IT Engineer
at Thunes · 251-500 employees
Series D · $150M · Apr 2025
- Location
- Barcelona, Barcelona, Spain
- Posted
- 5d ago
at Thunes · 251-500 employees
Thunes operates a global cross-border payments infrastructure and API platform connecting banks, digital wallets and mobile‑money providers to enable interoperable, real‑time transfers across 130+ countries and 80+ currencies.
<div id="message-list_1787564692.962039"> <div> <div> <div> <div> <div> <div> <div> <div> <div> <div> <div>About the Role<br>We are looking for a hands-on <strong>IT Systems Administrator</strong> to join our Internal IT team in a fast-growth environment. In this role, you will operate at the intersection of startup speed and banking-grade security.<br>You won't just be resolving tickets; you will actively build and refine our identity architecture, design automated lifecycle workflows (Joiner/Mover/Leaver), and author device compliance policies across our fleet.<br>Responsibilities</div> <ul> <li><strong>Identity & Access Management:</strong> Administer Google Workspace as our master source of identity (Primary IdP) for authentication and access control.</li> <li><strong>Workflow & Provisioning Automation:</strong> Design, build, and maintain automated lifecycle management (JML) using <strong>Okta Workflows</strong> and SCIM provisioning to downstream apps (Slack, Jira, Zoom, 1Password, etc.).</li> <li><strong>MDM Policy & Configuration:</strong> Author, deploy, and audit system configuration profiles and compliance policies in <strong>JumpCloud</strong> across both macOS and Windows fleets.</li> <li><strong>Service Desk & Escalations:</strong> Provide high-UX, tier-2/3 support via <strong>Jira Service Management (JSM)</strong> and Slack, using ticket data to identify root causes and automate repeat issues.</li> <li><strong>Security & Compliance Enforcement:</strong> Maintain Zero Trust access controls, enforce SOC2/ISO 27001 compliance standards, and manage endpoint protection (<strong>Sophos</strong>) with minimal user friction.</li> <li><strong>Global Standardization:</strong> Work closely with the team to author knowledge base documentation in Confluence, standardizing IT operations across international offices.</li> <li><strong>Proactive Maintenance:</strong> Monitor IT infrastructure, audit permissions, and recommend tooling or API-first improvements to eliminate manual workload.</li> </ul> <div>Professional Experience & Qualifications</div> <ul> <li><strong>Minimum 5 years</strong> of relevant Internal IT experience in a fast-paced, scale-up, or regulated Fintech environment.</li> <li><strong>Hands-on Okta Expertise:</strong> Proven experience building workflows with <strong>Okta Workflows</strong> and managing SCIM/LCM app integrations.</li> <li><strong>Google Workspace Administration:</strong> Deep knowledge of GWS as a primary IdP, including domain security settings, OU management, and admin workflows.</li> <li><strong>MDM Policy Creation:</strong> Direct experience creating, testing, and deploying compliance baselines, FileVault/BitLocker policies, and configuration profiles in <strong>JumpCloud</strong> (or equivalent cloud MDM).</li> <li><strong>OS & Endpoint Proficiency:</strong> Strong track record supporting and securing both <strong>macOS</strong> and <strong>Windows</strong> workstations.</li> <li><strong>Automation-First Mindset:</strong> Demonstrated ability to automate manual administrative tasks using native workflow hooks or API integrations.</li> <li><strong>Security & UX Focus:</strong> Solid understanding of Zero Trust architecture, least-privilege principles, and security baselines, paired with a focus on seamless user experience.</li> <li><strong>Communication:</strong> Fluent in <strong>English</strong> at a professional working level with excellent documentation skills.</li> </ul> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div>