Fetch

Compensation

Full Description

POSITION SUMMARY This role owns identity and access management (Okta and adjacent identity tooling) and Atlassian/Jira/Confluence platform administration as dedicated, full-time disciplines. It exists to create a specialist role who can get ahead of configurations, designing for scale, and closing any identity gaps (entitlement configurations, contractor and non-employee access, and access-automation). ROLE PURPOSE * Own identity and access management as a full-time discipline: SSO, entitlement governance, and access automation. * Own Atlassian/Jira/Confluence as dedicated platform administration, including the ITDESK project that every team at Fetch depends on. * Identify, propose and implement improvements. * Get ahead of platform and identity risk through architecture and automation, rather than reacting to incidents after they occur. * Provide senior technical depth that the current generalist model cannot sustain. KEY RESPONSIBILITIES 1. IDENTITY & ACCESS MANAGEMENT (OKTA) * Own configuration and administration of Okta SSO, MFA policy, and lifecycle workflows (onboarding, offboarding, role changes). * Own entitlement governance: design and run periodic access reviews, identify and remediate stale or excess access, and close gaps that allowed past entitlement misconfigurations. * Own contractor and non-employee access governance, including time-bound access, approval workflows, and offboarding enforcement. * Integrate and manage third-party application SSO connections; troubleshoot identity-related issues escalated from the team. * Maintain security compliance for identity systems in partnership with Information Security. 2. ACCESS AUTOMATION & RISK REDUCTION * Build and maintain automated workflows for provisioning, deprovisioning, and access review (e.g., via Okta workflows, or adjacent automation tooling) to reduce manual access administration. * Investigate and close automation gaps. * Partner with Information Security on broader architectural patterns and help remediate patterns in IT-administered systems. 3. ATLASSIAN SUITE PLATFORM ADMINISTRATION * Own Jira project configuration, workflows, permission schemes, and automation rules. * Administer Confluence spaces, permissions, and documentation standards. * Support Bitbucket configuration and access where applicable. * Design for scale and plan platform architecture proactively rather than administering reactively. 4. PLATFORM & IDENTITY ARCHITECTURE * Evaluate and recommend new tooling, integrations, or automation that improve identity governance or platform scalability. * Maintain technical documentation for identity and platform systems sufficient for audit, onboarding, and incident response. 5. CROSS-FUNCTIONAL PARTNERSHIP * Partner with Information Security on identity-related risk, audit evidence, and remediation of access-related findings. * Partner with the Manager of IT Operations on prioritization, escalation, and coordination with the rest of the IT Operations team. * Serve as the technical point of contact for identity and Atlassian platform questions across the company. 6. DOCUMENTATION & CONTINUOUS IMPROVEMENT * Maintain clear, current documentation for identity workflows, access policies, and platform configuration. * Identify recurring manual work in identity or platform administration and drive it toward automation or self-service. * Contribute to access request, approval, and audit workflow improvements. DECISION RIGHTS Within established security and platform standards, this role is authorized to: * Configure and modify Okta and Atlassian platform settings within approved change-management practices. * Design and implement access automation workflows. * Recommend and prioritize platform architecture changes. * Flag and pause changes that present apparent identity or platform risk pending review. REQUIRED QUALIFICATIONS * 5+ years in IT engineering or systems administration with a concentration in identity and access management and/or SaaS platform administration. * Direct hands-on experience administering Okta in a production environment, including SSO, MFA, and lifecycle automation. * Direct experience administering Atlassian tools (Jira, Confluence) at an organizational scale, including workflow and permission design. * Working knowledge of SAML/SSO concepts and access governance practices. * Familiarity with scripting, automation tooling, and API/webhook-based integrations. * Strong documentation habits and ability to work independently on platform architecture decisions. PREFERRED QUALIFICATIONS * Experience remediating identity-related security incidents or entitlement misconfigurations. * Experience with JumpCloud, Google Workspace admin, or AWS IAM. * Experience designing access review or automated deprovisioning programs. * B.S. in Computer Science, Information Systems, or equivalent experience. * Relevant certifications (Okta Certified Administrator, Atlassian certifications, or equivalent). CORE COMPETENCIES * Deep technical ownership of high-blast-radius systems * Proactive risk identification and architecture-first thinking * Automation-first problem solving * Independent judgment and prioritization * Cross-functional partnership with Security and IT leadership * Documentation discipline