Point your AI agent at freehire and let it find you a job.

Get the CLI →

Horizon3

NewBe an early applicant

Senior IT Systems Engineer

Posted Updated
Discussion

Summary

Horizon3 is hiring a remote (US) Senior IT Systems Engineer to own the controls protecting a distributed workforce: administering Okta identity/SSO, securing the email/collaboration platform (SPF/DKIM/DMARC, anti-phishing, DLP), and managing firewalls, routing, and switching. The role is roughly 60% security/identity/email and 40% network engineering.

  • We are seeking a security-minded IT Systems Engineer with a genuine passion for networking — someone equally comfortable hardening identity and email infrastructure as they are managing routing and firewall policy
  • This role is roughly 60% security, identity, and email systems and 40% network engineering
  • You will own the controls that protect how our distributed workforce authenticates, communicates, and connects, while keeping the underlying network reliable and well-documented
  • This role partners closely with Security and the Help Desk team to resolve escalated issues and to keep network, identity, and email infrastructure aligned with company security standards
  • Administer and secure Okta (or equivalent IdP/SSO), managing authentication policies, access provisioning, and integration with downstream applications
  • Architecting, Administering and secure the company email/collaboration platform, including mail flow rules, spam/phishing filtering, DKIM/DMARC/SPF configuration, and data loss prevention policies
  • Own operations, monitoring, and incident response for network, email and identity security controls including firewall policy, and threat detection
  • Triage incidents and remediate or escalate per incident response procedures
  • Collaborate across teams (Security and Help Desk) to resolve escalated connectivity issues, support onboarding/offboarding, and ensure infrastructure remains aligned with security standards
  • Evaluate and recommend improvements to identity architecture, email security posture, and related tooling
  • Administer and maintain network infrastructure: switches, routers, firewalls, and wireless access points while also supporting a distributed workforce, including capacity planning and performance monitoring
  • Design and implement network changes (VLANs, routing, firewall rule changes) with minimal disruption to business operations
  • Maintain accurate documentation of network topology, configurations, and email/identity security architecture
  • Manage vendor relationships and support contracts for network, firewall, identity, and email security tooling
  • Demonstrate a commitment to integrity, process improvement, and customer satisfaction

Benefits

  • Growth Opportunities: Be part of a dynamic and growing team with numerous career advancement opportunities
  • Innovation-Driven Culture: Work in a collaborative environment that encourages creativity and out-of-the-box thinking
  • Inclusive and Diverse Team: We value diversity and promote an inclusive culture where everyone can thrive
  • Flexible Work Environment: Enjoy the convenience and work-life balance that comes with remote work
  • Must be able to scope and manage moderately complex projects end-to-end with little to no direction
  • Must have experience troubleshooting complex network, identity, and email connectivity issues with minimal escalation
  • Must have experience documenting configurations, architecture diagrams, and operational runbooks
  • Must have hands-on experience administering an identity/SSO platform (e.g., Okta) in a production environment, including access policies and app integrations
  • Must have working knowledge of network security principles, including segmentation, firewall policy management, and VPN architecture
  • Must have hands-on experience administering enterprise network infrastructure (switches, routers, firewalls, VPN) in a production environment
  • Must have experience administering a cloud email/collaboration platform (Google Workspace or Microsoft 365, or similar)
  • Must have experience supporting a distributed or remote-first workforce
  • Must have experience configuring and maintaining email security controls, including SPF, DKIM, DMARC, and anti-phishing/anti-spam tooling
  • Routing and switching (e.g., Cisco, Meraki, or similar)
  • Identity/SSO platform (e.g., Okta, or similar)
  • Experience supporting a distributed or remote-first workforce
  • Email security gateway / anti-phishing tooling (e.g., Proofpoint, Mimecast, or similar)
  • Network monitoring tools
  • 3–5 years of experience in systems administration, identity/security engineering, or network administration
  • Email/collaboration platform (Google Workspace or Microsoft 365, or similar)
  • Enterprise firewalls (e.g., Palo Alto, Fortinet, or similar)
  • Relevant certifications such as Security+, CCNA, CCNP, or Okta certifications
  • Experience with SASE/SSE platforms or Zero Trust network architecture
  • Experience automating identity, network, or email security tasks via scripting (Python, PowerShell, or similar)
  • Experience in high-growth SaaS or cybersecurity companies

Skills

What Senior Software Engineering jobs ask for — and how much of it you have →
Apply

See also

Software Engineering jobs by country — openings, pay and top skills →

Tailor your CV for this role?

We couldn't check your fit for this role — add a CV to your profile to see it next time.