IT Engineer

About the Role We are looking for a hands-on IT Systems Administrator to join our Internal IT team in a fast-growth environment. In this role, you will operate at the intersection of startup speed and banking-grade security. You won't just be resolving tickets; you will actively build and refine our identity architecture, design automated lifecycle workflows (Joiner/Mover/Leaver), and author device compliance policies across our fleet. Responsibilities Identity & Access Management: Administer Google Workspace as our master source of identity (Primary IdP) for authentication and access control. Workflow & Provisioning Automation: Design, build, and maintain automated lifecycle management (JML) using Okta Workflows and SCIM provisioning to downstream apps (Slack, Jira, Zoom, 1Password, etc.). MDM Policy & Configuration: Author, deploy, and audit system configuration profiles and compliance policies in JumpCloud across both macOS and Windows fleets. Service Desk & Escalations: Provide high-UX, tier-2/3 support via Jira Service Management (JSM) and Slack, using ticket data to identify root causes and automate repeat issues. Security & Compliance Enforcement: Maintain Zero Trust access controls, enforce SOC2/ISO 27001 compliance standards, and manage endpoint protection ( Sophos ) with minimal user friction. Global Standardization: Work closely with the team to author knowledge base documentation in Confluence, standardizing IT operations across international offices. Proactive Maintenance: Monitor IT infrastructure, audit permissions, and recommend tooling or API-first improvements to eliminate manual workload. Professional Experience & Qualifications Minimum 5 years of relevant Internal IT experience in a fast-paced, scale-up, or regulated Fintech environment. Hands-on Okta Expertise: Proven experience building workflows with Okta Workflows and managing SCIM/LCM app integrations. Google Workspace Administration: Deep knowledge of GWS as a primary IdP, including domain security settings, OU management, and admin workflows. MDM Policy Creation: Direct experience creating, testing, and deploying compliance baselines, FileVault/BitLocker policies, and configuration profiles in JumpCloud (or equivalent cloud MDM). OS & Endpoint Proficiency: Strong track record supporting and securing both macOS and Windows workstations. Automation-First Mindset: Demonstrated ability to automate manual administrative tasks using native workflow hooks or API integrations. Security & UX Focus: Solid understanding of Zero Trust architecture, least-privilege principles, and security baselines, paired with a focus on seamless user experience. Communication: Fluent in English at a professional working level with excellent documentation skills. Package and Benefits Great compensation package, including performance & company bonus Private Health insurance for you and your family Mobile allowance Employee wellbeing & support program Learning & Development budget Our team is global, you will work with 40+ different nationalities spread across 5 continents Sounds like you? Apply now! About Thunes Thunes is the Smart Superhighway to move money around the world. Thunes’ proprietary Direct Global Network allows Members to make payments in real-time in over 130 countries and more than 80 currencies. Thunes’ network connects directly to over 7 billion mobile wallets and bank accounts worldwide, as well as 15 billion cards via more than 320 different payment methods, such as GCash, M-Pesa, Airtel, MTN, Orange, JazzCash, Easypaisa, AliPay, WeChat Pay and many more. Thunes’ Direct Global Network differentiates itself through its worldwide reach, in-house SmartX Treasury System and Fortress Compliance Platform, ensuring Members of the network receive unrivaled speed, control, visibility, protection and cost efficiencies when making real-time payments, globally. Members of Thunes’ Direct Global Network include gig economy giants like Uber and Deliveroo, super-apps like Gr…