About the Role:- Design, build, and maintain automated workflows and integrations across Loft's SaaS ecosystem, using APIs, scripting, identity standards, and integration tooling.
- Develop automation that improves IT operations, including user lifecycle management, access provisioning, system configuration, data synchronization, reporting, and repetitive administrative workflows.
- Administer and improve identity and access management (IAM) across hybrid environments, including provisioning and authentication workflows using technologies such as Okta, SCIM, SAML, and OAuth.
- Administer and support AWS infrastructure, including IAM, EC2, WorkSpaces, VPC, and directory integrations.
- Deploy, maintain, and improve VMware vSphere/ESXi infrastructure, supporting initiatives such as migrations, patching, upgrades, troubleshooting, and capacity management.
- Partner with Security to automate and improve security controls across endpoints, networks, cloud infrastructure, operating systems, and SaaS applications.
- Administer and automate aspects of GitLab, including repository permissions, access management, and CI/CD-related workflows.
- Troubleshoot complex technical issues spanning SaaS, cloud, networking, identity, virtualization, and on-premises infrastructure, identifying root causes rather than relying on short-term fixes.
- Partner with teams including People, Finance, Engineering, and Operations to understand business processes and identify opportunities where automation and systems integration can improve efficiency and data quality.
- Improve the reliability and scalability of IT by documenting solutions, developing reusable tooling, reducing manual processes, and contributing to disaster recovery and business continuity planning.
Must Haves:- 5+ years of professional IT experience, with hands-on experience in areas such as platform engineering, systems engineering, infrastructure engineering, applications engineering, DevOps, or IT automation.
- Strong experience integrating and automating SaaS applications through APIs, with exposure to platforms such as NetSuite, Atlassian Cloud, HRIS systems, GitLab, Google Workspace, or similar enterprise applications.
- Strong scripting and automation skills using Python, PowerShell, Bash, or similar languages, with demonstrated experience turning manual operational processes into reliable automated workflows.
- Hands-on experience with identity and access management, including technologies and standards such as Okta, SCIM, SAML, OAuth, SSO, and automated user provisioning.
- Experience administering AWS environments, including services such as IAM, EC2, WorkSpaces, VPC, and directory integrations.
- Hands-on experience administering and troubleshooting VMware vSphere/ESXi or comparable enterprise virtualization infrastructure.
- Strong understanding of networking fundamentals and demonstrated ability to troubleshoot issues spanning cloud, SaaS, identity, and on-premises environments.
- Experience working with security concepts and controls such as endpoint protection, VPNs, firewalls, encryption, access controls, system hardening, and patch management.
- Demonstrated automation mindset: you naturally look for opportunities to replace repetitive manual work with scalable, maintainable, and testable solutions.
- Strong communication and collaboration skills, with the ability to translate business problems into technical solutions and work effectively with both technical and non-technical stakeholders.
Nice to Haves:- Experience with NetSuite, Atlassian Cloud, GitLab, Google Workspace, Tailscale, or HRIS platforms and their APIs.
- Experience building or maintaining ETL pipelines, iPaaS workflows, or other forms of data integration between enterprise applications.
- Familiarity with monitoring, alerting, observability, and ITSM platforms.
- Experience with vulnerability management, security monitoring, incident response, SIEM, or automated remediation.
- Experience with configuration management, Infrastructure as Code, or CI/CD tooling.
- Experience with container technologies such as Docker or Kubernetes.
- Familiarity with Google Workspace security and DLP capabilities.
- Experience supporting disaster recovery and business continuity initiatives.
- Experience mentoring or providing technical guidance to other IT team members.
- Experience working in aerospace, defense, manufacturing, or another highly regulated or engineering-driven environment.
Some of Our Awesome Benefits:- 100% company-paid medical, dental, and vision for you and your dependents
- 100% company-paid life, AD&D, and disability insurance
- Fully paid parental leave: 16 weeks for birthing parents, 10 weeks for non-birthing parents
- Flexible time off and 12 paid holidays
- HSA with employer contribution, FSAs, and commuter benefits
- Carrot Fertility, One Medical, and a free Employee Assistance Program
- 401(k) and equity
- Daily catered lunches and snacks in office
- Annual company off-site and regular social events
- International exposure to our team in France
- Relocation assistance when applicable
$108,000 - $162,000 a year
State law requires us to tell you the base compensation range for this role, which is $108,000 - $162,000 per year, determined by your education, experience, knowledge, skills, and abilities. The salary range for this role is intentionally wide as we evaluate individuals based on their unique experience and abilities to fit our needs. Most importantly, we are excited to meet you, and see if you are a great fit for our team. What we can't quantify for you are the exciting challenges, supportive team, and amazing culture we enjoy.
