IT Engineer
Thunes · Barcelona, Spain · 1mo ago
Mid levelOn-siteIT & Tech Support
About the Role
We are looking for a hands-on IT Systems Administrator to join our Internal IT team in a fast-growth environment. In this role, you will operate at the intersection of startup speed and banking-grade security.
You won't just be resolving tickets; you will actively build and refine our identity architecture, design automated lifecycle workflows (Joiner/Mover/Leaver), and author device compliance policies across our fleet.
Responsibilities
We are looking for a hands-on IT Systems Administrator to join our Internal IT team in a fast-growth environment. In this role, you will operate at the intersection of startup speed and banking-grade security.
You won't just be resolving tickets; you will actively build and refine our identity architecture, design automated lifecycle workflows (Joiner/Mover/Leaver), and author device compliance policies across our fleet.
Responsibilities
- Identity & Access Management: Administer Google Workspace as our master source of identity (Primary IdP) for authentication and access control.
- Workflow & Provisioning Automation: Design, build, and maintain automated lifecycle management (JML) using Okta Workflows and SCIM provisioning to downstream apps (Slack, Jira, Zoom, 1Password, etc.).
- MDM Policy & Configuration: Author, deploy, and audit system configuration profiles and compliance policies in JumpCloud across both macOS and Windows fleets.
- Service Desk & Escalations: Provide high-UX, tier-2/3 support via Jira Service Management (JSM) and Slack, using ticket data to identify root causes and automate repeat issues.
- Security & Compliance Enforcement: Maintain Zero Trust access controls, enforce SOC2/ISO 27001 compliance standards, and manage endpoint protection (Sophos) with minimal user friction.
- Global Standardization: Work closely with the team to author knowledge base documentation in Confluence, standardizing IT operations across international offices.
- Proactive Maintenance: Monitor IT infrastructure, audit permissions, and recommend tooling or API-first improvements to eliminate manual workload.
Professional Experience & Qualifications
- Minimum 5 years of relevant Internal IT experience in a fast-paced, scale-up, or regulated Fintech environment.
- Hands-on Okta Expertise: Proven experience building workflows with Okta Workflows and managing SCIM/LCM app integrations.
- Google Workspace Administration: Deep knowledge of GWS as a primary IdP, including domain security settings, OU management, and admin workflows.
- MDM Policy Creation: Direct experience creating, testing, and deploying compliance baselines, FileVault/BitLocker policies, and configuration profiles in JumpCloud (or equivalent cloud MDM).
- OS & Endpoint Proficiency: Strong track record supporting and securing both macOS and Windows workstations.
- Automation-First Mindset: Demonstrated ability to automate manual administrative tasks using native workflow hooks or API integrations.
- Security & UX Focus: Solid understanding of Zero Trust architecture, least-privilege principles, and security baselines, paired with a focus on seamless user experience.
- Communication: Fluent in English at a professional working level with excellent documentation skills.