Design and deliver reliable, scalable automations across onboarding and offboarding, access provisioning, SaaS license management, and compliance workflows.
You architect solutions, not one-off scripts, and you hold yourself to a high bar for maintainability and documentation.
SAML, OIDC & Federation Engineering: Design, implement, and troubleshoot complex SAML 2.0 and OIDC integrations across enterprise SaaS applications.
Requirements
Amplitude is the leading AI analytics platform, helping over 4,700 customers—including Atlassian, Burger King, NBCUniversal, and Square—build better products and digital experiences.
With powerful AI Agents embedded across our platform, teams can analyze, test, and optimize user experiences faster than ever.
IT Automation & Workflow Engineering: Own and evolve Amplitude's IT automation platform with Okta Workflows as the primary engine.
Identity & Access Management: Own the full Okta configuration surface, SSO integrations, SCIM provisioning, group rules, adaptive MFA, RBAC lifecycle automation, and access review workflows in Lumos.
You are expected to debug the full federation layer including attribute mapping, JIT provisioning, and SCIM reconciliation, and maintain production-grade configurations across the fleet.
You understand both the SP and IdP sides of federation deeply, attribute statements, assertion mapping, binding types, token claims, and PKCE flows are not new territory.
You also have familiarity with Jumpcloud for Windows devices.
AI-Assisted IT Operations: Champion AI adoption within IT, identifying high-value automation opportunities, evaluating AI-native and low-code tooling, and building agentic workflows that augment IT service delivery.
You use LLMs to accelerate your own work (drafting runbooks, triaging issues, summarizing access reviews) and you build AI-powered automations where they create real leverage.
You understand how lifecycle gaps create compliance risk, orphaned accounts, lingering elevated access, missed deprovisioning, and you build the controls and audit trails that close those gaps.
Identity & federation depth: You have built net-new SAML 2.0 and OIDC integrations from scratch on both the SP and IdP sides.
Automation architecture: You have a demonstrated track record of building multi-step, multi-system automation workflows with measurable business impact. Okta Workflows
Technical skills: Comfortable writing Python, Bash, or equivalent to extend low-code platforms, build lightweight tooling, or debug integration issues.
AI proficiency: You actively use AI tools (Claude, Copilot, or similar) to accelerate your own work, and you have built or designed AI-powered automations or agentic workflows.
Genuine curiosity about where LLMs and AI-native tooling create leverage in IT operations is a hard requirement, not a nice-to-have.
experience including complex branching, error handling, and cross-app orchestration •
Experience with enterprise iPaaS platforms (Workato or equivalent) in addition to Okta Workflows
Familiarity with AI tool governance - acceptable use policies, connector security reviews, and data classification in AI contexts •
Experience supporting M&A technical integrations or cross-tenant identity migrations
Zero-trust architecture patterns, CASB/SSPM tooling, or ZTNA experience
Certifications in Okta, Kandji, or Google Workspace Prior
experience at a high-growth tech company with a lean IT team and large scope Who We Are
Our customers love us! They've said we're the #1 product analytics solution for 19 quarters in a row on G2.
Experience
Experience: 5–8+ years in IT systems engineering, with hands-on depth in at least three of: Okta/IdP administration, SAML/OIDC federation engineering, macOS endpoint management (Kandji or Jamf), Google Workspace administration, IT automation and integration, or SOC 2/compliance operations.
Benefits
Amplitude’s Commitment to Diversity Equity & Inclusion (DEI): Amplitude believes that diversity enables the creation of better products, improves the ability to solve complex problems, and drives more powerful solutions.
We care about the well-being of our team: We offer competitive pay and
benefits packages that reflect our commitment to the health and well-being of our Ampliteers.
Excellent Medical, Dental and Vision insurance coverages, with 100% employer-paid premiums for employee Medical, Dental, Vision on select plans
Flexible time off, paid holidays, and more
Generous stipends to spend on what matters most to you, whether that’s wellness (monthly), commuter transit/parking (monthly), learning and development (quarterly), home office equipment (annual), and much more Excellent Parental
benefits including: 12-20 weeks of Paid Parental Leave, Carrot Fertility Benefits/Adoption/Surrogacy support, Back-up Child Care support
We give back to our communities. We give every Ampliteer a charitable giving grant and paid volunteer time off.
This role is eligible for equity,
benefits and other forms of compensation.
Based on Colorado law, the following details are for individuals who will work for Amplitude in Colorado: Colorado range: $98,000 - $147,000 base salary (inclusive of bonus or commission)
Based on legislation in New York City, the following details are for individuals will work for Amplitude in New York City: New York City salary range:$110,000 - $165,000 base salary (inclusive of bonus or commission)
Based on legislation in California, the following details are for individuals who will work for Amplitude California: California salary range: $110,000 - $165,000 base salary (inclusive of bonus or commission)
Based on legislation in Washington state, the following details are for individuals who will work for Amplitude in Washington state: Washington salary range: $98,000 - $147,000base salary (inclusive of bonus or commission)
Based on legislation in Washington state, the following details are for individuals who will work for Amplitude in Washington only: unlimited PTO, 10 to 13 holidays annually (will vary), medical dental and vision PPO and CDHP plans.
Finally, a company sponsored 401(k) retirement plan.
Contact
Learn more at amplitude.com .
Any emails from the Amplitude recruiting team will come from an @ amplitude.com email address.
Additional details
Ranked #1 across multiple categories in G2’s Winter 2026 Report, Amplitude is the best-in-class solution for product, data, and marketing teams.
As an organization, we deliver for our customers by living our values.
We operate from a place of humility, take ownership of problems and successes, approach challenges with a growth mindset, and put our customers at the center of everything we do.
We strive to create an environment of inclusion—one focused on psychological safety, empathy, and human connection—that will allow employees of all backgrounds to thrive.
You own the integration from initial configuration through ongoing reconciliation and incident triage.
You maintain fleet compliance through automated checks and can diagnose complex endpoint issues without escalation.
You maintain clean provisioning and deprovisioning integration between Workspace and Okta.
IT Compliance & Access Reviews: Support SOC 2 evidence collection and access review workflows, including building and maintaining automated pipelines that surface access anomalies, generate reviewer-ready reports, and track remediation to closure.
You understand the compliance surface and can own the operational execution without hand-holding from GRC.
You design and maintain the automated workflows that ensure every joiner, mover, and leaver is handled consistently, completely, and on time.