San Mateo, CA

Salary
$115,000–$172,500from the description
Posted
Aug 3, 2026
Location
San Mateo, CA
Last confirmed open
Sep 24, 2026

What this job asks for AI summary

This role is the primary identity platform engineer for a multi-company organization, responsible for designing and operating automated user lifecycle flows (joiner/mover/leaver), managing SSO/SCIM integrations across hundreds of SaaS applications, and maintaining a dual-instance Okta architecture that isolates regulated fintech systems. It also carries full on-site IT ownership for the San Mateo office — device provisioning, AV/conference room support, and hands-on end-user support roughly four days per week.

Senior level · 5+ years · San Francisco-Oakland-Hayward, CA · Full-time

Must have (15)
OktaSAMLSCIMOIDC or OAuthSSOOkta Workflows, Tines or ServalPython, PowerShell or JavaScriptCI/CDAWS or GCPIntune or FleetdmZoom RoomsLogitech Rally BarClaude or GensparkmacOSWindows
Nice to have (5)
Google WorkspaceMicrosoft 365SlackJiraGitHub

“or” means any one of them counts — you don't need all of them.

We read this from the posting text with AI. Skim the description below before ruling yourself out.

How this req sits in the market our data

Roughly 3 people in the San Francisco-Oakland-Hayward, CA area plausibly meet what this posting asks for (network and computer systems administrators). range 1–6

Applicant volume Light — Few people clear these requirements, so an application that does clear them gets looked at. Worth applying to even if you miss a nice-to-have.

What gives you an edge
Okta Workflows1%Zoom Rooms2%SCIM4%SAML6%

Rare in this occupation — lead with these, and say what you built with them.

What won't set you apart
Python62%CI/CD50%AWS50%Intune45%

Most people in this occupation already list these. Still required — just not what gets you shortlisted.

What the occupation pays Median $132,532 (middle half $103,068–$167,147). This posting is about at that midpoint.

Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Aug 5, 2026. It is a model, not a headcount.

Why we read it this way (7)

SOC classification required a judgment call: the role blends deep identity platform engineering (Okta automation, API scripting, lifecycle pipelines) with classic IT/systems administration (device provisioning, AV support, on-site queue ownership). The engineering and automation work could support 15-1252 Software Developers, but the primary day-to-day scope — operating and administering identity infrastructure and an office site — aligns more closely with 15-1244. The runner-up is noted accordingly.

The compensation figure ($115,000–$172,500) is described as 'target total compensation' inclusive of equity, bonus, and benefits — it is not a pure base salary range. The figures are reported as stated.

Claude (with GenSpark as an alternative) is listed under required qualifications with firm language ('Proven use of AI tooling for IT work such as Claude'). The 'such as' qualifier means the specific tool is interchangeable, not that the requirement is optional, so it is treated as a hard gate with GenSpark as an alternative.

Intune and FleetDM are listed as preferred MDM tools within the required qualifications block ('MDM (Intune, FleetDM preferred)'); the MDM capability itself is a hard gate, with Intune as the primary and FleetDM as an alternative.

Python, PowerShell, and JavaScript are presented as interchangeable scripting options within a single required qualification; Python is listed as the primary with the others as alternatives.

AWS and GCP are presented as interchangeable cloud platform options within a single required qualification.

Google Workspace, Microsoft 365, Slack, Jira, GitHub, and Slack Enterprise Grid all appear under the 'Nice to Have' section and are marked as preferred.

Read the full posting

The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.

Apply

Apply on employer site ↗