About the Role

We're looking for an IT Solutions Engineer who thinks like a systems builder - someone who doesn't just run internal infrastructure, but engineers it away where it shouldn't need a human at some point. This is a build-focused role on our IT Operations team. As we scale past 600 employees, our biggest lever is no longer closing tickets faster - it's removing the work that generates them.

You'll own the automation and integration layer that connects our identity, HR, device, and SaaS-governance systems, so that provisioning, deprovisioning, and access lifecycle events happen reliably and automatically instead of by hand. You'll pair closely with our Solutions Engineer, help set the technical standard for how automations are built and documented, and work cross-functionally with Security, People Ops, and DevOps to design end-to-end solutions rather than point fixes.

A DevOps and API background is exactly what this role is built around: you're comfortable reading API docs, wiring 2-3 systems together, scripting from scratch when a no-code tool won't cut it, and thinking about reliability, edge cases, and security from the first line. Above all, you're curious - about the systems you build, the people who depend on them, and how your engineering decisions impact the business.

What You'll Do

• Build the access lifecycle automation layer: Own the design, build, and maintenance of automated provisioning and deprovisioning across our top applications by ticket volume. Implement birthright roles for our highest-volume employee profiles and HiBob-driven trigger events (joiners, movers, leavers) that flow through to downstream systems without manual intervention.
• Integrate our core systems: Build and maintain the integrations that tie HiBob → JumpCloud → Tequipy (and Google Workspace, Slack, Notion, and the wider SaaS estate) into one coherent, event-driven lifecycle. Use REST APIs, SCIM, and our self-hosted n8n instance to create complex, reliable workflows.

• Manage identity and access at the backend: Configure and debug SSO/SCIM and SAML flows in JumpCloud as our Identity Provider. Own SSO app integrations end to end, troubleshoot complex provisioning and authentication issues, and keep access governance clean and auditable.

• Deliver the Security controls programme: Build the automations behind our security and compliance initiatives - local admin removal, least-privilege enforcement - contributing directly to DORA, ISO 27001, and SOC 2 efforts. Security is embedded in every config and every script, not bolted on afterward.

• Administer and optimize business-critical platforms: Manage the technical backend of Jira Service Management as our ITSM platform - configuring workflows, request types, forms, and automations to streamline internal processes - alongside the wider Atlassian Suite, Slack, and Notion.

• Own endpoint automation: Build and test JumpCloud MDM device policies, profiles, and scripts for zero-touch deployment across Windows and macOS endpoints (via Apple Business Manager), handling software deployment and OS-level configuration at scale.

• Drive SaaS and budget optimization: Monitor system logs, performance, and SaaS usage to identify waste and cost-saving opportunities, and implement the technical changes that reclaim them (e.g. license reclamation flows).

• Document everything you build: Proactively create and maintain technical documentation configs, automation flows, API maps - so that what you build can be run, understood, and extended by the rest of the team. Reliable, documented, alerted workflows are the standard, not the exception.

• Lead technical projects: Lead smaller technical projects end to end a new SSO app integration, a JSM form build-out, a new integration between systems - owning them from requirement to delivery, and providing technical guidance to the team as you go.

Who You Are

Strong Plus

What We Offer

As a growing fintech with ambitious goals, we offer you the chance to make a real impact on the infrastructure that powers Finom's teams and products. You'll work with genuine ownership, autonomy, and the freedom to shape how we build and operate our internal systems.

This is a role for a curious builder - someone who wants the internal platform to be a product, engineered to be reliable, automated, and secure by design. If the idea of deleting an entire category of manual work by building the right integration is what gets you out of bed, this is your team.