What are the responsibilities and job description for the IT Systems Administrator position at Figma?
As a member of the IT Engineering team, you will collaborate closely with our broader IT and Security departments to develop, manage, optimize, and secure Figma's internal IT services. Our team maintains essential services and the fleet of endpoints used by all Figmates, including Okta, Google Workspace, and Slack. Our team also oversees backend solutions that support and protect the company, including Jamf and Okta Workflows.
What you’ll do at Figma:
- Configure and customize Okta to fulfill Figma's authentication and authorization needs.
- Design, develop, and maintain integrations using tools like Okta Workflows or custom code to automate repetitive and manual tasks.
- Assist in the management and maintenance of our macOS endpoint infrastructure, ensuring optimal performance and security.
- Develop and implement endpoint security policies and procedures to protect company data and systems.
- Deploy and configure systems via code, using tools such as Git, Terraform, YAML, or similar.
- Collaborate with cross-functional teams to ensure macOS endpoints align with company policies and standards.
- Create and maintain documentation for supported applications, processes, and training materials for internal employees and IT staff.
- Keep current on the SaaS Platforms under the IT Engineering umbrellas, ensuring Figma is implementing best practices and staying current with platform enhancements.
We'd love to hear from you if you have:
- 3 years of experience managing Okta Identity Engine and Okta WorkFlows
- 3 years of experience in macOS endpoint management
- In-depth knowledge of identity and access management concepts and practices
- Experience with macOS security features and tools
- Strong problem-solving and troubleshooting skills
- Excellent communication and interpersonal skills
- Ability to work in a fast-paced environment and manage multiple priorities
- Ability to work independently and as part of a team
While not required, it’s an added plus if you also have:
- Experience with Jamf
- Experience with GitOps / Configuration as code / Terraform
- Knowledge of device trust and zero trust security models
- Proficiency in bash and python scripting