jobapplier

Senior IT Systems Engineer

pantheon

About Pantheon

Pantheon is the WebOps platform for websites that deliver extraordinary results. We believe in putting the magic of the internet in the hands of every web team. With Pantheon, digital teams can build, host, and manage their website portfolios faster, safer, and at scale. Pantheon's workflow tools, automation, and optimization features make it easy to deliver extraordinary websites. We have over 100,000 sites on our platform and are growing rapidly.

Pantheon's core values are Trust, Teamwork, Passion, and Customers First. At Pantheon, we work hard and play harder, valuing individual employees and supporting opportunities for personal growth and development.

The Role

As a Senior IT Systems Engineer, you are curious, poised, persistent, logical, clever, and possess a love for technology. You are not only an expert systems engineer and integrator, but an effective communicator and key stakeholder in enterprise-wide projects and objectives. You will leverage your technical skills to administrate, design, implement, and manage Pantheon's enterprise IT infrastructure with a meaningful focus on identity and access management across our cloud platforms and development tooling.

This role owns Pantheon's identity governance program — Okta-driven provisioning and least-privilege baselines across GCP, AWS, and GitHub Enterprise — endpoint/MDM governance (Kandji/Intune), SaaS management via Torii, and ITSM/AI workflow design and development via Serval. It is also the named owner of active ISO 27001 risk register remediation: role-based access reviews, endpoint admin-rights policy, and access adjustment on role change.

The ideal candidate is resourceful, articulate, and energized by working across teams to deliver high-quality solutions to complex problems. You bring a security-first mindset, thrive in fast-paced SaaS environments, and take real ownership over the systems you build and maintain.

Cool Stuff You'll Do

You'll be at the center of everything that keeps Pantheon running — building the systems, automations, and integrations that let our teams do their best work. Reporting to the Director of IT, you'll own critical infrastructure across the stack, partnering with teams across the company to solve hard problems and ship real solutions.

Architect and build enterprise IT systems that scale with a fast-growing global company

Partner with cross-functional teams to untangle complex business problems and deliver technology solutions that actually move the needle

Be the connective tissue between IT, Enterprise Systems, and business stakeholders at every level of the organization

Automate the tedious stuff — deploy workflows using Workato, Zapier, or Okta Workflows that save time and reduce human error

Be the technical lifeline for the IT support team when things get gnarly

Own SaaS management and governance through Torii, and design and build ITSM/AI workflows in Serval

Lead Pantheon's identity governance program across GCP, AWS, and GitHub Enterprise — building Okta-driven provisioning workflows, enforcing least-privilege access, and establishing departmental access baselines that actually reflect how we work

Own ISO 27001 risk register remediation for IT systems: build out role-based access review processes, govern endpoint admin rights, and establish an access-adjustment process for role changes

Evaluate our current IAM landscape and chart the path forward — deciding where Okta integrates with, runs alongside, or replaces existing infrastructure-as-code workflows

Close the loop on compliance — ensuring audit trails are complete and that what we document matches what's actually running in production

What You Bring to the Table

6+ years of IT systems engineering experience or related field in a fast-paced SaaS startup environment

Experience integrating multiple business-critical systems

Project leadership experience — skilled in organizing and prioritizing competing priorities and complexities using agile methodologies

Advanced knowledge and experience leveraging Okta for identity and access management, including SSO/SAML/SCIM integrations and Okta Workflows

Hands-on experience with GCP IAM (Cloud Identity), AWS IAM (including IAM Identity Center and federated access), and GitHub Enterprise administration

Familiarity with infrastructure-as-code tools (Terraform, CloudFormation, etc.) is a plus, but not a requirement for this role today

Advanced experience with mobile device management tools, such as Jamf and Intune

Advanced knowledge and understanding of security policies and procedures, including firewalls, IDS, and EDR tools

Experience building or maturing identity governance programs that support compliance requirements (SOC 2, ISO 27001)

Experience with SaaS management/governance platforms (e.g., Torii) and ITSM platforms, ideally with AI-driven workflow design (e.g., Serval)

Experience with or working knowledge of Privileged Access Management (PAM) concepts — JIT access, least-privilege enforcement, privileged session monitoring — even without formal PAM tooling in place

Provided senior level technical guidance and served as an escalation point in a fast-paced SaaS startup environment

Experience utilizing scripts (specifically Bash or Python) to perform bulk operations such as patch/software deployments, user management, and policy enforcement

Comfortable working with and manipulating large datasets in Excel, Google Sheets, etc.

Excellent communication background with strong relationship management skills

Clear and empathic communicator and a creative problem solver

Ability to interface with key stakeholders at all levels of the organization

Ability to learn and adapt quickly to changes in process, tools, and workflows

Able to diagnose and resolve challenging technical issues while demonstrating a sense of urgency

Analytical thinker with strong skills in problem solving, coordination, strategic planning, and quality management

Integrity and honesty, ability to be trusted and to work with highly sensitive and confidential information

Resourceful, self-motivated with a strong sense of ownership in areas of responsibility

Organized, exceptional attention to detail

What We Offer

We have all the usual perks and benefits but what we can really offer you is a fantastic work environment powered by an amazing team.

Industry competitive compensation and equity plan

Flexible time off, sick days, and 13 paid holidays

Comprehensive medical insurance including Health, Dental and Vision

Paid parental leave (plus fertility, adoption and other family planning benefits)

In-office workspace (San Francisco and New York)

Monthly allowance for wellness, reading and access to LinkedIn Learning for continued development

Events and activities both team-based and company wide that inspire, educate and cultivate

What We Offer

We have all the usual perks and benefits but what we can really offer you is a fantastic work environment powered by an amazing team.

Industry competitive compensation and equity plan

Robust Vacation Package with 28 days of Holiday

Private medical and dental coverage

Life and Critical illness insurance

Attractive Workplace Pension scheme

Access to Employee Resource Platform

Top-of-line equipment

Monthly allowance for wellness, reading and access to LinkedIn Learning for continued development

Events and activities both team-based and company wide that inspire, educate and cultivate

Pantheon is an equal opportunity employer and we welcome applications from all backgrounds regardless of race, color, religion, sex, national origin, ancestry, age, marital status, sexual orientation, gender identity, veteran status, disability, or any other classification protected by law. Pantheon complies with federal and local disability laws and makes reasonable accommodations for applicants and employees with disabilities. If you need a reasonable accommodation due to a disability for any part of the interview process, please contact [email protected].

  • To review the Employee and Applicant's Privacy Policy, click here
  • .

Visa Sponsorship is not available at this time.