Description
About the Role:
You'll be the technical SME for our core IT platforms. As a senior individual contributor, you’ll own the architecture, configuration and health of the platforms every Tidean relies on. You’ll make the key design decisions, keep the platforms secure, well governed and documented, and drive improvements from design through to rollout.
The major platforms in scope are:
- Google Workspace: identity and access policies, DLP, email security and ChromeOS management
- Netskope (SSE/SASE): SWG, CASB, DLP and ZTNA
- Jamf Pro and Microsoft Intune: zero-touch provisioning, compliance, patching and encryption for the Mac and Windows fleet
- Atlassian: Jira Service Management as our ITSM platform and CMDB, plus Jira and Confluence
Responsibilities:
- Establish configuration as code mentality within the team: manage platform config through Terraform, Git and CI/CD where the tools allow it, and script everything else.
- Own the engineering side of endpoint security and compliance controls, including EDR integrations, OS and application patching, vulnerability remediation, encryption, device compliance and security baselines.
- Build monitoring, reporting and operational health metrics for workplace platforms, using APIs and automation to identify configuration drift, failures, capacity issues and emerging operational risks before they become incidents.
- Own technical design and architecture decisions for Workplace Technology, including platform standards, technical debt, vendor evaluation, proof of concepts, migration strategy and lifecycle planning.
- Act as L3 escalation for complex incidents, carry out root-cause analysis, and turn what we learn into lasting fixes.
- Support audit and compliance work (e.g. ISO 27001, SOC 2, FCA and DORA requirements) with evidence, controls and documentation.
- Mentor engineers and service desk colleagues, raise the team's technical bar, and write the runbooks and Confluence documentation that let others work independently.
What We're Looking For:
- Extensive experience with CaC (Configuration as Code) on SaaS platforms.
- Confident scripting in Python, Bash and PowerShell, and comfort working with REST APIs.
- 7+ years in IT or workplace engineering, including at least 3 years at senior level in a cloud-native, SaaS-first organisation of 1,000+ users.
- Deep hands-on Google Workspace administration at enterprise scale, including automation with GAM/GAMADV-XTD3, the Admin SDK APIs or Apps Script.
- Production experience designing and running Netskope or a comparable SSE/SASE platform (Zscaler, Prisma Access, Cloudflare One), including ZTNA and DLP.
- Strong experience with both Jamf Pro and Microsoft Intune, running a mixed Mac and Windows fleet end to end.
- Solid grasp of identity and access: SAML, OIDC, SCIM, MFA, conditional access and device trust.
- Clear, confident communication with engineers, stakeholders and non-technical users alike.
Benefits:
- The gross monthly salary for this position ranges from 6,266€ to 8,812€, depending on your skills, and experience.
- Private Health Insurance
- 25 days paid annual leave
- 3 paid days off for volunteering or L&D activities
- Parental Leave days
- Family-Friendly Leave
- Personal L&D budget in the amount of 500 EUR per year
- Mental wellbeing platform Plumm
- WFH equipment allowance
- Sabbatical Leave
- Share options
- Team Events