IT Platform Engineer

About this Role:

• Develop and implement automated workflows and integrations among critical SaaS platforms (NetSuite, Duro, HRIS tools, Google Workspace) using APIs.
• Automate and manage security infrastructure including network security (firewalls, VPNs), endpoint protection, encryption, and secure OS configurations.
• Administer and secure AWS environments (WorkSpaces, EC2, IAM, VPC) with directory integrations (Azure AD, Okta).
• Deploy and maintain VMware virtualization infrastructure (vSphere/ESXi), including migrations, patching, and capacity management.
• Manage IAM solutions across hybrid environments, automating user provisioning and permissions via SCIM, SAML/OAuth. 
• Administer GitLab repositories and CI/CD pipelines, automating permissions and access management through API integrations.
• Optimize existing IT processes and policies to enhance operational efficiency.
• Coordinate disaster recovery and business continuity planning and testing.

Must Haves:

• SaaS & Data Integration: Expertise automating SaaS platforms (NetSuite, Atlassian Cloud, HRIS, GitLab, Tailscale) through APIs/iPaaS, ETL pipelines, and identity standards (SCIM, SAML/OAuth).
• Scripting & Automation: Advanced scripting proficiency (Python, Bash, PowerShell) for cloud/on-prem orchestration, CI/CD workflows, and configuration management.
• Cloud & Virtualization: Hands-on administration of AWS (IAM, EC2, WorkSpaces, VPC) and VMware vSphere, including hybrid environment management and directory integrations (AWS Directory Service, Azure AD, Okta).
• Network Troubleshooting: Proven capability diagnosing complex issues across SaaS, cloud, and on-premises networks, ensuring reliability and performance.
• Automation Mindset: Demonstrated track record transforming manual IT processes into automated, reliable, and testable solutions.

Nice to Haves:

• Familiarity with monitoring, alerting, and ITSM platforms.
• Experience with vulnerability scanning, penetration testing, and incident response.
• Understanding of DevOps and Agile methodologies.
• Knowledge of container platforms (Kubernetes, Docker) and related security practices.
• Familiarity with Google Workspace DLP tools.
• Ability to mentor junior IT staff in security and automation best practices.
• Enterprise security experience (firewalls, VPNs, endpoint protection, OS lockdown) and familiarity with SIEM/log management for real-time threat detection and automated patching.
• Experience in highly regulated or engineering-driven industries (aerospace, defense).

Some of Our Awesome Benefits:

• 100% company-paid medical, dental, and vision insurance option for employees and dependents
• Flexible Spending (FSA) and Health Savings (HSA) Accounts offered with an employer contribution to the HSA
• 100% employer paid Life, AD&D, Short-Term, and Long-Term Disability insurance
• Flexible Time Off policy for vacation and sick leave, and 12 paid holidays
• 401(k) plan and equity options
• Daily catered lunches and snacks
• International exposure to our team in France
• Fully paid parental leave; 14 weeks for primary caregiver and 10 weeks for secondary caregiver
• Carrot Fertility provides comprehensive, inclusive fertility healthcare and family-forming benefits with financial support
• Off-sites and many social events and celebrations
• Relocation assistance when applicable

 *Research shows that while men apply to jobs where they meet an average of 60% of the criteria, women and other marginalized people tend to only apply when they meet 100% of the qualifications. At Loft, we value respectful debate and people who aren’t afraid to challenge assumptions.  We strongly encourage you to apply, even if you don’t check all the boxes.