# Senior Systems Engineer, IAM Operations

**Company:** [Crusoe](https://hotfix.jobs/companies/crusoe)
**Location:** San Francisco, CA
**Role:** IT Support
**Salary:** $165k – $200k/yr
**Experience:** 5+ years
**Skills:** Okta, identity and access management, lumos, okta workflows, SCIM, REST APIs, Python, PowerShell, Google Workspace, Slack, SAML, OIDC, Terraform, RBAC, multifactor authentication
**Posted:** 2026-08-11

> Own day-to-day IAM operations, including Okta administration, user lifecycle automation, SaaS access governance, and Tier 2 escalation support. The role requires 5+ years of systems, IT operations, or IAM experience and strong skills in automation, APIs, and scripting.

## Job Description

## Responsibilities
- Own end-to-end user lifecycle management in Okta, including onboarding, offboarding, hires, rehires, and contractor conversions.
- Manage sensitive offboarding scenarios, including closing lingering user sessions on personal devices across Slack, Google Workspace, and other platforms.
- Administer core SaaS applications such as Slack, Claude, Port.io, and DocuSign, including user provisioning, role-based access control (RBAC), and automated license reclamation.
- Build access request workflows and approval automations in an identity governance platform to streamline access delivery and enforce least-privilege principles.
- Execute and support periodic user access reviews and entitlement certifications across core SaaS platforms.
- Administer Okta security features, including FastPass multifactor authentication (MFA) and device trust.
- Build automations for application provisioning and repetitive IAM tasks using Okta Workflows and no-code platforms, including custom SCIM solutions where native support is unavailable.
- Train Service Desk team members on security policies, IAM best practices, and major system changes.
- Act as a Tier 2 escalation point for complex access, authentication, and application integration issues.
- Partner with the API team to define requirements for custom automations.
- Troubleshoot authentication failures, API errors, and access-related incidents using REST APIs and scripting.
- Document SOPs and runbooks for consistent, scalable IAM operations.

## Requirements
- 5+ years of experience in Systems Engineering, IT Operations, or Identity and Access Management.
- Hands-on Okta administration experience.
- Experience with identity governance platforms such as Lumos, Okta Identity Governance, or similar frameworks.
- Experience managing user lifecycle automation, including onboarding, offboarding, hires, rehires, and contractor conversions.
- Familiarity with Okta FastPass MFA and device trust.
- Familiarity with SCIM provisioning, including custom solutions.
- Working knowledge of no-code or low-code automation tools, particularly Okta Workflows.
- Strong troubleshooting skills across authentication issues and REST APIs.
- Experience with scripting languages such as Python or PowerShell for bulk operations.
- Experience supporting enterprise environments including Google Workspace and Slack.
- Clear communication skills and comfort partnering with API, engineering, and Service Desk teams.

## Nice-to-Haves
- Exposure to identity governance platforms such as Lumos or Opal.
- Experience with OIDC or SAML application integrations.
- Terraform or other infrastructure-as-code experience.
- Okta Administrator or Consultant certification.

## Compensation and Benefits
- Compensation range of $165,000 - $200,000 plus bonus.
- Restricted Stock Units included in all offers.
- Paid time off, paid holidays, and leave of absence programs.
- Comprehensive health, dental, and vision insurance.
- Employer HSA contributions.
- Paid parental leave.
- Paid life insurance and short- and long-term disability coverage.
- Professional development and tuition reimbursement.
- Mental health and wellness support.
- Commuter benefits and cell phone stipend.
- 401(k) retirement plan with company match up to 4% of salary.
- Volunteer time off, global travel insurance, emergency assistance, daily meal allowance, and location-specific perks.

## Similar roles

- [Senior IT Manager](https://hotfix.jobs/jobs/5626b8df-4c22-4bbf-84e7-49cd347839fd) - Pomelo Care - Remote - $165k – $195k/yr
- [IT Applications Support Analyst](https://hotfix.jobs/jobs/8a3edfc5-96bb-4751-8651-2c4a4f05d6c0) - Gusto - San Francisco, CA - $169k – $189k/yr
- [Senior IT Systems Engineer](https://hotfix.jobs/jobs/c02e025c-4c9c-42a5-8c18-65a209a3f90c) - Garner Health - New York, NY - $153k – $190k/yr
- [Manager, Enterprise Applications](https://hotfix.jobs/jobs/89c52671-fb1f-47ba-ad94-7293f050514f) - Zoox - Foster City, CA - $177k – $245k/yr
- [Senior Manager, IT](https://hotfix.jobs/jobs/b3d7885e-8dcc-4703-b5db-58ed4ef1504e) - Checkr - San Francisco, CA - $179k – $211k/yr

**Apply:** https://hotfix.jobs/jobs/e571e327-0e22-43d4-bafc-dea710a1e3ad
**Canonical:** https://hotfix.jobs/jobs/e571e327-0e22-43d4-bafc-dea710a1e3ad