Why This Job is Featured on The SaaS Jobs
This Senior IT Engineer role stands out in a modern SaaS environment because it treats internal IT as a product surface, centered on identity, automation, and governance across a large SaaS application portfolio. The emphasis on Okta Workflows, federation patterns like SAML and OIDC, and lifecycle orchestration reflects how SaaS companies increasingly run core operations through interconnected cloud systems rather than traditional on premises tooling.
For a long term SaaS career, the work builds durable leverage in areas that repeatedly matter across scale ups and public SaaS companies: identity as the control plane, automated joiner mover leaver processes, and audit ready access controls. Exposure to SCIM provisioning, access reviews, and SOC 2 evidence pipelines translates directly into security minded operations roles, while AI assisted runbooks and agentic workflows align with the shift toward automation first service delivery in SaaS IT.
This position is best suited to an engineer who prefers owning systems end to end, from architecture through incident triage and documentation, and who is comfortable partnering with Security, People Ops, Finance, and Engineering. It will fit someone who enjoys deep protocol level troubleshooting alongside workflow design, and who wants their impact measured in reliability, compliance outcomes, and reduced operational toil.
The section above is editorial commentary from The SaaS Jobs, provided to help SaaS professionals understand the role in a broader industry context.
Job Description
Senior IT Engineer
at Amplitude (View all jobs)
San Francisco Bay Area
What You'll Do
- IT Automation & Workflow Engineering: Own and evolve Amplitude's IT automation platform with Okta Workflows as the primary engine. Design and deliver reliable, scalable automations across onboarding and offboarding, access provisioning, SaaS license management, and compliance workflows. You architect solutions, not one-off scripts, and you hold yourself to a high bar for maintainability and documentation.
- Identity & Access Management: Own the full Okta configuration surface, SSO integrations, SCIM provisioning, group rules, adaptive MFA, RBAC lifecycle automation, and access review workflows in Lumos. You are expected to debug the full federation layer including attribute mapping, JIT provisioning, and SCIM reconciliation, and maintain production-grade configurations across the fleet.
- SAML, OIDC & Federation Engineering: Design, implement, and troubleshoot complex SAML 2.0 and OIDC integrations across enterprise SaaS applications. You understand both the SP and IdP sides of federation deeply, attribute statements, assertion mapping, binding types, token claims, and PKCE flows are not new territory. You own the integration from initial configuration through ongoing reconciliation and incident triage.
- Endpoint & Device Management: Administer macOS device management at scale via Kandji, including zero-touch provisioning, Blueprint and Library Item configuration, software deployment, and security policy enforcement. You maintain fleet compliance through automated checks and can diagnose complex endpoint issues without escalation. You also have familiarity with Jumpcloud for Windows devices.
- AI-Assisted IT Operations: Champion AI adoption within IT, identifying high-value automation opportunities, evaluating AI-native and low-code tooling, and building agentic workflows that augment IT service delivery. You use LLMs to accelerate your own work (drafting runbooks, triaging issues, summarizing access reviews) and you build AI-powered automations where they create real leverage.
- Google Workspace Administration: Own Workspace admin depth, directory configuration, group management, Drive and sharing policy enforcement, DLP settings, and audit log triage. You maintain clean provisioning and deprovisioning integration between Workspace and Okta.
- IT Compliance & Access Reviews: Support SOC 2 evidence collection and access review workflows, including building and maintaining automated pipelines that surface access anomalies, generate reviewer-ready reports, and track remediation to closure. You understand the compliance surface and can own the operational execution without hand-holding from GRC.
- Employee Lifecycle & Compliance Operations: Own the full onboarding and offboarding lifecycle end-to-end - from Day 1 provisioning through final access termination - across Okta, Google Workspace, Kandji, and the broader SaaS stack. You design and maintain the automated workflows that ensure every joiner, mover, and leaver is handled consistently, completely, and on time. You understand how lifecycle gaps create compliance risk, orphaned accounts, lingering elevated access, missed deprovisioning, and you build the controls and audit trails that close those gaps. You work closely with People Ops and IT Security to align lifecycle triggers with HR systems, enforce role-based provisioning via SCIM and group rules, and produce the evidence needed for SOC 2 and access review cycles. Nothing falls through the cracks on your watch.
- SaaS Governance & Tool Management: Manage the lifecycle of Amplitude's corporate SaaS stack, vendor onboarding integrations, license optimization, app security reviews, and offboarding automation. You maintain up-to-date documentation, runbooks, and operational playbooks for every platform you own.
- Cross-Functional Partnership & Project Delivery: Partner with IT Security, Engineering, People Ops, and Finance to deliver high-impact projects. Communicate clearly with both technical and executive audiences on project status, risk, and outcomes.
What You'll Need
- Experience: 5–8+ years in IT systems engineering, with hands-on depth in at least three of: Okta/IdP administration, SAML/OIDC federation engineering, macOS endpoint management (Kandji or Jamf), Google Workspace administration, IT automation and integration, or SOC 2/compliance operations.
- Identity & federation depth: You have built net-new SAML 2.0 and OIDC integrations from scratch on both the SP and IdP sides. You can debug assertion failures, fix attribute mapping mismatches, troubleshoot SCIM sync errors, and own the full federation lifecycle without escalating to a vendor or another engineer.
- Automation architecture: You have a demonstrated track record of building multi-step, multi-system automation workflows with measurable business impact. Okta Workflows experience is strongly preferred. You design for maintainability, not just function.
- Technical skills: Comfortable writing Python, Bash, or equivalent to extend low-code platforms, build lightweight tooling, or debug integration issues. You can move quickly without looping in engineering.
- AI proficiency: You actively use AI tools (Claude, Copilot, or similar) to accelerate your own work, and you have built or designed AI-powered automations or agentic workflows. Genuine curiosity about where LLMs and AI-native tooling create leverage in IT operations is a hard requirement, not a nice-to-have.
- Autonomy & ownership: You work through ambiguous problems independently from initial triage through remediation and documentation. You don't wait for perfect requirements.
- Communication: Strong cross-functional collaboration skills. Able to translate complex technical decisions for non-technical stakeholders and work effectively with Legal, People, Security, and Engineering.
Nice-to-Haves
- Deep Okta Workflows experience including complex branching, error handling, and cross-app orchestration
- Experience with enterprise iPaaS platforms (Workato or equivalent) in addition to Okta Workflows
- Familiarity with AI tool governance - acceptable use policies, connector security reviews, and data classification in AI contexts
- Experience supporting M&A technical integrations or cross-tenant identity migrations
- Zero-trust architecture patterns, CASB/SSPM tooling, or ZTNA experience
- Certifications in Okta, Kandji, or Google Workspace
- Prior experience at a high-growth tech company with a lean IT team and large scope
Who We Are
The Company: Amplitude is filled with humble, life-long learners who are eager to help one another and the company succeed. Our values of growth mindset, ownership, and humility are core to the way we work: we’re tenacious in the face of challenges, we take the initiative to solve problems that drive our shared success, and we operate from a place of empathy and openness, seeking to understand many points of view.
The Product: Amplitude is a digital analytics platform—we help companies capture data they can trust, uncover clear insights about customer behavior, and take faster action. This empowers teams to build better product experiences that drive business growth. We’re super proud of what we’ve built and continue to expand: a platform that empowers companies to thrive in the digital era.
We care about the well-being of our team: We offer competitive pay and benefits packages that reflect our commitment to the health and well-being of our Ampliteers.
Some of our benefit programs include:
- Excellent Medical, Dental and Vision insurance coverages, with 100% employer-paid premiums for employee Medical, Dental, Vision on select plans
- Flexible time off, paid holidays, and more
- Generous stipends to spend on what matters most to you, whether that’s wellness (monthly), commuter transit/parking (monthly), learning and development (quarterly), home office equipment (annual), and much more
- Excellent Parental benefits including: 12-20 weeks of Paid Parental Leave, Carrot Fertility Benefits/Adoption/Surrogacy support, Back-up Child Care support
- Mental health and wellness benefits including no cost employee access to Modern Health coaching & therapy Sessions and high quality physician office experience via One Medical membership (select U.S. locations only)
- Employee Stock Purchase Program (ESPP)
Other fun facts about Amplitude:
- We were recognized in the Newsweek Excellence Index 2024.
- Our customers love us! They've said we're the #1 product analytics solution for 19 quarters in a row on G2.
- We care A LOT about product innovation. Fast Company called us the #3 most innovative enterprise company in the world.
- We invest in our people. We offer mentorship programs, management training, and wellness initiatives.
- We give back to our communities. We give every Ampliteer a charitable giving grant and paid volunteer time off.
- We were founded in 2012, went public via a direct listing in September 2021, and are now trading under the ticker $AMPL.
- We’re a global and fast-growing team! We have employees around the world and offices in San Francisco (HQ), New York, Vancouver, Amsterdam, London, Paris, Singapore, and Tokyo.
- Our mascot is Data Monster, who loves to chow down on numbers, charts, and graphs. Nom nom.
Amplitude provides equal employment opportunities (EEO). All applicants are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, or sexual orientation.
This role is eligible for equity, benefits and other forms of compensation.
Based on Colorado law, the following details are for individuals who will work for Amplitude in Colorado: Colorado range: $98,000 - $147,000 base salary (inclusive of bonus or commission)
Based on legislation in New York City, the following details are for individuals will work for Amplitude in New York City: New York City salary range:$110,000 - $165,000 base salary (inclusive of bonus or commission)
Based on legislation in California, the following details are for individuals who will work for Amplitude California: California salary range: $110,000 - $165,000 base salary (inclusive of bonus or commission)
Based on legislation in Washington state, the following details are for individuals who will work for Amplitude in Washington state: Washington salary range: $98,000 - $147,000base salary (inclusive of bonus or commission)
Based on legislation in Washington state, the following details are for individuals who will work for Amplitude in Washington only: unlimited PTO, 10 to 13 holidays annually (will vary), medical dental and vision PPO and CDHP plans. Finally, a company sponsored 401(k) retirement plan.
