$203,000 – $224,000
Listed on Obsidian Securty’s own careers site. You apply with them directly — we never stand between you and the employer.
What this role is
This role leads the design and operation of identity, endpoint, and IT infrastructure at a rapidly scaling cybersecurity unicorn, owning systems from HR through Okta to the device fleet and writing configuration as version-controlled code. It suits experienced IT architects who have operated production identity platforms at scale, are comfortable with infrastructure-as-code practices, and want to shape how a modern security-first organization automates away manual IT work.
Our summary, not Obsidian Securty’s wording. The full posting is on their site.
Skills this role names
- GitHub Actions
- Google Cloud Platform
- Google Workspace
- HashiCorp Vault
- Okta
- PowerShell
- Python
- Rippling
- Terraform
- Workday
Log in to see which of these are already on your profile.
What they ask for
Required
- 8+ years building and operating IT systems, identity, or platform infrastructure in production with clear ownership
- Deep hands-on Okta ownership across SSO, MFA, Universal Directory, Lifecycle Management, and conditional access
- Production-scale Jamf Pro expertise managing Mac fleets with configuration profiles, policies, smart groups, and patch workflows
- Proven infrastructure-as-code ownership with Terraform or OpenTofu managing real infrastructure or SaaS configuration shipped through pull-request-based GitOps
- Daily use of AI coding tools to ship production work
- Hands-on MDM depth with Jamf or Intune at fleet scale including device compliance and trust
- Scripting fluency in Python, PowerShell, or comparable language with API automation experience
- Clear written and verbal communication with technical and non-technical stakeholders
Nice to have
- Experience with lifecycle or identity-governance orchestration and HRIS-driven provisioning (Rippling, Workday, or similar)
- Google Workspace administration at scale including GAM7
- Secrets and non-human credential management (HashiCorp Vault, Doppler, Secret Manager, or equivalent)
- Workflow and integration automation on iPaaS or agent platforms such as Workato with human-in-the-loop steps
- Zero-trust network access (Jamf Connect, Zscaler, Tailscale, or similar) and enterprise browser deployments
- Exposure to SOC 2 or ISO 27001/27701 compliance controls and evidence automation tooling such as Drata
- Google Cloud Platform experience and familiarity with agentic or MCP tooling for operations
- B2B SaaS or cybersecurity domain background