Senior IT Engineer ; Okta workflows

<div class="content-intro"><p>Amplitude is the leading AI analytics platform, helping over 4,700 customers—including Atlassian, Burger King, NBCUniversal, and Square—build better products and digital experiences. With powerful AI Agents embedded across our platform, teams can analyze, test, and optimize user experiences faster than ever. Ranked #1 across multiple categories in G2’s Winter 2026 Report, Amplitude is the best-in-class solution for product, data, and marketing teams. Learn more at <a href="http://amplitude.com">amplitude.com</a>.</p> <p>As an organization, we deliver for our customers by living our values. We operate from a place of humility, take ownership of problems and successes, approach challenges with a growth mindset, and put our customers at the center of everything we do.</p> <p><strong>Amplitude’s Commitment to Diversity Equity &amp; Inclusion (DEI): </strong>Amplitude believes that diversity enables the creation of better products, improves the ability to solve complex problems, and drives more powerful solutions. We strive to create an environment of inclusion—one focused on psychological safety, empathy, and human connection—that will allow employees of all backgrounds to thrive.</p></div><h1>Senior IT Engineer</h1> <p>at Amplitude <a href="https://boards.greenhouse.io/amplitude">(View all jobs)</a></p> <p>San Francisco Bay Area</p> <p>&nbsp;</p> <p><strong>What You'll Do</strong></p> <ul> <li><strong>IT Automation &amp; Workflow Engineering:</strong> Own and evolve Amplitude's IT automation platform with Okta Workflows as the primary engine. Design and deliver reliable, scalable automations across onboarding and offboarding, access provisioning, SaaS license management, and compliance workflows. You architect solutions, not one-off scripts, and you hold yourself to a high bar for maintainability and documentation.</li> <li><strong>Identity &amp; Access Management:</strong> Own the full Okta configuration surface, SSO integrations, SCIM provisioning, group rules, adaptive MFA, RBAC lifecycle automation, and access review workflows in Lumos. You are expected to debug the full federation layer including attribute mapping, JIT provisioning, and SCIM reconciliation, and maintain production-grade configurations across the fleet.</li> <li><strong>SAML, OIDC &amp; Federation Engineering:</strong> Design, implement, and troubleshoot complex SAML 2.0 and OIDC integrations across enterprise SaaS applications. You understand both the SP and IdP sides of federation deeply, attribute statements, assertion mapping, binding types, token claims, and PKCE flows are not new territory. You own the integration from initial configuration through ongoing reconciliation and incident triage.</li> <li><strong>Endpoint &amp; Device Management:</strong> Administer macOS device management at scale via Kandji, including zero-touch provisioning, Blueprint and Library Item configuration, software deployment, and security policy enforcement. You maintain fleet compliance through automated checks and can diagnose complex endpoint issues without escalation. You also have familiarity with Jumpcloud for Windows devices.&nbsp;</li> <li><strong>AI-Assisted IT Operations:</strong> Champion AI adoption within IT, identifying high-value automation opportunities, evaluating AI-native and low-code tooling, and building agentic workflows that augment IT service delivery. You use LLMs to accelerate your own work (drafting runbooks, triaging issues, summarizing access reviews) and you build AI-powered automations where they create real leverage.</li> <li><strong>Google Workspace Administration:</strong> Own Workspace admin depth, directory configuration, group management, Drive and sharing policy enforcement, DLP settings, and audit log triage. You maintain clean provisioning and deprovisioning integration between Workspace and Okta.</li> <li><strong>IT Compliance &amp; Access Reviews:</strong> Support SOC 2 evidence collection and access review workflows, including building and maintaining automated pipelines that surface access anomalies, generate reviewer-ready reports, and track remediation to closure. You understand the compliance surface and can own the operational execution without hand-holding from GRC.</li> <li><strong>Employee Lifecycle &amp; Compliance Operations:</strong> Own the full onboarding and offboarding lifecycle end-to-end - from Day 1 provisioning through final access termination - across Okta, Google Workspace, Kandji, and the broader SaaS stack. You design and maintain the automated workf