Senior IT Systems Engineer

Pantheon brings together exceptional builders who take ownership, drive meaningful impact, and shape what's next for the web. We power more than 300,000 websites globally for organizations including Google, Princeton, Salesloft, Clorox, and the United Nations. Every day, thousands of developers and marketers use our WebOps platform to build, iterate, and scale WordPress, Drupal, and Next.js sites that reach billions of people worldwide. As an employer, we operate with the same philosophy that drives our product: foundation and freedom. Pantheon is a vibrant, remote-forward team of experts who care deeply about their craft and results. Here, you take ownership of work that matters, contribute alongside exceptional people, and see the impact you create.

As a Senior IT Systems Engineer, you are curious, poised, persistent, logical, clever, and possess a love for technology. You are not only an expert systems engineer and integrator, but an effective communicator and key stakeholder in enterprise-wide projects and objectives. You will leverage your technical skills to administrate, design, implement, and manage Pantheon's enterprise IT infrastructure with a meaningful focus on identity and access management across our cloud platforms and development tooling. 

The ideal candidate is resourceful, articulate, and energized by working across teams to deliver high-quality solutions to complex problems. You bring a security-first mindset, thrive in fast-paced SaaS environments, and take real ownership over the systems you build and maintain.

You'll be at the center of everything that keeps Pantheon running — building the systems, automations, and integrations that let our teams do their best work. Reporting to the Director of IT, you'll own critical infrastructure across the stack, partnering with teams across the company to solve hard problems and ship real solutions.

• Architect and build enterprise IT systems that scale with a fast-growing global company
• Partner with cross-functional teams to untangle complex business problems and deliver technology solutions that actually move the needle
• Be the connective tissue between IT, Enterprise Systems, and business stakeholders at every level of the organization
• Automate the tedious stuff — deploy workflows using Workato, or Okta Workflows that save time and reduce human error
• Be the technical lifeline for the IT support team when things get gnarly
• Own and evolve the policies and procedures that keep our systems secure and compliant
• Lead Pantheon's identity governance program across GCP, AWS, and GitHub Enterprise — building Okta-driven provisioning workflows, enforcing least-privilege access, and establishing departmental access baselines that actually reflect how we work
• Evaluate our current IAM landscape and chart the path forward — deciding where Okta integrates with, runs alongside, or replaces existing infrastructure-as-code workflows
• Close the loop on compliance — ensuring audit trails are complete and that what we document matches what's actually running in production

• 8+ years of IT systems engineering experience or related field in a fast-paced SaaS startup environment
• Experience integrating multiple business-critical systems
• Project leadership experience — skilled in organizing and prioritizing competing priorities and complexities using agile methodologies
• Advanced knowledge and experience leveraging Okta for identity and access management, including SSO/SAML/SCIM integrations and Okta Workflows
• Hands-on experience with GCP IAM (Cloud Identity), AWS IAM (including IAM Identity Center and federated access), and GitHub Enterprise administration
• Familiarity with infrastructure-as-code tools (Terraform, CloudFormation, etc.) and how IAM governance integrates with those workflows
• Advanced experience with mobile device management tools, such as Jamf and Intune
• Advanced knowledge and understanding of security policies and procedures, specifically around EDR tools
• Experience building or maturing identity governance programs that support compliance requirements
• Experience with Privileged Access Management (PAM) solutions such as CyberArk, BeyondTrust, including privileged account discovery, credential vaulting, and session management
• Familiarity with PAM principles including just-in-time access, least privilege enforcement, and privileged session monitoring in cloud and on-premises environments
• Provided senior level technical guidance and served as an escalation point in a fast-paced SaaS startup environment
• Experience utilizing scripts (specifically Bash or Python) to perform bulk operations such as patch/software deployments, user management, and policy enforcement
• Comfortable working with and manipulating large datasets in Excel, Google Sheets, etc.
• Clear and empathic communicator and a creative problem solver
• Ability to learn and adapt quickly to changes in process, tools, and workflows
• Integrity and honesty, ability to be trusted and to work with highly sensitive and confidential information