Post a Job
All remote jobs
BigID

Senior IT Operations Engineer

Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move.

Apply for this job View company
Remote from
USA
Salary
USD 145k–165k / yr
Department
DevOps & Infrastructure
Employment
Full Time
Experience
Director
Published
Apply before
21 Nov 2026
Listing views
16
Application actions
1
Application toolkit

Make your next move.

Prepare your resume, explore your fit, and draft a cover letter for this opportunity.

AI Summary

The role, at a glance.

BigID is seeking a senior individual contributor to operate and automate internal IT systems across identity, cloud infrastructure, SaaS applications, and AI tooling. The role centers on Okta and Auth0 administration, AWS and GCP automation, Terraform-based infrastructure, CI/CD, integrations, and security controls. The engineer will also lead Claude and MCP connector enablement, assess access risks, and provide Tier 2/3 escalation support for workplace tools and endpoints. This position requires strong ownership because it spans long-term architecture projects, urgent incident response, documentation, and cross-functional collaboration with global teams. The role is remote for candidates on the US East Coast and serves as a North American escalation point when the Tel Aviv team is offline.

Role DNA

A quick view of the complexity, pace, ownership and collaboration implied by the job description.

Job Complexity

5/5
EasyHard

Pace & Pressure

5/5
RelaxedFast-paced

Autonomy Level

5/5
GuidedFull ownership

Communication Load

4/5
IndependentCollaborative
AI insightThis is a broad senior-level IT engineering role requiring deep hands-on ability across IAM, cloud, automation, security, AI integrations, SaaS administration, and endpoint troubleshooting. The engineer must independently set technical direction while balancing production incidents with complex cross-system projects.

Salary analysis

Estimated compensation compared with the broader US market for similar roles.

Estimated job median (per year)Market rate
$155,000
US market range (per year)$140k–$180k
AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. The employer states base compensation of USD 145,000–165,000 plus a 13–15% bonus. The yearly cadence is inferred from the annual-scale US professional salary range because no pay period is explicitly stated. Estimated US market compensation for a senior IT operations and IAM automation engineer is USD 140,000–180,000 per year, excluding bonus and equity.

Core skills

Skills and capabilities most closely associated with this opportunity.

IT operationsOkta administrationAuth0Identity and access managementAWS LambdaGoogle Cloud PlatformTerraformGitLab CI/CDPythonREST APIsWorkatoCloudflareGoogle WorkspaceSSO and SCIMAI tool governance
Sample interview questions
How would you design an automated joiner, mover, and leaver process using Okta and an HRIS?

I would define the HRIS as the authoritative source, map employment events to lifecycle states, and use SCIM and Okta Workflows for account provisioning, group assignment, entitlement changes, and deprovisioning. I would include exception handling, approvals for privileged access, audit logs, retries, and regular reconciliation reports to identify failed or orphaned accounts.

Describe how you would evaluate a new Claude or MCP connector before enabling it for employees.

I would identify the data sources and permissions the connector can access, validate its authentication model, inspect scopes and data-handling practices, and apply least-privilege access. I would involve security and data owners for sensitive systems, pilot the connector with a limited group, document approved use cases, and establish monitoring and a revocation process.

How would you troubleshoot a failing Workato recipe caused by a malformed payload?

I would review the recipe job history and error details, capture the inbound payload, and compare its structure and data types to the expected schema. I would isolate the failing field, validate upstream API or webhook changes, add input validation and defensive transformations, then test with representative payloads before deploying a documented fix.

What is your approach to deploying an AWS Lambda integration through Terraform and GitLab CI/CD?

I would define the Lambda, IAM roles, API Gateway resources, environment configuration, logging, and alerts in Terraform. The GitLab pipeline would run formatting, validation, security scanning, tests, plan review, and controlled apply stages, with separate environments and protected production approvals. I would also ensure secrets are managed outside source code and that rollback procedures are tested.

How do you balance urgent service desk escalations with strategic infrastructure work?

I use clear severity criteria, service ownership, and scheduled project capacity so critical incidents receive immediate attention without allowing routine requests to consume all engineering time. I document recurring issues, automate high-volume tasks, and use backlog reviews with stakeholders to communicate tradeoffs, priorities, and delivery timelines.

This analysis is generated from the job description. Salary estimates, role characteristics and sample answers are guidance, not employer-provided facts.
Opportunity details

About this role.

Who we are:

BigID is an innovative tech startup that focuses on solutions for data security, compliance, privacy, and AI data management. We’re leading the market in all things data: helping our customers reduce risk, drive business innovation, achieve compliance, build customer trust, make better decisions, and get more value from their data.

We are building a global team passionate about innovation and next-gen technology. BigID has been recognized for:

  • BigID named one of Forbes America’s Best Startup Employers 2026 – ranked #15 overall and #1 in Security
  • BigID named Hot Company in Artificial Intelligence and Machine Learning at the Global InfoSec Awards
  • Citizens JMP Cyber 66 List of Hottest Privately Held Cybersecurity Companies
  • CRN 100 list named BigID as one of the 20 Coolest Identity Access Management and Data Protection Companies (3 years running)
  • DUNS 100 Best Tech Companies to Work for
  • Top 3 Big Data and AI Vendors to Watch in the 2023 BigDATAwire Readers and Editors Choice Awards
  • 2024 Inc. 5000 list for the 4th consecutive year!
  • Shortlisted for the 2024 AI Awards in the category of Best Use of AI in Cybersecurity

At BigID, our team is the foundation of our success. Join a people-centric culture that is fast-paced and rewarding: you’ll have the opportunity to work with some of the most talented people in the industry who value innovation, diversity, integrity, and collaboration.

Senior IT Operations Engineer

Location: EST Time Zone
Compensation: $145,000-$165,000 + 13-15% bonus
Reports to: VP of IT

About the Role

BigID is hiring a Senior IT Operations Engineer to be the person teams turn to when a workflow crosses several tools, and nobody owns the gaps between them. You will build the automation that connects our systems, run the identity layer that controls access, and bring AI tooling to teams across the company.

This is an individual contributor role with a lot of room to lead. You will set your own technical direction, take projects from first request through rollout, and handle both planned project work and service desk escalations, so you will move between long builds and quick fixes.

We run internal IT with a DevOps mindset: systems are defined as code, changes ship through CI/CD, and repetitive work gets automated before it gets done by hand. Part of the global IT team is in Tel Aviv, so you will also be the North American contact for urgent requests, escalations, and production incidents when they are offline.

Most of your work happens with the Security, R&D, People, Support, Engineering, and GTM teams. You will work with them to understand a process that currently depends on someone copying data between tools, design the fix, build it, document it, and keep it running.

Example Projects

  • Connecting Claude to a team’s tools, such as adding an MCP-backed data source to a Slack channel and deciding what access it gets

  • Building an Okta Workflow that applies conditional access to strengthen our security posture

  • Writing an AWS Lambda behind API Gateway to link two systems, defined in Terraform and deployed through GitLab CI/CD

  • Diagnosing a failing Workato recipe caused by a malformed payload

  • Tracing an email bounce to its root cause in Google Workspace

What You’ll Do

Automation and integration. You will own automation in AWS (Lambda, API Gateway) and GCP, defined as code with Terraform and deployed through GitLab CI/CD. You will also own Okta Workflows, our main automation engine, along with Workato, REST APIs, and webhooks. You will write scripts in Python or Go, support the integrations around Salesforce (Auth0, Slack, Jira, and our data warehouse), and set up backups for critical systems such as Jira, GitHub, and Okta Workflows. You will also look across IT processes to find and build new automation.

AI enablement. You will own the Claude rollout, including its connectors and Claude Tag in Slack. You will host and govern MCP servers, including the Cloudflare MCP portal, and support other AI tools teams request, such as Gemini and Copilot. You will review each new connector for security and access scope, and support internal agents.

Identity and access. You will own Okta and Auth0 administration, including Auth0 Actions, SCIM, MFA, device trust, and joiner, mover, and leaver processes. You will also connect Okta to access governance tools such as Entitle or Lumos.

Security and edge. You will own DNS, PKI, WAF, and rate limiting in Cloudflare, along with email authentication (SPF, DKIM, DMARC). You will support the CloudFront sites customers use, coordinate hosting changes with web agencies, and help the security team investigate findings.

Workplace tools and support. You will own Google Workspace, Jira, JSM, Confluence, Slack, and GitLab, and work alongside the owners of Zoom, Microsoft 365, and the wider SaaS stack. You will handle Tier 2 and Tier 3 service desk escalations, troubleshoot Windows and macOS endpoints, and manage vendor support cases. You will also support device-based access policies with the team that manages Iru Kandji and Intune.

Documentation and continuous improvement. You will write runbooks, architecture notes, and handoff documents so no system depends on one person’s memory. You will document and implement processes, maintain an accurate inventory of hardware, software, and resources, and manage IT vendor and contractor relationships. You will also look for weak points in our processes and update infrastructure so it scales, repeats reliably, and stays secure.

What You’ll Bring

  • 7+ years in IT operations, DevOps, cloud engineering, or IAM engineering, including 2+ years automating IT processes. Equivalent experience will be considered.

  • Hands-on Okta administration, including Okta Workflows, and experience with Auth0 custom logic such as Actions or rules

  • Working knowledge of AWS (Lambda, API Gateway, CloudFront, IAM) and GCP (projects, IAM, BigQuery)

  • Experience building integrations with Workato or a similar iPaaS tool

  • Proficiency in at least one automation language (Python, Go, or Node.js) and experience with REST APIs and webhooks

  • Experience with infrastructure as code (Terraform or Pulumi) and CI/CD pipelines, ideally GitLab

  • Practical experience with Claude or comparable LLM tools, connectors, and MCP servers, with an understanding of their security implications

  • Experience with Cloudflare (DNS, certificates, Workers) and strong Google Workspace administration

  • A solid understanding of SSO (SAML, OIDC), MFA, SCIM, RBAC, DNS, and email authentication

  • Familiarity with an MDM such as Iru Kandji or Intune, and experience troubleshooting Windows and macOS

  • Strong analytical and problem-solving skills, with attention to detail

  • Excellent written and verbal English, with strong documentation habits

  • Discretion with confidential information

How You Work

You lead without direct reports. You set direction, see projects through to completion, and make decisions. You think about security in every process and treat identity as the front door, so you check what an app or connector can reach before approving it. You start from what a team is trying to accomplish and design automation around that goal. You bring an employee-experience mindset, so you treat every issue, large or small, with empathy and follow through. You are a generalist who enjoys learning new tools, and in a single week you might work across Okta, Auth0, AWS, GCP, Cloudflare, and Google Workspace.

Nice to Have

  • Salesforce Apex and Flow

  • Custom MCP servers or agent frameworks

  • SQL, and experience with BigQuery, Snowflake, or Databricks

  • Azure or other public cloud experience

  • Access governance or SaaS security tools such as Entitle or Lumos

  • SOC 2 or ISO 27001 experience, including vulnerability management

  • HRIS-driven provisioning (for example, HiBob to Okta)

  • Relevant certifications (AWS, GCP, Okta)

We’re committed to creating a culture of inclusion and equality – across race, gender, sexuality, and disability – where innovation and growth thrive, every voice is heard, and everybody belongs. Learn more about us here.

Job Candidate Privacy Notice

Must be able to exercise independent judgment with little or no oversight.

BigID is an E-Verify Participant.

Apply now >

This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.

Next step

Apply now.

Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.

Did you apply?Let us know, and we’ll help you track your application.

Continue on the employer website

Protect your personal information and never pay to secure an interview or job offer. .

Log in to save
One quick step before you apply

Sign in to continue.

Sign in or create a free account to continue to the employer's application.

Applying is free. After signing in, return to this job and select Apply Now.
Add alert
Job Search Safety Tips
Here are some tips to help you search and apply for jobs safely:
Watch out for suspicious jobs Don't apply for jobs that offer high pay for little work or offer to hire you without an interview. Read more ›
Check the employer's profile Make sure you're applying for a trustworthy job by visiting the employer's profile and learning more about them. Read more ›
Protect your information Don't share personal details like your bank account or government-issued ID on suspicious websites or messengers. Read more ›
Report jobs that feel unsafe If you see a job that seems misleading, inappropriate or discriminatory, report it for going against our policies and we'll review it.
Share this job
Jobs Talent AI Tools Salaries
Menu