[![Image]() Meet Jobicy Copilot — free AI autofill for job applications + remote job alerts ›](#) [All remote jobs](https://jobicy.com/jobs.md)Open role[![UpGuard logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/474a12c7-221.png)](https://jobicy.com/company/upguard.md)Remote opportunity at[UpGuard](https://jobicy.com/company/upguard.md) # Senior Systems Engineer Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move. [Apply for this job](#job-application)[View company](https://jobicy.com/company/upguard.md)Share14 Sep 2026Published31Listing views3Application actions14 Oct 2026Apply before Opportunity details ## About this role. AI SummaryUpGuard is seeking a Senior Systems Engineer to own and evolve its internal technology platform, with responsibility for identity, endpoint, SaaS, and secure-access operations. The role centers on administering Google Workspace, Okta, Kandji/Jamf, Cloudflare Zero Trust, and a macOS/ChromeOS fleet while reducing operational toil through automation. This engineer will act as a senior escalation point, incident commander, and technical owner for platform reliability, documentation, change control, and self-service capabilities. Success requires strong independent judgment, practical security fundamentals, cross-functional collaboration with People/HR, and a demonstrated ability to eliminate recurring operational problems. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 4/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 4/5IndependentCollaborative AI insightThis is a senior hands-on ownership role spanning identity, fleet management, Zero Trust networking, automation, incident leadership, and compliance support. It requires sound technical judgment and the ability to improve systems proactively rather than merely resolve tickets. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job medianMarket rate$155,000US market range$130k–$185k0$204k AI insightNo salary is disclosed for this position; the posting only mentions a US$1,500 annual Learning & Development allowance, which is not wages. Estimated US-market annual base salary for a senior systems/platform engineer with enterprise identity, endpoint management, Zero Trust, and automation responsibilities is approximately $130,000-$185,000 USD, with a midpoint estimate of $155,000 USD. Actual compensation may vary by hiring country, location, equity, and total benefits. ## Core skills Skills and capabilities most closely associated with this opportunity. [Google Workspace](https://jobicy.com/jobs?search_keywords=Google%20Workspace.md)[Okta](https://jobicy.com/jobs?search_keywords=Okta.md)[Identity and Access Management](https://jobicy.com/jobs?search_keywords=Identity%20and%20Access%20Management.md)[SSO/SAML](https://jobicy.com/jobs?search_keywords=SSOSAML.md)[SCIM Provisioning](https://jobicy.com/jobs?search_keywords=SCIM%20Provisioning.md)[macOS Fleet Management](https://jobicy.com/jobs?search_keywords=macOS%20Fleet%20Management.md)[Kandji/Jamf](https://jobicy.com/jobs?search_keywords=KandjiJamf.md)[Cloudflare Zero Trust](https://jobicy.com/jobs?search_keywords=Cloudflare%20Zero%20Trust.md)[Python Automation](https://jobicy.com/jobs?search_keywords=Python%20Automation.md)[Incident Management](https://jobicy.com/jobs?search_keywords=Incident%20Management.md) Sample interview questionsDescribe an automation you built that permanently removed a repetitive IT operations task.I would explain the original manual workflow, its frequency and failure points, then describe the API-driven automation I implemented, including validation, logging, exception handling, and ownership documentation. I would quantify the resulting reduction in tickets, turnaround time, or error rate. How would you improve a joiner-mover-leaver process involving Google Workspace, Okta, MDM, and the People team? I would map the current process and identify authoritative data sources, approval points, and manual handoffs. I would use HR events to trigger role-based provisioning through SCIM and APIs, automate device and group assignment, implement timely deprovisioning, and add audit reporting for exceptions and completion status. How do you troubleshoot a complex Cloudflare Zero Trust access issue? I would first scope the affected users, devices, application, and time window, then review identity claims, device posture, access-policy evaluation, tunnel health, DNS resolution, and relevant Cloudflare logs. I would isolate whether the issue is caused by identity, endpoint posture, network routing, policy logic, or the application, communicate status clearly, and document the permanent corrective action. Tell us about your approach to leading a platform incident. I establish an incident channel, confirm impact and severity, assign clear investigation and communications roles, and keep stakeholders updated at a predictable cadence. After restoration, I lead a blameless postmortem that identifies contributing factors, assigns actionable follow-ups, and tracks them through closure. How do you decide whether a security control is appropriately balanced against operational friction? I assess the risk being mitigated, the likelihood and impact of misuse, available compensating controls, and the measured employee impact. I prefer identity- and device-aware controls with exceptions that are time-bound and auditable, and I present a recommendation with trade-offs rather than treating every restrictive control as automatically beneficial. ### Who are we? At UpGuard, we are replacing manual security bottlenecks with AI-driven precision. Fresh off a US$75M Series C, we are scaling our infrastructure to process 100 billion risk signals daily. This isn’t just growth; it’s a total reimagining of how the world manages cyber risk. We build the Cyber Risk Posture Management (CRPM) platform that security teams actually love. By integrating security ratings, threat intel, and agentic AI, we empower organisations to stay ahead of an ever evolving attack surface. We aren’t just building another tool; we’re defining a category. We provide the autonomy to ship world-class technology and the resources to do it at a global scale. Where does this role fit in? Build, operate, and strategically evolve the technology platform that enables every UpGuardian to work securely, efficiently, and with minimal friction. You’ll own the hands-on administration and optimization of our core IT stack: identity systems, endpoint engineering, and SaaS platforms. Your main focus will be automating repetitive operational tasks, establishing system performance and compliance metrics, and maintaining a secure-by-default infrastructure. This is a platform engineering and ownership role above all else, with the added responsibility of serving as the senior escalation point for complex day-to-day issues. We don’t want you stuck in a queue, so if you see the same manual task three times and immediately design an automated, self-service fix to permanently remove it, you’ll fit right in. Security is an outcome of excellent operational engineering here, not the primary function of the role. What will you do? Platform, Identity & Fleet Operations * Drive end-to-end shared platform ownership across Google Workspace, Okta, and enterprise MDM (Kandji/Jamf) for our macOS and ChromeOS fleet. You’ll architect robust SSO/SAML integrations, optimize SCIM provisioning, design scalable role hierarchies, and establish proactive OS lifecycle and patching strategies that keep our systems secure by default. * Optimise our global joiner-mover-leaver process. Find the steps that still need a human, automate them, and tighten the handoffs with the People Team. Keep asset records and endpoint compliance reporting accurate, and administer the SaaS estate against the governance model. Zero Trust & Secure Access * Take operational ownership of our Cloudflare Zero Trust environment across ZTNA, Secure Web Gateway, DNS filtering, secure tunnels, and identity and device-aware access policies. Tune policies, and troubleshoot the edge access problems that get escalated past everyone else. * Own the migration of remaining internal applications off legacy network access as a workstream, and flag where a control is creating friction that isn’t buying us anything. Automation & Internal Tooling * Build production-grade tooling using REST APIs, Python, Apps Script, and n8n that permanently removes manual work. * Propose what should be automated next, based on what you’re seeing in the queue. Service Operations * Take incident command for platform incidents on rota. Coordinate the response, keep people informed, drive to resolution, then write the postmortem and see the actions through to closure. * Raise and execute changes through our change process, including risk assessment and rollback. Investigate recurring incidents to root cause and own the resulting problem records. * Keep the runbooks, knowledge base, and service catalogue entries accurate for the systems you run. Where you find a gap in the practice, propose the fix and pilot it on your own systems. Reliability & Self-Service * Own zero-touch provisioning, endpoint compliance enforcement, and fleet health monitoring. * Build the self-service options and self-healing behaviour that make routine requests stop reaching the team. Embedded Security Engineering * Implement and maintain endpoint hardening and baseline configurations, and keep them current. Act as technical responder on security incidents and support the evidence side of audit and compliance work. * Design security into platform changes as you make them rather than adding it afterwards. Where you find operational risk, surface it with a recommendation attached. Raising the Level Around You * Mentor your colleagues on the platforms and tools you know best. Where you fix something, leave documentation behind so the next person doesn’t need you. What will you bring? You won’t have all of this. Tell us which parts you’d be learning, and we’ll tell you honestly whether that works. * SaaS & Identity Depth: Several years administering Google Workspace or Microsoft 365 alongside an enterprise IdP (Okta, Entra) and MDM at organisational scale. SSO, SAML, SCIM, DNS, and certificates as things you’ve configured and debugged. * Hands-on Zero Trust Experience: Direct experience configuring and optimising ZTNA, Secure Web Gateways, or modern edge access controls (Cloudflare Zero Trust, Zscaler, Netskope, Tailscale, Entra Private Access). Enough to take operational ownership of a Cloudflare estate and troubleshoot complex edge access issues. * Automation Capability: Production-grade scripts or code (Python, Apps Script, Terraform) integrated against REST APIs. Point us at internal tools or pipelines you’ve built that permanently eliminated operational work. * Fleet Management at Scale: Managing macOS at scale, building zero-touch deployment workflows, and enforcing endpoint compliance baselines. * Process Optimisation: You’ve taken a joiner-mover-leaver or similar cross-functional process and measurably reduced the manual steps in it, working with People or HR to do it. * Operational Discipline: Experience running incidents, working within a change process, and authoring technical documentation that teams rely on. * Security Fundamentals: Endpoint hardening, identity security, and network access controls, with the judgment to make proportionate risk recommendations and know which calls aren’t yours. * Systems Improvement Instinct: A track record of eliminating classes of problem rather than resolving individual tickets. * Independent Judgment: Enough to keep things running for a couple of weeks without your manager, and enough to know which decisions should wait for them. What’s in it for you? * Monthly Lifestyle subsidy: Use this for financial, physical, and mental well-being * WFH set-up allowance: To ensure you have the right environment to work in, we will help you get set up within your first 3 months at UpGuard * $1500 USD annual Learning & Development allowance: To support your career development, all team members will be able to expense development opportunities against this allowance * Annual leave: PTO plus two additional UpGuardian leave days to give you time to recharge your batteries. * 18 weeks paid Parental Leave: Irrespective of parenting role * Personal Leave Allowance: This includes sick & carer’s leave * Fully remote working environment: While we have physical offices in Sydney & Hobart, we do not mandate compulsory attendance * Top-spec hardware: All team members will be provided with top-spec laptops for their role * Generative AI subsidy: UpGuard provides paid subscriptions for all team members to access generative AI tools to support their work UpGuard is a Certified Great Place to Work® in the US, Australia, UK and India, establishing its position as a leading global technology employer. 99% of team members agree that UpGuard is a great place to work! Apply now to find out why! As an Equal Employment Opportunity and Affirmative Action Employer, qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Please Note: Not all roles can be performed from the United States. Please check your specific job listing to confirm its advertised location. If the role you are applying for is listed as based in the US, we are currently only able to support hiring in the following locations: CA, CO, FL, IL, LA, MA, MD, MO, OR, PA, TX, WA, and DC. Before starting work with us, you will need to undertake a national police history check and reference checks. Also, please note that at this time, we cannot support candidates requiring visa sponsorship or relocation. Show more [Apply now >](https://jobicy.com/jobs/153272-senior-systems-engineer.md) > Annual salary information is not provided for this position. Explore salary ranges for similar roles in our [Salary Directory ›](https://jobicy.com/salaries.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. Matched by job category10 related opportunities[DevOps & Infrastructure](https://jobicy.com/categories/admin.md) [Browse all jobs](https://jobicy.com/jobs.md) * ![Synthesia logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/c69aad11-221.webp) Synthesia Sep 14 ### [Principal ML Platform Engineer](https://jobicy.com/jobs/153242-principal-ml-platform-engineer.md) Synthesia is the world’s leading AI video platform for business, used by over 90% of the Fortune 100. Founded in 2017, the company is headquartered in London, with offices and… * ![Playson logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/6f266d9c-221-1.png) Playson Sep 14 ### [Senior Site Reliability Engineer](https://jobicy.com/jobs/153228-senior-site-reliability-engineer-3.md) About the Role We’re looking for a Senior Site Reliability Engineer to join our Infrastructure Squad – a lean & senior team where ownership is high and expectations are even… * ![Nebius logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/d90c0566-221.webp) Nebius Sep 14 ### [Senior System Engineer (Virtual Private Cloud Team)](https://jobicy.com/jobs/150590-senior-system-engineer-virtual-private-cloud-team.md) About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from… * ![Phantom logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/3d0a3a49-221.png) Phantom Sep 12 ### [Staff Software Engineer (SRE)](https://jobicy.com/jobs/153134-staff-software-engineer-sre.md) Phantom is on a mission to connect the world to the freedom of open markets. Tens of millions of people all over the world use Phantom to access global markets… * ![Phantom logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/3d0a3a49-221.png) Phantom Sep 12 ### [Staff DevOps Engineer (Platform)](https://jobicy.com/jobs/153130-staff-devops-engineer-platform.md) Phantom is on a mission to connect the world to the freedom of open markets. Tens of millions of people all over the world use Phantom to access global markets… * ![Nebius logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/d90c0566-221.webp) Nebius Sep 12 ### [Senior Site Reliability Engineer (Hardware Automation)](https://jobicy.com/jobs/149057-senior-site-reliability-engineer-hardware-automation.md) About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from… * ![Webflow logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/01/b75fa7e9-221.jpg) Webflow Sep 12 ### [Senior Infrastructure Engineer](https://jobicy.com/jobs/153105-senior-infrastructure-engineer-3.md) Webflow is the agentic web marketing platform for modern marketing teams, helping organizations build, manage, and optimize high-performing web experiences that drive predictable growth and strengthen brand trust. Building at… * ![Rithum logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/fe3986d8-221-1.jpeg) Rithum Sep 12 ### [IT Automation Engineer – Business Technology (Central/Mountain Time – US)](https://jobicy.com/jobs/153100-it-automation-engineer-business-technology-central-mountain-time-us.md) Rithum™ is the world’s most trusted commerce network, accelerating how brands, suppliers, and retailers work together to deliver seamless e-commerce experiences. We provide an unmatched platform for brands and retailers,… * ![Remote logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/63a88d3a-221-1.png) Remote Sep 11 ### [Engineering Manager, SRE](https://jobicy.com/jobs/153081-engineering-manager-sre.md) About Remote Remote is solving modern organizations’ biggest challenge – navigating global employment compliantly with ease. We make it possible for businesses of all sizes to recruit, pay, and manage… * ![Ashby logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/63864ee6-221.png) Ashby Sep 11 ### [Staff Platform Engineer – UK](https://jobicy.com/jobs/153062-staff-platform-engineer-uk.md) We’re looking for a curious, rigorous, problem-hungry platform software engineer (who codes!) to carry the ball as we bring Ashby to the big leagues. Ashby builds software that lets talent…