Zapier

Lead AI-first IT operations including identity, endpoint management, and zero-trust architecture for a global team. | 8+ years IT experience with 3+ years management in a high-growth remote environment and strong technical skills in Okta, Jamf, and SaaS governance. | AI at Zapier At Zapier, we build and use automation every day to make work more efficient, creative, and human. So if you’re using AI tools while applying here - that’s great! We just ask that you use them responsibly and transparently. Check out our guidance on How to Collaborate with AI During Zapier’s Hiring Process, including how to use AI tools like ChatGPT, Claude, Gemini, or others during our hiring process - and when not to. Hi there! This role sits at the center of two things that matter a lot to Zapier right now: keeping ~800 Zapiens productive and secure, and building the identity and access controls enterprise buyers scrutinize. I'm looking for someone who wants to run IT as a product, not a help desk — someone who sees AI-first operations and zero-trust architecture as the standard, not a stretch goal, and who's excited to build the team that makes that the norm. Zapier is ~800 people, fully remote, and IT's first job is to keep the team productive and secure and to deliver a reliable, fast service, smooth onboarding and offboarding, and a great employee experience at scale. That sits on a backbone of identity (Okta), endpoint management (Jamf), and SaaS governance across 200+ apps. This internal foundation is the core of the role. As Zapier moves upmarket, IT carries a second and growing mandate: the identity, access, and governance controls that enterprise buyers need to scrutinize. That makes a deep, capacity-backed partnership with Security central to the job and increasingly tied to how Zapier earns enterprise trust. We're looking for a Senior Manager who's excited to lead a high performing, globally distributed team that's driven by building systems that increasingly run on Zapier's own product — energized by the shift toward enterprise-grade IT, and eager to be the gold standard for other IT teams using Zapier too. Our Commitment to Applicants Culture and Values at Zapier Zapier Guide to Remote Work Zapier Code of Conduct Diversity and Inclusivity at Zapier What you'll do Raise the bar on IT service — AI-first. Move IT from reactive support to a proactive, AI-first operation for ~800 Zapiens — onboarding, offboarding, and employee experience — with self-service provisioning, deflection, and proactive remediation as the operating model. Architect identity, endpoints, and zero-trust access. Evolve Okta (SSO, SCIM, OIDC, SAML, MFA, RBAC/ABAC, lifecycle automation) and Jamf (device trust, EDR) into an enterprise-grade access layer, and own the IT side of zero-trust end to end — identity, device, and access — as a co-owner with Security. Govern tooling as a portfolio. Treat the app portfolio as a strategic asset. Bring structure, ROI accountability, and vendor governance to 200+ tools, not just approval workflows. Own major incidents end to end. Lead high-severity IT operational incident response and the root-cause and prevention that follow. Security incidents route to Security's Detection & Response program; IT partners on containment and remediation. Plan IT around where Zapier is headed. Translate company direction — enterprise, AI, scale — into an IT roadmap you own and deliver, so IT is ready ahead of the need rather than catching up to it. Influence and hold the line. Set and enforce policy on access, procurement, and security across People Ops, Finance, Legal, Product, and Engineering, moving senior stakeholders, not escalating to them. Partner with Security on security policy, operationalizing and enforcing it within IT's domain. Build the IT org, not just the team. Turn a flat, reactive team into a tiered, globally distributed function, depth, not dependence. Expect to lead from in the mix, a player-coach who rolls up their sleeves on the hardest problems while building the team that makes that the exception, not the norm. You'll lead a team of ~6 today, evolving the structure as IT scales. Power the enterprise motion. Make IT the internal proving ground for enterprise access controls and feed gaps to Product — as requested, be the IT reference in enterprise deals, speaking to IT personas about how we run IT on Zapier and handle access and governance at scale. What we're looking for Proven IT leadership at scale. 8+ years in IT/Systems Engineering, including 3+ years managing engineers — ideally scaling IT in a high-growth, fully remote company. You build teams with real standards and accountability, develop people deliberately, and build depth rather than dependency across timezones. AI, automation, and product mindset. You've built, championed, and implemented AI or automation into IT or security operations and treat it as core infrastructure. You're curious by nature — new products, AI, and automation are what get you excited to come to work — and you see running IT on Zapier's own product as a competitive advantage, not a nice-to-have. Technical credibility. Deep hands-on Okta (SSO, SCIM, OIDC, SAML, MFA, RBAC/ABAC, lifecycle automation) and Jamf (device trust, EDR), plus SaaS governance at scale — you're the person your team trusts on hard calls. You've partnered with Security on zero trust, enterprise access controls, and compliance (SOC 2 Type 2, ISO 27001), and understand the work well enough to own the controls and evidence that support them. Strategic execution. You turn business direction into a clear IT strategy, and you follow through: plans become results, not slide decks. Operational and financial rigor. You run to SLAs and metrics, lead major-incident response, and run SaaS spend with FinOps discipline — optimization targets and ROI. Influence and communication. You operate across Security, Legal, Finance, and Engineering at a senior level — you win buy-in and drive people to act, not just weigh in. You frame things clearly in writing and in person, don't bury the lede, and don't soften important messages until they lose meaning. You're equally credible in customer-facing conversations, representing Zapier's IT posture to enterprise IT buyers and security teams. Nice to have For a role this broad, we value credentials that span identity, endpoint, security/compliance, and IT operations over deep specialization in any one — and treat all of these as signals, not requirements. Certifications (any across these domains; we value breadth over a single track) Identity & access: Okta Certified (Administrator / Professional / Consultant). Endpoint / MDM: Jamf Certified (Admin or Pro), Apple Deployment. Security: CISSP, CISM, or Security+ — CCSP (cloud security) a plus. Compliance & audit: CISA, or ISO 27001 Lead Implementer / Lead Auditor. Cloud: AWS certification (our stack includes AWS/IaC). IT service management: ITIL (service-delivery and SLA maturity). Program / people leadership: PMP or equivalent a plus. Application Deadline: The anticipated application window is 30 days from the date job is posted, unless the number of applicants requires it to close sooner or later, or if the position is filled. Even though we’re an all-remote company, we still need to be thoughtful about where we have Zapiens working. Check out this resource for a list of countries where we currently cannot have Zapiens permanently working.

Design and scale identity and access management systems including OAuth/JWT infrastructure and service-to-service authentication. | Experienced fullstack or platform engineer with expertise in authentication/authorization systems, OAuth, JWT, and modern permission models, capable of working across the stack and collaborating across teams. | AI at Zapier At Zapier, we build and use automation every day to make work more efficient, creative, and human. So if you’re using AI tools while applying here - that’s great! We just ask that you use them responsibly and transparently. Check out our guidance on How to Collaborate with AI During Zapier’s Hiring Process, including how to use AI tools like ChatGPT, Claude, Gemini, or others during our hiring process - and when not to. Job Posted: March 17, 2026 Updated: April 29, 2026 Location: Americas - North, Central and South America Zapier is building the foundational systems that enable users and services to securely interact across our platform. As a Senior Fullstack Engineer on the Identity Platform team, you’ll design and scale the systems that define and enforce access across Zapier — from permissions and policies to OAuth/JWT infrastructure and service-to-service authentication. This is a high-impact platform role: you’ll shape how access is modeled, enforced, and scaled across Zapier, establishing consistent patterns that power secure interactions across a large, distributed system. The systems you build will be used by many teams and services, forming the foundation for how authentication and authorization work across the company. Your work will directly support Zapier’s core product strategy and influence how access is enforced at scale, enabling secure automation, enterprise-grade governance, and the next generation of capabilities across the platform. About you • You’re an experienced fullstack or platform engineer who has built real-world authentication and authorization systems at scale. You’ve helped define or evolve IAM platforms—not just used them—through collaboration across engineering, product, and other stakeholders. You bring experience with OAuth, JWTs, token-based authentication, and service-to-service auth, and are comfortable working with modern permission models such as RBAC, ABAC, or relationship-based access control. • You think in platforms, not features. You’ve built shared systems other teams depend on, and understand how to design stable APIs, manage breaking changes, and maintain strong boundaries as systems scale. You have solid systems instincts and consistently consider security, scalability, and correctness in your designs. • You’re comfortable working across the stack. This is a fullstack role on a platform team—you’ll primarily build backend systems, but also contribute to developer-facing UIs and tooling when needed. You don’t need to be an expert in every layer, but you’re not blocked by any of them. • You move quickly and work well in ambiguity. You believe building enterprise-grade systems can be both fast and secure, and you use that mindset to ship working solutions early, using prototypes to drive alignment rather than waiting for perfect specs. You’re comfortable iterating, discarding work when needed, and treating it as part of the learning loop. • You use AI agents as a core part of your workflow, leveraging them to explore codebases, accelerate development, and prototype solutions quickly. You understand their limitations, continuously refine your approach, and help others on your team work more effectively with them. • You operate with strong ownership and communication. You take initiative, work transparently in an async environment, and keep stakeholders informed without being asked. You’re comfortable engaging directly with both internal engineering teams and enterprise customers, and you use written artifacts, prototypes, and demos to influence and drive clarity and alignment. Things you'll do • Be a thought leader in the Identity domain, helping to set the vision for our platforms to enable Zapier’s engineering teams to move fast and securely • Partner with Product and Engineering leadership to define and implement Zapier’s Governance strategy. Evolve Zapier’s IAM platform to provide consistent, reliable controls for our largest Enterprise customers • Design and evolve authorization systems that power permissions, roles, policies, and access control across Zapier’s ecosystem • Build and scale OAuth and token infrastructure, including access tokens, refresh tokens, and scopes. Lead cross-team efforts to unify and simplify auth patterns across Zapier • Develop and maintain JWT infrastructure (signing, validation, key rotation) used across APIs and services • Define and implement service-to-service authentication patterns (client credentials, service identity, token propagation) • Improve and enforce authorization consistency across services through SDKs, middleware, and shared platform patterns • Partner with product and infrastructure teams to standardize access control models across the product • Drive platform-level decisions around security, performance, and scalability of access management systems Level This is a Senior Engineer role. Senior engineers at Zapier own outcomes end-to-end within their team and extend impact beyond it. You'll coordinate across ownership boundaries, shape technical direction for adjacent systems, and bring other engineers along with you. Our level definitions may look different from what you've seen elsewhere. We'll be transparent about leveling before you reach the final stages. Application Deadline: The anticipated application window is 30 days from the date job is posted, unless the number of applicants requires it to close sooner or later, or if the position is filled. Even though we’re an all-remote company, we still need to be thoughtful about where we have Zapiens working. Check out this resource for a list of countries where we currently cannot have Zapiens permanently working.