This role exists to own the core stack of our Workplace Technology team: the systems that give our people their devices, identities, access and support. You will be the technical lead for Jamf, Google Workspace, Cloudflare Zero Trust, Okta and Freshservice, managing them as code wherever possible. You will also help us reach a clear goal: AI agents handle the majority of level 1 triage, so our people spend their time on the problems that need a human. This is a hands‐on senior role reporting to the TechOps Lead.
What you'll do
Own the workplace stack
Jamf:
macOS fleet management end to end, including zero-touch enrolment, configuration profiles, patching, app deployment and security baselines
Google Workspace:
tenant administration, org units, sharing and DLP policies, Gemini and security controls
Cloudflare Zero Trust:
WARP, Access policies, Gateway filtering and TLS inspection, device posture and secure access to internal apps
Okta:
our identity source of truth, including SSO and SCIM integrations, group rules, MFA and authentication policies
Freshservice:
service desk design, including catalogue, workflows, SLAs, knowledge base and integrations
Key responsibilities and deliverables
Manage these platforms as code (Terraform, Git, CI/CD and peer review) and extend that approach to areas still configured by hand
Design and build AI agents that triage, enrich, route and resolve level 1 requests in Freshservice, with clear guardrails, audit trails and human escalation
Automate identity and device lifecycle (onboarding, role changes and offboarding) across Okta, Google Workspace and Jamf
Act as the escalation point for complex workplace issues and run root-cause analysis so problems don't recur
Write clear documentation and runbooks, and evaluate new tools, vendors and renewals for the stack
Collaboration and leadership
Work closely with our DevOps, Security and Automation & AI engineers, and with business teams across Australia and the UK
Set the technical direction and roadmap for Workplace Technology, and mentor junior team members on engineering practices
Compliance and regulatory
Harden our workplace security posture with the Security team: device compliance, conditional access, least privilege and data loss prevention
Maintain controls and provide audit evidence for a regulated insurer (for example SOC 2 and APRA-aligned controls)
Key skills & competencies




Technical skills (essential)
5+ years in systems, IT or workplace engineering, including at least 2 years at senior level
Deep, hands‐on administration of Okta and Google Workspace in a SaaS‐first company
Strong macOS fleet management experience with Jamf Pro
Experience with Cloudflare Zero Trust or a comparable ZTNA/SASE platform (for example Zscaler or Netskope)
Proven configuration‐as‐code practice: Terraform or similar, Git, code review and CI pipelines
Scripting in Python, Bash or similar, and comfort with REST APIs and webhooks
Experience running or redesigning an ITSM tool such as Freshservice, Jira Service Management or ServiceNow
Technical skills (desirable)
Hands‐on experience building with LLMs or agent frameworks (for example Claude, MCP servers or tool‐calling agents) for IT or ops automation
Jamf, Okta or Google Workspace certifications
Experience in a regulated industry such as insurance, banking or healthcare
Familiarity with GRC or security tooling (for example Vanta or Wiz) and AWS IAM Identity Center
Behavioural skills
A security‐first mindset, with the judgement to balance user experience and control
Explicit written communication and the ability to explain technical trade‐offs to non‐technical colleagues
Ownership: you see problems through to root cause and leave systems better than you found them
This role is great for:
Ideal for someone who would rather fix a problem once in code than solve it by hand a hundred times. You enjoy owning a stack end to end, you already work with configuration as code, and you're excited to use AI and agents to automate real work rather than just talk about it.
You'll thrive here if you like high autonomy, an engineering‐minded team, and the stakes of getting identity, access and devices right in a regulated business.
Role location
This role will be based in Sydney, with a hybrid working model. Minimum 3 days in the office (e.g. Monday, Tuesday, Thursday),



plus occasional on‐site support when hardware or office infrastructure needs it.
Why Open?
It's an exciting time to join Open and be part of a tech scale‐up. We provide our team with:
Highly competitive compensation, including share options – we believe in paying people what they're worth and having everyone in our company share in our success
High levels of autonomy and trust so you can do your best work
Growth opportunities internally – as you grow, your role can too.
Flexible working – we are about impact, not time at your desk.
We encourage freedom and responsibility, including the ability to work from anywhere.
Paid company parental leave, supporting all parents as they balance career and family.
Bonus 5 days of leave – additional paid leave designed to support rest and wellbeing once standard leave has been utilised.
Personal development allowance – adaptable annual benefit to support learning, wellbeing and personal growth.
About us
Open is a global tech company on a mission to make it easy for everyone to get the most from their insurance. We launched in Australia in ****, opened our London office in **** and our Manchester office this year, rebuilding one of the world's least digitally mature industries from the ground up. We do this through three products that work together to put customers first, from start to finish. Open Embedded lets businesses offer insurance directly inside their own apps and websites – so customers can get covered without leaving the experience they're already in. Open Agentic uses AI safely and responsibly to guide customers through buying a policy, answering questions in plain English so they understand exactly what they're getting. Open Intel spots the moments when someone is most likely to need cover – like buying a car or moving house – and helps us reach them at the right time, in a helpful way. We're a Certified B Corporation with a global team across the UK, Australia and New Zealand. Diverse perspectives and lived experiences make us better at what we do. If your CV doesn't tick every box, apply anyway. Let us know if you need any adjustments through the process and we'll make it work. Open is for builders – people who are intellectually curious, courageous and reject the idea that "it can't be done". If that sounds like you, apply and let's build the future of insurance together.

📌 Senior Systems Engineer (New South Wales)
🏢 Open
📍 New South Wales