Senior IT Systems Engineer
Summary
Horizon3 is hiring a remote (US) Senior IT Systems Engineer to own the controls protecting a distributed workforce: administering Okta identity/SSO, securing the email/collaboration platform (SPF/DKIM/DMARC, anti-phishing, DLP), and managing firewalls, routing, and switching. The role is roughly 60% security/identity/email and 40% network engineering.
- We are seeking a security-minded IT Systems Engineer with a genuine passion for networking — someone equally comfortable hardening identity and email infrastructure as they are managing routing and firewall policy
- This role is roughly 60% security, identity, and email systems and 40% network engineering
- You will own the controls that protect how our distributed workforce authenticates, communicates, and connects, while keeping the underlying network reliable and well-documented
- This role partners closely with Security and the Help Desk team to resolve escalated issues and to keep network, identity, and email infrastructure aligned with company security standards
- Administer and secure Okta (or equivalent IdP/SSO), managing authentication policies, access provisioning, and integration with downstream applications
- Architecting, Administering and secure the company email/collaboration platform, including mail flow rules, spam/phishing filtering, DKIM/DMARC/SPF configuration, and data loss prevention policies
- Own operations, monitoring, and incident response for network, email and identity security controls including firewall policy, and threat detection
- Triage incidents and remediate or escalate per incident response procedures
- Collaborate across teams (Security and Help Desk) to resolve escalated connectivity issues, support onboarding/offboarding, and ensure infrastructure remains aligned with security standards
- Evaluate and recommend improvements to identity architecture, email security posture, and related tooling
- Administer and maintain network infrastructure: switches, routers, firewalls, and wireless access points while also supporting a distributed workforce, including capacity planning and performance monitoring
- Design and implement network changes (VLANs, routing, firewall rule changes) with minimal disruption to business operations
- Maintain accurate documentation of network topology, configurations, and email/identity security architecture
- Manage vendor relationships and support contracts for network, firewall, identity, and email security tooling
- Demonstrate a commitment to integrity, process improvement, and customer satisfaction
Benefits
- Growth Opportunities: Be part of a dynamic and growing team with numerous career advancement opportunities
- Innovation-Driven Culture: Work in a collaborative environment that encourages creativity and out-of-the-box thinking
- Inclusive and Diverse Team: We value diversity and promote an inclusive culture where everyone can thrive
- Flexible Work Environment: Enjoy the convenience and work-life balance that comes with remote work
- Must be able to scope and manage moderately complex projects end-to-end with little to no direction
- Must have experience troubleshooting complex network, identity, and email connectivity issues with minimal escalation
- Must have experience documenting configurations, architecture diagrams, and operational runbooks
- Must have hands-on experience administering an identity/SSO platform (e.g., Okta) in a production environment, including access policies and app integrations
- Must have working knowledge of network security principles, including segmentation, firewall policy management, and VPN architecture
- Must have hands-on experience administering enterprise network infrastructure (switches, routers, firewalls, VPN) in a production environment
- Must have experience administering a cloud email/collaboration platform (Google Workspace or Microsoft 365, or similar)
- Must have experience supporting a distributed or remote-first workforce
- Must have experience configuring and maintaining email security controls, including SPF, DKIM, DMARC, and anti-phishing/anti-spam tooling
- Routing and switching (e.g., Cisco, Meraki, or similar)
- Identity/SSO platform (e.g., Okta, or similar)
- Experience supporting a distributed or remote-first workforce
- Email security gateway / anti-phishing tooling (e.g., Proofpoint, Mimecast, or similar)
- Network monitoring tools
- 3–5 years of experience in systems administration, identity/security engineering, or network administration
- Email/collaboration platform (Google Workspace or Microsoft 365, or similar)
- Enterprise firewalls (e.g., Palo Alto, Fortinet, or similar)
- Relevant certifications such as Security+, CCNA, CCNP, or Okta certifications
- Experience with SASE/SSE platforms or Zero Trust network architecture
- Experience automating identity, network, or email security tasks via scripting (Python, PowerShell, or similar)
- Experience in high-growth SaaS or cybersecurity companies