakeholders.
• Design, maintain, and improve onboarding / offboarding / role-change access flows across our SaaS ecosystem.
• Lead the planning and implementation of Okta Identity Governance (OIG) , including access policies, certifications, and role models.
• Build and maintain secure, scalable integrations between Okta and key systems (e.g. HR systems, SaaS applications, device management).
• Partner closely with Employee Tech, Security, and Business stakeholders to balance security, compliance, and employee experience .
• Troubleshoot complex identity issues and act as an escalation point for authentication, access, and provisioning problems.
• Drive automation and standardization to reduce manual access requests and improve auditability, leveraging Okta Workflows (or similar low-code tools, e.g., n8n) to improve reliability and speed across joiner/mover/leaver processes.
• Contribute to documentation, standards, and knowledge sharing to reduce key-person dependency.
• What you’ll bring:
• Strong hands-on experience with Okta Workforce Identity in a medium to large enterprise environment.
• Practical experience with:
• SSO (SAML, OIDC)
• SCIM Provisioning
• MFA and conditional access policies
• Lifecycle Management
• Okta Workflows, or similar no-code/low-code automation experience
• Experience with in Identity Governance concepts (roles, access reviews, least privilege); hands-on Okta Identity Governance (OIG) experience is a major plus.
• Solid understanding of identity fundamentals, security best practices, and access control models.
• Experience integrating Okta with SaaS platforms and cloud applications.
• Demonstrated ability to use AI tools (e.g. ChatGPT) to accelerate problem-solving, system design, and documentation while applying strong engineering judgment and security awareness.
• Comfort working in a global, distributed environment across time zones.
• Clear, pragmatic communication skills you can explain identity concepts to both technical and non-technical audiences.
• Experience with JAMF and/or Slack is a bonus, not a requirement.
• Fluency in English is required; German is a plus.
• A culture of growth
• With over 50 nationalities represented, we’re proud to welcome people of all backgrounds to our growing community
• we’re always finding new ways to help people feel welcomed and included. Here, you’ll have the tools, training and support you need to work in a way that suits you, learn new skills and reach your potential.
• For a career where you can drive our business and shape your future, apply now.