This role exists to own the core stack of our Workplace Technology team: the systems that give our people their devices, identities, access and support. You will be the technical lead for Jamf, Google Workspace, Cloudflare Zero Trust, Okta and Freshservice, managing them as code wherever possible.

You will also help us reach a clear goal: AI agents handle the majority of level 1 triage, so our people spend their time on the problems that need a human. This is a hands‑on senior role reporting to the TechOps Lead.

What you'll do

Own the workplace stack

- Jamf: macOS fleet management end to end, including zero-touch enrolment, configuration profiles, patching, app deployment and security baselines
- Google Workspace: tenant administration, org units, sharing and DLP policies, Gemini and security controls
- Cloudflare Zero Trust: WARP, Access policies, Gateway filtering and TLS inspection, device posture and secure access to internal apps
- Okta: our identity source of truth, including SSO and SCIM integrations, group rules, MFA and authentication policies
- Freshservice: service desk design, including catalogue, workflows, SLAs, knowledge base and integrations

Key responsibilities and deliverables

- Manage these platforms as code (Terraform, Git, CI/CD and peer review) and extend that approach to areas still configured by hand
- Design and build AI agents that triage, enrich, route and resolve level 1 requests in Freshservice, with clear guardrails, audit trails and human escalation
- Automate identity and device lifecycle (onboarding, role changes and offboarding) across Okta, Google Workspace and Jamf
- Act as the escalation point for complex workplace issues and run root‑cause analysis so problems don't recur




- Write explicit documentation and runbooks, and evaluate new tools, vendors and renewals for the stack

Collaboration and leadership

- Work closely with our DevOps, Security and Automation & AI engineers, and with business teams across Australia and the UK
- Set the technical direction and roadmap for Workplace Technology, and mentor junior team members on engineering practices

Compliance and regulatory

- Harden our workplace security posture with the Security team: device compliance, conditional access, least privilege and data loss prevention
- Maintain controls and provide audit evidence for a regulated insurer (for example SOC 2 and APRA‑aligned controls)

Technical skills (essential)

- 5+ years in systems, IT or workplace engineering, including at least 2 years at senior level
- Deep, hands‑on administration of Okta and Google Workspace in a SaaS‑first company
- Strong macOS fleet management experience with Jamf Pro
- Experience with Cloudflare Zero Trust or a comparable ZTNA/SASE platform (for example Zscaler or Netskope)
- Proven configuration‑as‑code practice: Terraform or similar, Git, code review and CI pipelines
- Scripting in Python, Bash or similar, and comfort with REST APIs and webhooks
- Experience running or redesigning an ITSM tool such as Freshservice,



Jira Service Management or ServiceNow
- Hands‑on experience building with LLMs or agent frameworks (for example Claude, MCP servers or tool‑calling agents) for IT or ops automation
- Jamf, Okta or Google Workspace certifications
- Experience in a regulated industry such as insurance, banking or healthcare
- Familiarity with GRC or security tooling (for example Vanta or Wiz) and AWS IAM Identity Center
- A security‑first mindset, with the judgement to balance user experience and control
- Clear written communication and the ability to explain technical trade‑offs to non‑technical colleagues
- Ownership: you see problems through to root cause and leave systems better than you found them

This role is great for:

Ideal for someone who would rather fix a problem once in code than solve it by hand a hundred times. You enjoy owning a stack end to end, you already work with configuration as code, and you're excited to use AI and agents to automate real work rather than just talk about it.

You'll thrive here if you like high autonomy, an engineering‑minded team, and the stakes of getting identity, access and devices right in a regulated business.

This role will be based in Sydney, with a hybrid working model.

Minimum 3 days in the office (e.g. Monday, Tuesday, Thursday), plus occasional on‑site support when hardware or office infrastructure needs it.

Why Open?

It's an exciting time to join Open and be part of a tech scale‑up. We provide our team with:

- Highly competitive compensation, including share options – we believe in paying people what they're worth and having everyone in our company shar

📌 Senior Systems Engineer (Sydney)
🏢 Open Technology Services
📍 Sydney