Job Description :

Celigo is looking for a Senior IT Systems Engineer (MDM/IDM) who is ready to take full, end-to-end ownership of endpoint management and identity access at a growing global SaaS company. This is not a maintenance role it is a builder's role. The ideal candidate has a proven track record of designing and implementing identity models and MDM solutions from the ground up, thrives in a lean and fast-paced environment, and brings the technical depth to close gaps, drive automation, and operationalize security controls at scale.

What would you do if hired?

Endpoint Management :

- Own Jamf Pro end-to-end including configuration profiles, zero touch enrollment, Jamf Protect, Jamf Connect operationalization, patch management, and compliance reporting for the Mac fleet

- Own Windows MDM end-to-end on JumpCloud configuration, enrollment, policy enforcement, and compliance reporting for the Windows fleet (migration from Intune currently in progress)

- Define and execute the long-term fleet management strategy evaluating whether a single cross-platform solution or purpose-built tools best serve the organization

- Close the gap on patching cadence and enforcement build the process, set the policy, and ensure adherence

- Implement and maintain developer endpoint controls that balance security posture with engineering workflow

- Serve as the technical point of contact for endpoint-related security controls in partnership with the Security team

Identity & Access :

- Build and operationalize Celigo's identity model on top of Google Workspace as IdP serving as the hands-on engineering owner of the model

- Partner with the IT team to build and refine automated Lifecycle Management (LCM) provisioning and deprovisioning of apps and access tied to onboarding and offboarding events

- Implement SSO coverage across the SaaS stack in support of the SSO roadmap, partnering with Security on prioritization

- Implement the access governance framework including group ownership, access review cadence, and a least-privilege model

- Drive manual provisioning to near-zero overtime through automation

Security & Compliance :

- Translate security directives into implemented and verified controls across endpoint and identity surfaces

- Partner with the Security team to ensure IT-managed systems meet security requirements and audit expectations

- Own compliance evidence collection and maintain policy and process documentation for MDM and identity controls

Who are we looking for?

We are looking for a senior, hands-on IT engineer who has built identity and endpoint solutions not just maintained them. The ideal candidate understands what good looks like in a modern SaaS IT environment, brings a bias toward automation and scalability, and can operate with a high degree of ownership in a lean, globally distributed team. If you have experience redesigning identity architectures, operationalizing MDM platforms, and driving security compliance we would love to hear from you!

Skills & Abilities :

Must Have :

- Hands-on Jamf Pro expertise configuration profiles, zero touch enrollment, Jamf Protect, and Jamf Connect (not just familiarity)

- Deep, platform-agnostic MDM expertise with the ability to be effective regardless of the platform familiarity with Intune, Jamf, or comparable solutions expected

- Demonstrated experience building or significantly redesigning an identity and access architecture, preferably on Google Workspace or a similar IdP

- Strong understanding of SSO (SAML/OIDC), group-based access, and access lifecycle management

- Experience automating provisioning and deprovisioning via built-in tools, scripting, or integration platforms

- Strong foundation in security principles as applied to endpoint posture and identity governance

- Ability to work US hours or maintain meaningful overlap with US business hours

Strong Plus :

- Experience with Apple DDM (Declarative Device Management) and the future direction of MDM

- Scripting or automation background in Bash, Python, or equivalent for building provisioning workflows

- Familiarity with integration platforms for building LCM automation

- Google Workspace admin experience beyond basic user management

- Prior experience in a SaaS company IT environment with a distributed, global team

- Experience participating in security audits or compliance programs such as SOC 2 or ISO 27001

Education & Experience :

- 7+ years in IT engineering or systems administration with a strong focus on endpoint management and/or identity

- Hands-on experience with Jamf Pro, JumpCloud, Intune, or comparable MDM platforms

- Demonstrated experience building or redesigning identity and access models on Google Workspace or a similar IdP

- Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience)

- Based in Hyderabad, India remote-friendly with willingness to be onsite as needed

- Reports to the Head of IT

Here youll experience :

- A flexible, hybrid work culture that values autonomy, collaboration, and trust

- A fast-paced, high-growth environment where innovation and ownership are encouraged at every level

- Continuous learning and upskilling opportunities through internal training, mentorship, and global collaboration

- Exceptional teammates who bring passion, purpose, and creativity to everything they do

- A supportive, inclusive workplace that celebrates diverse ideas and perspectives

- Comprehensive health insurance coverage for employees and dependents

- Generous leave benefits, including paid time off, wellness days, and parental leave

- Recognition programs and career growth opportunities designed to help you thrive

- Modern office spaces that promote connection, collaboration, and fun.

Diversity, Equity, Inclusion, and Accessibility :

As a company, one of the values we hold most dear is fostering a safe, collaborative environment to bring out the best in us, so we created our Taking a Stand Initiative. Our TAS initiative is a volunteer committee open to all Celigans, with representation from underrepresented voices within our company. We believe, unequivocally, that everyone deserves to be in a place where they feel welcome as they are. Learn more about Taking a Stand.

Celigo is proud to be an equal-opportunity workplace. We are committed to equal employment opportunities regardless of race, color, ancestry, national origin, religion, creed, age, disability, sex, gender, sexual orientation, gender identity, gender expression, medical condition, genetic information, marital status, military and veteran status, or any other characteristic protected by applicable law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.