Thunes operates a global cross-border payments infrastructure and API platform connecting banks, digital wallets and mobile‑money providers to enable interoperable, real‑time transfers across 130+ countries and 80+ currencies.
<div class="c-message_kit__gutter"> <div class="c-message_kit__gutter__right" data-qa="message_content"> <div class="c-message_kit__blocks c-message_kit__blocks--rich_text"> <div class="c-message__message_blocks c-message__message_blocks--rich_text" data-qa="message-text"> <div class="p-block_kit_renderer" data-qa="block-kit-renderer"> <div class="p-block_kit_renderer__block_wrapper p-block_kit_renderer__block_wrapper--first"> <div class="p-rich_text_block"> <h3><strong>About the Role</strong></h3> <p>We are looking for a hands-on <strong>IT Systems Administrator</strong> to join our Internal IT team in a fast-growth environment. In this role, you will operate at the intersection of startup speed and banking-grade security.</p> <p>You won't just be resolving tickets; you will actively build and refine our identity architecture, design automated lifecycle workflows (Joiner/Mover/Leaver), and author device compliance policies across our fleet.</p> <h3><strong>Responsibilities</strong></h3> <ul> <li><strong>Identity & Access Management:</strong> Administer Google Workspace as our master source of identity (Primary IdP) for authentication and access control.</li> <li><strong>Workflow & Provisioning Automation:</strong> Design, build, and maintain automated lifecycle management (JML) using <strong>Okta Workflows</strong> and SCIM provisioning to downstream apps (Slack, Jira, Zoom, 1Password, etc.).</li> <li><strong>MDM Policy & Configuration:</strong> Author, deploy, and audit system configuration profiles and compliance policies in <strong>JumpCloud</strong> across both macOS and Windows fleets.</li> <li><strong>Service Desk & Escalations:</strong> Provide high-UX, tier-2/3 support via <strong>Jira Service Management (JSM)</strong> and Slack, using ticket data to identify root causes and automate repeat issues.</li> <li><strong>Security & Compliance Enforcement:</strong> Maintain Zero Trust access controls, enforce SOC2/ISO 27001 compliance standards, and manage endpoint protection (<strong>Sophos</strong>) with minimal user friction.</li> <li><strong>Global Standardization:</strong> Work closely with the team to author knowledge base documentation in Confluence, standardizing IT operations across international offices.</li> <li><strong>Proactive Maintenance:</strong> Monitor IT infrastructure, audit permissions, and recommend tooling or API-first improvements to eliminate manual workload.</li> </ul> <h3><strong>Professional Experience & Qualifications</strong></h3> <ul> <li><strong>Minimum 5 years</strong> of relevant Internal IT experience in a fast-paced, scale-up, or regulated Fintech environment.</li> <li><strong>Hands-on Okta Expertise:</strong> Proven experience building workflows with <strong>Okta Workflows</strong> and managing SCIM/LCM app integrations.</li> <li><strong>Google Workspace Administration:</strong> Deep knowledge of GWS as a primary IdP, including domain security settings, OU management, and admin workflows.</li> <li><strong>MDM Policy Creation:</strong> Direct experience creating, testing, and deploying compliance baselines, FileVault/BitLocker policies, and configuration profiles in <strong>JumpCloud</strong> (or equivalent cloud MDM).</li> <li><strong>OS & Endpoint Proficiency:</strong> Strong track record supporting and securing both <strong>macOS</strong> and <strong>Windows</strong> workstations.</li> <li><strong>Automation-First Mindset:</strong> Demonstrated ability to automate manual administrative tasks using native workflow hooks or API integrations.</li> <li><strong>Security & UX Focus:</strong> Solid understanding of Zero Trust architecture, least-privilege principles, and security baselines, paired with a focus on seamless user experience.</li> <li><strong>Communication:</strong> Fluent in <strong>English</strong> at a professional working level with excellent documentation skills.</li> </ul> <p><strong>Package and Benefits</strong></p> <ul> <li>Great compensation package, including performance & company bonus</li> <li>Private Health insurance for you and your family</li> <li>Mobile allowance </li> <li>Employee wellbeing & support program</li> <li>Learning & Development budget</li> <li>Our team is global, you will work with 40+ different nationalities spread across 5 continents</li> </ul> <p><em>Sounds like you? Apply now!</em></p> </div> </div> </div> </div> </div> </div> </div> <div class="c-message_actions__container c-message__actions"> <p><strong>About Thunes</strong></p> <p>Thunes is the Smart Superhighway to move money around the world. Thunes’ proprietary Direct Global Network allows Members to make payments in real-time in over 130 countries and more than 80 currencies.</p> <p>Thunes’ network connects directly to over 7 billion mobile wallets and bank accounts worldwide, as well as 15 billion cards via more than 320 different payment methods, such as GCash, M-Pesa, Airtel, MTN, Orange, JazzCash, Easypaisa, AliPay, WeChat Pay and many more.</p> <p>Thunes’ Direct Global Network differentiates itself through its worldwide reach, in-house SmartX Treasury System and Fortress Compliance Platform, ensuring Members of the network receive unrivaled speed, control, visibility, protection and cost efficiencies when making real-time payments, globally.</p> <p>Members of Thunes’ Direct Global Network include gig economy giants like Uber and Deliveroo, super-apps like Grab and WeChat, MTOs, fintechs, PSPs and banks.</p> <p>Headquartered in Singapore, Thunes has offices in 14 locations, including Abidjan, Barcelona, Beijing, Dubai, Hong Kong, Johannesburg, London, Manila, Nairobi, Paris, Riyadh, San Francisco and Shanghai.</p> <p>For more information, visit: <u><a href="https://www.thunes.com/" target="_blank">https://www.thunes.com/</a></u></p> <div class="c-message_kit__gutter"> <div class="c-message_kit__gutter__right" data-qa="message_content"> <div class="c-message_kit__blocks c-message_kit__blocks--ric