Senior IT Systems Engineer

About Pantheon Pantheon is the WebOps platform for websites that deliver extraordinary results. We believe in putting the magic of the internet in the hands of every web team. With Pantheon, digital teams can build, host, and manage their website portfolios faster, safer, and at scale. Pantheon's workflow tools, automation, and optimization features make it easy to deliver extraordinary websites. We have over 100,000 sites on our platform and are growing rapidly. Pantheon's core values are Trust, Teamwork, Passion, and Customers First. At Pantheon, we work hard and play harder, valuing individual employees and supporting opportunities for personal growth and development. The Role As a Senior IT Systems Engineer, you are curious, poised, persistent, logical, clever, and possess a love for technology. You are not only an expert systems engineer and integrator, but an effective communicator and key stakeholder in enterprise-wide projects and objectives. You will leverage your technical skills to administrate, design, implement, and manage Pantheon's enterprise IT infrastructure with a meaningful focus on identity and access management across our cloud platforms and development tooling. This role owns Pantheon's identity governance program — Okta-driven provisioning and least-privilege baselines across GCP, AWS, and GitHub Enterprise — endpoint/MDM governance (Kandji/Intune), SaaS management via Torii, and ITSM/AI workflow design and development via Serval. It is also the named owner of active ISO 27001 risk register remediation: role-based access reviews, endpoint admin-rights policy, and access adjustment on role change. The ideal candidate is resourceful, articulate, and energized by working across teams to deliver high-quality solutions to complex problems. You bring a security-first mindset, thrive in fast-paced SaaS environments, and take real ownership over the systems you build and maintain. Cool Stuff You'll Do You'll be at the center of everything that keeps Pantheon running — building the systems, automations, and integrations that let our teams do their best work. Reporting to the Director of IT, you'll own critical infrastructure across the stack, partnering with teams across the company to solve hard problems and ship real solutions. - Architect and build enterprise IT systems that scale with a fast-growing global company - Partner with cross-functional teams to untangle complex business problems and deliver technology solutions that actually move the needle - Be the connective tissue between IT, Enterprise Systems, and business stakeholders at every level of the organization - Automate the tedious stuff — deploy workflows using Workato, Zapier, or Okta Workflows that save time and reduce human error - Be the technical lifeline for the IT support team when things get gnarly - Own SaaS management and governance through Torii, and design and build ITSM/AI workflows in Serval - Lead Pantheon's identity governance program across GCP, AWS, and GitHub Enterprise — building Okta-driven provisioning workflows, enforcing least-privilege access, and establishing departmental access baselines that actually reflect how we work - Own ISO 27001 risk register remediation for IT systems: build out role-based access review processes, govern endpoint admin rights, and establish an access-adjustment process for role changes - Evaluate our current IAM landscape and chart the path forward — deciding where Okta integrates with, runs alongside, or replaces existing infrastructure-as-code workflows - Close the loop on compliance — ensuring audit trails are complete and that what we document matches what's actually running in production What You Bring to the Table - 6+ years of IT systems engineering experience or related field in a fast-paced SaaS startup environment - Experience integrating multiple business-critical systems - Project leadership experience — skilled in organizing and prioritizing competing priorities and complexities using agile methodologies - Advanced knowledge and experience leveraging Okta for identity and access management, including SSO/SAML/SCIM integrations and Okta Workflows - Hands-on experience with GCP IAM (Cloud Identity), AWS IAM (including IAM Identity Center and federated access), and GitHub Enterprise administration - Familiarity with infrastructure-as-code tools (Terraform, CloudFormation, etc.) is a plus, but not a requirement for this role today - Advanced experience with mobile device management tools, such as Jamf and Intune - Advanced knowledge and understanding of security policies and procedures, including firewalls, IDS, and EDR tools - Experience building or maturing identity governance programs that support compliance requirements (SOC 2, ISO 27001) - Experience with SaaS management/governance platforms (e.g., Torii) and ITSM platforms, ideally with AI-driven workflow design (e.g., Serval) - Experience with or working knowledge of Privileged Access Management (PAM) concepts — JIT access, least-privilege enforcement, privileged session monitoring — even without formal PAM tooling in place - Provided senior level technical guidance and served as an escalation point in a fast-paced SaaS startup environment - Experience utilizing scripts (specifically Bash or Python) to perform bulk operations such as patch/software deployments, user management, and policy enforcement - Comfortable working with and manipulating large datasets in Excel, Google Sheets, etc. - Excellent communication background with strong relationship management skills - Clear and empathic communicator and a creative problem solver - Ability to interface with key stakeholders at all levels of the organization - Ability to learn and adapt quickly to changes in process, tools, and workflows - Able to diagnose and resolve challenging technical issues while demonstrating a sense of urgency - Analytical thinker with strong skills in problem solving, coordination, strategic planning, and quality management - Integrity and honesty, ability to be trusted and to work with highly sensitive and confidential information - Resourceful, self-motivated with a strong sense of ownership in areas of responsibility - Organized, exceptional attention to detail What We Offer We have all the usual perks and benefits but what we can really offer you is a fantastic work environment powered by an amazing team. - Industry competitive compensation and equity plan - Flexible time off, sick days, and 13 paid holidays - Comprehensive medical insurance including Health, Dental and Vision - Paid parental leave (plus fertility, adoption and other family planning benefits) - In-office workspace (San Francisco and New York) - Monthly allowance for wellness, reading and access to LinkedIn Learning for continued development - Events and activities both team-based and company wide that inspire, educate and cultivate What We Offer We have all the usual perks and benefits but what we can really offer you is a fantastic work environment powered by an amazing team. - Industry competitive compensation and equity plan - Robust Vacation Package with 28 days of Holiday - Private medical and dental coverage - Life and Critical illness insurance - Attractive Workplace Pension scheme - Access to Employee Resource Platform - Top-of-line equipment - Monthly allowance for wellness, reading and access to LinkedIn Learning for continued development - Events and activities both team-based and company wide that inspire, educate and cultivate Pantheon is an equal opportunity employer and we welcome applications from all backgrounds regardless of race, color, religion, sex, national origin, ancestry, age, marital status, sexual orientation, gender identity, veteran status, disability, or any other classification protected by law. Pantheon complies with federal and local disability laws and makes reasonable accommodations for applicants and employees with disabilities. If you need a reasonable accommodation due to a disability for any part of the interview process, please contact [email protected]. To review the Employee and Applicant's Privacy Policy, click here. Visa Sponsorship is not available at this time.