Senior End User System Specialist

Europe's leading online grocery delivery service. Using technology to deliver weekly shopping (25 000 SKUs) in less than three hours in 15 minute time slots, saving our customers time and giving them freedom and flexibility.

The world needs a better food system, one that is more sustainable, more inclusive and which brings healthier and more personalised food to all. Rohlik Group is leading this change. In every city we carefully select the best quality and freshest local produce to save our customers time; from butchers to bakery, and fresh produce directly from farmers via our unique Farm-to-Door program. We carry all the favourite brands, plus a range of affordable own-label products, so our customers don’t miss out on what they love.

The People Experience Team (PXT) combines HR and IT capabilities to deliver a seamless end-to-end employee experience across the company.

Within PXT, the End User Systems function owns the reliability, accessibility, and lifecycle of end-user technology for headquarters employees.

We ensure that every employee has secure, functional, and ready-to-use tools and devices, while maintaining operational stability and enforcing standards.

Scope includes:

• End-user support (HQ)

• Identity & access lifecycle (provisioning, deprovisioning, RBAC execution)

• Device and asset management (HQ)

• SaaS tooling administration (end-user layer)

• Workflow automation and service processes

We do NOT own:

• Warehouse technology and on-site operations

• Core infrastructure architecture (network backbone, hosting platforms)

• Business application ownership

We operate as the technology execution layer within PXT, enabling HR processes through automation, integrations, and scalable systems.

Our mission is simple: ensure a frictionless employee experience while systematically reducing manual work through automation and standardization.

This is an expert-level role combining advanced identity engineering, SaaS administration, automation design, and digital workplace reliability.

As a Senior End User System Specialist, you are the technical owner for identity & access flows, SaaS tooling, workflow automations, and device lifecycle for headquarters.
You are not a “better support agent”. You are an architect of processes, integrations, and improvements that impact the whole company.

You own complex cross-domain issues end-to-end and lead the evolution of the HQ tech ecosystem.

You are not a “better support agent” — you are a trusted expert, responsible for driving improvements, designing solutions, and guiding others.

• Technical Leadership

  • Owns resolution of the most complex, cross-domain issues (identity, access, devices, networks, workflows, SaaS).

  • Acts as an escalation point and quality benchmark for junior colleagues.

  • Defines standards, documentation, and repeatable processes.

  • Leads technical ownership of selected domains (Identity, MDM, SaaS tooling, Warehouse IT, Network areas).

• Process, Automation & AI Enablement

  • Designs automated processes across departments (via Okta Workflows, Slack Workflows, n8n/Make, scripting).

• Uses AI automation tools to eliminate manual work

  • auto-processing tickets

  • data extraction and reconciliation

  • mass updates in SaaS tools

  • routine admin batching (bulk onboarding/offboarding, cleanups)

  • Identifies opportunities to embed AI into daily workflows and trains others to do the same.

  • Continuously reduces operational load through system thinking, simplification, and automation.

• Project Delivery

  • Participates in cross-company initiatives (RBAC redesign, onboarding automation, MDM consolidation, warehouse deployments).

  • Owns parts of project delivery: analysis, design, implementation, documentation, testing.

  • Partners with HR, Security, Ops, and Engineering on process improvements.

• Documentation & Knowledge Sharing

  • Produces high-quality guidelines, architecture notes, asset documentation, network plans.

  • Mentors and trains junior colleagues; contributes to upskilling the entire IT Ops function.

• Identity & Access Governance

  • Architect end-to-end Okta-based identity flows (LCM, Workflows, HR → Okta → SaaS).

  • Redesign onboarding/offboarding, including special scenarios (maternity leave, org changes, new job families).

  • Implement and maintain SAML/SCIM integrations.

• SaaS Administration & Integrations

  • Troubleshoot complex SaaS issues across Google Workspace, Slack, Linear, Confluence, Entra

  • Build two-way integrations between departmental systems (Slack ↔ Linear, HRIS ↔ Okta).

  • Drive RBAC implementation and security governance improvements.

• Device Lifecycle & MDM

  • Lead HQ MDM consolidation (MacOS, Windows, Android).

  • Define security, update, and policy standards for devices used at HQ

  • Own device lifecycle processes, including automation of asset flows.

• 3–5 years of experience in advanced IT support/engineering/integration roles.

• English: upper-intermediate.

• Demonstrated ability to lead improvements, automate processes, mentor others.

• Ownership-driven, proactive, and improvement-oriented.

• Thinks beyond tickets; solves root causes, not symptoms.

• Strong analytical and system-thinking skillset.

• Communicates clearly, documents precisely.

• Able to influence processes and drive change across teams.

• Comfortable with ambiguity and designing structure from scratch.

• Ability to own problems and deliver concrete outcomes.

• Advanced Okta admin (SAML, SCIM, LCM, MFA, Workflows).

• Experience with SaaS ecosystems (Google Workspace, Slack, MDM platforms).

• Proficiency with automation tools (n8n, Make, scripts, API logic).

• Strong identity/access/security governance mindset.

• Understanding of endpoint security and MDM configurations.

• Strong system integration and troubleshooting skills across OS (Windows, MacOS, Linux, Android).

• Ability to design repeatable processes and automate them.

• Fair reward - You’ll get a strong fixed salary, no bonus games, no politics. Great work is rewarded clearly and fairly.

• Good food every day - You’ll enjoy a free lunch every day and fresh fruit & veggies in the office. Because good food fuels great work.

• Life, not just work - You’ll have real flexibility three days in the office, 2 days at the Home Office where it suits you. And unlimited paid vacation based on trust.

• Personal growth - You’ll grow as fast as Rohlik does. Every challenge is a chance to learn and make an impact.

• Real impact - What you do here matters. You’ll see your work changing how people eat and live from day one.

• Recognition among colleagues - Your effort won’t go unnoticed. You can recognise others (and be recognised) through peer credits to use in our internal cafeteria.

• Xtra membership - You’ll get free Xtra membership and 10% cashback on everything you buy on Rohlik.cz.

• Sport & wellbeing - You’ll stay active with company sports challenges or a subsidised Multisport card.

• A team that sticks together - You’ll work with people who move fast, support each other and celebrate wins together.

• If this sounds like you - You’re someone who takes ownership, acts fast and gets things done. Ready to bake something great with us?