engineering
Posted Jun 12Senior IT Engineer
at Amplitude
San Francisco, United StatesOn-site
Responsibilities
- Design and deliver reliable, scalable automations across onboarding and offboarding, access provisioning, SaaS license management, and compliance workflows.
- You architect solutions, not one-off scripts, and you hold yourself to a high bar for maintainability and documentation.
- SAML, OIDC & Federation Engineering: Design, implement, and troubleshoot complex SAML 2.0 and OIDC integrations across enterprise SaaS applications.
Requirements
- Amplitude is the leading AI analytics platform, helping over 4,700 customers—including Atlassian, Burger King, NBCUniversal, and Square—build better products and digital experiences.
- With powerful AI Agents embedded across our platform, teams can analyze, test, and optimize user experiences faster than ever.
- IT Automation & Workflow Engineering: Own and evolve Amplitude's IT automation platform with Okta Workflows as the primary engine.
- Identity & Access Management: Own the full Okta configuration surface, SSO integrations, SCIM provisioning, group rules, adaptive MFA, RBAC lifecycle automation, and access review workflows in Lumos.
- You are expected to debug the full federation layer including attribute mapping, JIT provisioning, and SCIM reconciliation, and maintain production-grade configurations across the fleet.
- You understand both the SP and IdP sides of federation deeply, attribute statements, assertion mapping, binding types, token claims, and PKCE flows are not new territory.
- You also have familiarity with Jumpcloud for Windows devices.
- AI-Assisted IT Operations: Champion AI adoption within IT, identifying high-value automation opportunities, evaluating AI-native and low-code tooling, and building agentic workflows that augment IT service delivery.
- You use LLMs to accelerate your own work (drafting runbooks, triaging issues, summarizing access reviews) and you build AI-powered automations where they create real leverage.
- You understand how lifecycle gaps create compliance risk, orphaned accounts, lingering elevated access, missed deprovisioning, and you build the controls and audit trails that close those gaps.
- Identity & federation depth: You have built net-new SAML 2.0 and OIDC integrations from scratch on both the SP and IdP sides.
- Automation architecture: You have a demonstrated track record of building multi-step, multi-system automation workflows with measurable business impact. Okta Workflows
- Technical skills: Comfortable writing Python, Bash, or equivalent to extend low-code platforms, build lightweight tooling, or debug integration issues.
- AI proficiency: You actively use AI tools (Claude, Copilot, or similar) to accelerate your own work, and you have built or designed AI-powered automations or agentic workflows.
- Genuine curiosity about where LLMs and AI-native tooling create leverage in IT operations is a hard requirement, not a nice-to-have.
- experience including complex branching, error handling, and cross-app orchestration •
- Experience with enterprise iPaaS platforms (Workato or equivalent) in addition to Okta Workflows
- Familiarity with AI tool governance - acceptable use policies, connector security reviews, and data classification in AI contexts •
- Experience supporting M&A technical integrations or cross-tenant identity migrations
- Zero-trust architecture patterns, CASB/SSPM tooling, or ZTNA experience
- Certifications in Okta, Kandji, or Google Workspace Prior
- experience at a high-growth tech company with a lean IT team and large scope Who We Are
- Our customers love us! They've said we're the #1 product analytics solution for 19 quarters in a row on G2.
Experience
- Experience: 5–8+ years in IT systems engineering, with hands-on depth in at least three of: Okta/IdP administration, SAML/OIDC federation engineering, macOS endpoint management (Kandji or Jamf), Google Workspace administration, IT automation and integration, or SOC 2/compliance operations.
Benefits
- Amplitude’s Commitment to Diversity Equity & Inclusion (DEI): Amplitude believes that diversity enables the creation of better products, improves the ability to solve complex problems, and drives more powerful solutions.
- We care about the well-being of our team: We offer competitive pay and
- benefits packages that reflect our commitment to the health and well-being of our Ampliteers.
- Excellent Medical, Dental and Vision insurance coverages, with 100% employer-paid premiums for employee Medical, Dental, Vision on select plans
- Flexible time off, paid holidays, and more
- Generous stipends to spend on what matters most to you, whether that’s wellness (monthly), commuter transit/parking (monthly), learning and development (quarterly), home office equipment (annual), and much more Excellent Parental
- benefits including: 12-20 weeks of Paid Parental Leave, Carrot Fertility Benefits/Adoption/Surrogacy support, Back-up Child Care support
- We give back to our communities. We give every Ampliteer a charitable giving grant and paid volunteer time off.
- This role is eligible for equity,
- benefits and other forms of compensation.
- Based on Colorado law, the following details are for individuals who will work for Amplitude in Colorado: Colorado range: $98,000 - $147,000 base salary (inclusive of bonus or commission)
- Based on legislation in New York City, the following details are for individuals will work for Amplitude in New York City: New York City salary range:$110,000 - $165,000 base salary (inclusive of bonus or commission)
- Based on legislation in California, the following details are for individuals who will work for Amplitude California: California salary range: $110,000 - $165,000 base salary (inclusive of bonus or commission)
- Based on legislation in Washington state, the following details are for individuals who will work for Amplitude in Washington state: Washington salary range: $98,000 - $147,000base salary (inclusive of bonus or commission)
- Based on legislation in Washington state, the following details are for individuals who will work for Amplitude in Washington only: unlimited PTO, 10 to 13 holidays annually (will vary), medical dental and vision PPO and CDHP plans.
- Finally, a company sponsored 401(k) retirement plan.
Contact
- Learn more at amplitude.com .
- Any emails from the Amplitude recruiting team will come from an @ amplitude.com email address.
Additional details
- Ranked #1 across multiple categories in G2’s Winter 2026 Report, Amplitude is the best-in-class solution for product, data, and marketing teams.
- As an organization, we deliver for our customers by living our values.
- We operate from a place of humility, take ownership of problems and successes, approach challenges with a growth mindset, and put our customers at the center of everything we do.
- We strive to create an environment of inclusion—one focused on psychological safety, empathy, and human connection—that will allow employees of all backgrounds to thrive.
- You own the integration from initial configuration through ongoing reconciliation and incident triage.
- You maintain fleet compliance through automated checks and can diagnose complex endpoint issues without escalation.
- You maintain clean provisioning and deprovisioning integration between Workspace and Okta.
- IT Compliance & Access Reviews: Support SOC 2 evidence collection and access review workflows, including building and maintaining automated pipelines that surface access anomalies, generate reviewer-ready reports, and track remediation to closure.
- You understand the compliance surface and can own the operational execution without hand-holding from GRC.
- You design and maintain the automated workflows that ensure every joiner, mover, and leaver is handled consistently, completely, and on time.