Senior IT Systems Engineer

Role: Senior IT Systems Engineer

Location: Hybrid – Downtown Toronto (4 days/week in office)

Type: Full-time | Permanent

Compensation: $150–185K CAD base

A well-funded deep-tech AI startup is hiring a Senior IT Systems Engineer to run and scale the corporate IT systems supporting its Toronto and Redwood City offices and remote employees. The company is building AI-native technology that helps engineers and intelligent agents design, verify and optimize semiconductor chips more efficiently.

Reporting directly to the Head of IT, you’ll own identity and access, endpoint management, enterprise SaaS administration and IT automation. You’ll work closely with security engineering to review policies for practicality, implement controls and keep the environment productive, secure and ready to scale.

The business has Silicon Valley roots, close to US$100M in funding and an experienced leadership team spanning AI research, software and semiconductor engineering.

What You’ll Do

• Administer Okta, including SAML/OIDC single sign-on, SCIM provisioning and group-based access tied to employee lifecycle changes
• Manage AWS IAM Identity Center, Organizations, accounts and permission sets for engineering, DevOps and MLOps teams
• Own Jira Service Management and Atlassian administration, including workflows, request forms, automation, JQL and REST API integrations
• Build IT automations using Python, Bash, PowerShell, Okta Workflows, Slack and APIs to streamline access requests and employee onboarding and offboarding
• Manage macOS, Windows and Linux endpoints across multiple MDM platforms, including zero-touch enrollment, remote scripting, patching, encryption and device offboarding
• Lead enterprise SaaS upgrades, implementing SSO, provisioning, administrator roles, audit logging and data controls
• Review security policies with the security engineering team and implement MFA, conditional access and endpoint controls
• Maintain SOC 2 controls through access reviews, evidence collection and ongoing audit preparation
• Run day-one IT onboarding and offboarding for office-based and remote employees
• Own VPN and zero-trust access, troubleshoot networking issues and coordinate with the internal network engineer, landlords and ISPs
• Resolve complex IT, network and hardware issues, manage the ticket queue and guide junior staff and vendors
• Manage hardware purchasing, inventory, repairs and retirement, along with software inventory, vendors and conference-room technology
• Document processes, runbooks and technical guides so systems and support practices scale consistently

What We’re Looking For

• 8+ years of hands-on corporate IT experience across systems engineering, systems administration or IT infrastructure
• Bachelor’s degree in Computer Science, Information Technology, Electrical Engineering or a related field, or equivalent practical experience
• Strong Okta or similar identity-provider experience, with a clear understanding of SAML/OIDC, SCIM and just-in-time provisioning
• Hands-on AWS administration experience, particularly IAM, IAM Identity Center and permission sets
• Strong macOS and Windows MDM experience using platforms such as JumpCloud, Rippling MDM or Intune, including remote script deployment
• Strong Jira and Atlassian administration, including workflows, JQL, automation rules and coding against the Jira REST API
• Scripting skills in Python, Bash or PowerShell, comfort with REST APIs and a track record of delivering complete IT automations
• Experience upgrading SaaS applications to enterprise tiers and administering Google Workspace
• Networking fundamentals across DNS, DHCP, Wi-Fi and VPN or zero-trust access
• Experience maintaining SOC 2 or ISO 27001 controls, with working knowledge of least privilege, MFA, endpoint protection and patching
• Strong ownership, clear technical writing and the confidence to question security policies before implementing them

Occasional availability outside business hours, including evenings and weekends, is required for upgrades and maintenance on mission-critical systems.

Nice to Have

• Okta Workflows, ScriptRunner, Forge or other automation-platform experience
• Deeper AWS experience across multi-account architecture, EC2, S3 and VPC
• Linux fleet management and remote administration
• GCP IAM, Microsoft Entra ID or infrastructure-as-code fundamentals
• Slack Enterprise administration and compliance automation tools such as Vanta
• Meraki or similar cloud-managed networking
• Conference-room A/V and collaboration tools such as Google Meet and Microsoft Teams
• Relevant certifications such as Okta Certified Professional, Atlassian Certified or CCNA