The Role
Administer identity, access, lifecycle automation, endpoint management, and internal IT support across macOS and Windows fleets. Build Okta Workflows and SCIM provisioning integrations, manage Google Workspace and JumpCloud policies, enforce Zero Trust and compliance controls, administer Sophos protection, resolve tier-2/3 issues, document standardized procedures, audit permissions, and improve operations through automation and API integrations.
Summary Generated by Built In
About the Role
We are looking for a hands-on IT Systems Administrator to join our Internal IT team in a fast-growth environment. In this role, you will operate at the intersection of startup speed and banking-grade security.
You won't just be resolving tickets; you will actively build and refine our identity architecture, design automated lifecycle workflows (Joiner/Mover/Leaver), and author device compliance policies across our fleet.
Responsibilities
We are looking for a hands-on IT Systems Administrator to join our Internal IT team in a fast-growth environment. In this role, you will operate at the intersection of startup speed and banking-grade security.
You won't just be resolving tickets; you will actively build and refine our identity architecture, design automated lifecycle workflows (Joiner/Mover/Leaver), and author device compliance policies across our fleet.
Responsibilities
- Identity & Access Management: Administer Google Workspace as our master source of identity (Primary IdP) for authentication and access control.
- Workflow & Provisioning Automation: Design, build, and maintain automated lifecycle management (JML) using Okta Workflows and SCIM provisioning to downstream apps (Slack, Jira, Zoom, 1Password, etc.).
- MDM Policy & Configuration: Author, deploy, and audit system configuration profiles and compliance policies in JumpCloud across both macOS and Windows fleets.
- Service Desk & Escalations: Provide high-UX, tier-2/3 support via Jira Service Management (JSM) and Slack, using ticket data to identify root causes and automate repeat issues.
- Security & Compliance Enforcement: Maintain Zero Trust access controls, enforce SOC2/ISO 27001 compliance standards, and manage endpoint protection (Sophos) with minimal user friction.
- Global Standardization: Work closely with the team to author knowledge base documentation in Confluence, standardizing IT operations across international offices.
- Proactive Maintenance: Monitor IT infrastructure, audit permissions, and recommend tooling or API-first improvements to eliminate manual workload.
Professional Experience & Qualifications
- Minimum 5 years of relevant Internal IT experience in a fast-paced, scale-up, or regulated Fintech environment.
- Hands-on Okta Expertise: Proven experience building workflows with Okta Workflows and managing SCIM/LCM app integrations.
- Google Workspace Administration: Deep knowledge of GWS as a primary IdP, including domain security settings, OU management, and admin workflows.
- MDM Policy Creation: Direct experience creating, testing, and deploying compliance baselines, FileVault/BitLocker policies, and configuration profiles in JumpCloud (or equivalent cloud MDM).
- OS & Endpoint Proficiency: Strong track record supporting and securing both macOS and Windows workstations.
- Automation-First Mindset: Demonstrated ability to automate manual administrative tasks using native workflow hooks or API integrations.
- Security & UX Focus: Solid understanding of Zero Trust architecture, least-privilege principles, and security baselines, paired with a focus on seamless user experience.
- Communication: Fluent in English at a professional working level with excellent documentation skills.
Skills Required
- At least 5 years of relevant Internal IT experience in a fast-paced, scale-up, or regulated Fintech environment.
- Hands-on experience building Okta Workflows and managing SCIM/LCM application integrations.
- Deep Google Workspace administration experience, including domain security settings, organizational unit management, and administrative workflows.
- Direct experience creating, testing, and deploying compliance baselines, FileVault or BitLocker policies, and configuration profiles in JumpCloud or an equivalent cloud MDM.
- Strong experience supporting and securing macOS and Windows workstations.
- Demonstrated ability to automate manual administrative tasks using workflow hooks or API integrations.
- Understanding of Zero Trust architecture, least-privilege principles, and security baselines, with a focus on user experience.
- Professional working fluency in English and excellent documentation skills.
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Thunes is a B2B cross-border payments network for emerging markets. Our global platform provides seamless transfer of funds between payment systems in more than 100 countries and 60 currencies. We enable mobile wallet providers, technology companies, PSPs, money transfer operators and banks to make financial services accessible worldwide. We offer four key payment solutions: •Remittance processing, which fosters worldwide financial inclusion •Mass payouts, which support globalisation and the sharing economy •Virtual Accounts, which help corporates around the world boost their revenue •Business payments, which enable businesses to trade easily across borders Since Thunes was established in 2016, we’ve processed real-time transactions for millions of people across the world. Thunes is headquartered in Singapore with regional offices in London, Shanghai and New York.
