Job Title: Senior System Engineer.

Location: Remote in LATAM.

Start Date: ASAP.

Length: 6 months.

Job Description:

- Our client is seeking a Senior Systems Engineer to serve as the primary owner of SaaS portfolio – spanning every application the business adopts outside of NetSuite, Salesforce, and Workday. This role is the single accountable owner for onboarding, administering, securing, and retiring the full breadth of business SaaS applications: from collaboration and productivity applications to legal, finance, HR-adjacent, and operational tools across all departments.
- In addition to SaaS portfolio ownership, this engineer serves as secondary Microsoft 365 administrator – a capable, knowledgeable backup to the Sr. Microsoft Systems Engineer who can independently administer the Microsoft environment, support projects, and maintain continuity without being the primary subject matter expert.
- The idóneo candidate is a systems generalist with strong depth in SaaS administration, identity integration, and access management – someone who thrives on bringing order and ownership to a sprawling, fast-moving SaaS environment and who understands that “the business just adopted a new tool” always lands on their desk.

QUALIFICATIONS:

- 7+ years of systems engineering experience spanning multiple disciplines (cloud, networking, identity/SaaS, and automation).
- Strong, hands-on experience with the Microsoft 365 ecosystem (Entra, Exchange, SharePoint, Intune, Teams).
- Strong working knowledge of enterprise networking (routing, switching, firewalls, and hybrid connectivity).
- Experience with SSO and SCIM integrations (SAML, OIDC, and SCIM provisioning) and identity and access management.
- Experience with automation and integration tooling (PowerShell, Microsoft Graph, and iPaaS / low-code platforms such as Workato or n8n).
- Experience supporting security hardening and compliance frameworks such as ISO 27001:2022 or SOC 2.
- Proven ability to work across teams and translate between technical disciplines and stakeholders.
- Strong documentation and communication skills, with the ability to lead technical efforts and work with both technical and non-technical stakeholders.

SaaS Portfolio Ownership

- Serve as the single accountable owner for Saas portfolio outside of NetSuite, Salesforce, and Workday.
- Own the full lifecycle of each SaaS application: evaluation, procurement coordination, onboarding, configuration, ongoing administration, user support, and decommission.
- Act as the IT point of contact for any new SaaS application the business requests – assessing it,



integrating it into identity and security stack, and taking ongoing ownership of it.
- Administer and maintain the current SaaS portfolio, which includes tools such as Slack Enterprise, Zoom, Jira, Confluence, FreshService, Docusign, Dropbox, and a broad range of department-specific applications – with the understanding that the portfolio will grow and change continuously.
- Maintain a current inventory of all SaaS applications, owners, license counts, renewal dates, and integration status.
- Lead consolidation and decommission efforts for redundant or legacy tools, reducing sprawl and eliminating shadow IT.
- Partner with department leaders to assess new tool requests, ensure they meet security and compliance requirements, and govern the adoption process.

Identity Management

- Own the integration of every SaaS application in the portfolio into identity platform (Entra ID) via SAML or OIDC and configure SCIM provisioning.
- Ensure all applications enforce SSO as the sole authentication method and that user provisioning and deprovisioning are automated via SCIM wherever supported.
- Configure and maintain application-level access policies, group assignments, and role mappings within the identity platform.
- Manage identity integrations and access policies using SAML, OAuth, OIDC, and API-based automation.
- Audit SSO and provisioning coverage across the portfolio regularly, closing gaps and remediating applications operating outside centralized identity control.
- Serve as the technical owner for identity-related issues within managed SaaS applications, coordinating with the identity team on cross-platform incidents.

Microsoft 365 Administration (Secondary)

- Serve as MARA’s secondary Microsoft 365 administrator – capable of independently administering the environment, supporting projects, and maintaining continuity in the absence of the Sr. Microsoft Systems Engineer.
- Collaborate with the Sr. Microsoft Systems Engineer on Microsoft 365 systems including, but not limited to Entra ID, Exchange, SharePoint, Intune, Teams, Defender, Purview, etc.
- Maintain sufficient depth in Microsoft 365 to troubleshoot issues, respond to incidents, and support projects without requiring escalation for routine administration.





Networking

- Support enterprise networking in partnership with network engineering, including routing, switching, firewalls, and connectivity.
- Help troubleshoot and resolve complex network issues that intersect with systems and cloud environments.
- Support secure hybrid connectivity between on-premise sites and cloud.

Automation, Security & Operations

- Build and maintain automations and integrations (e.g., PowerShell, Microsoft Graph, and iPaaS / low-code tools such as Workato or n8n) to streamline operations across teams.
- Monitor, troubleshoot, and optimize the performance, availability, and reliability of systems across domains.
- Harden security posture and support compliance initiatives such as ISO 27001:2022 in partnership with InfoSec.
- Maintain thorough documentation, standards, and runbooks across the areas they support.

Advanced Support & Escalations

- Serve as the Tier 3 escalation point for complex incidents unresolved by the Helpdesk, particularly those involving SaaS applications, identity, or integrations.
- Troubleshoot across systems including network, DNS, authentication, device management, and SaaS integrations.
- Perform root-cause analysis and permanently resolve recurring issues through system improvements.
- Work with vendors and external partners to troubleshoot or enhance integrated systems.

Governance, Security & Documentation

- Implement documentation, governance, and access controls across all enterprise tools.
- Maintain accurate documentation for all managed applications, including configuration guides, integration details, access policies, and runbooks.
- Partner with InfoSec to ensure all SaaS applications meet security and compliance standards, including SSO enforcement, data handling, and audit readiness.
- Participate in IT security, compliance, and risk remediation projects.
- Mentor Helpdesk engineers, raising team proficiency and operational maturity.

Critical Qualities:

- Versatile generalist who moves fluidly across cloud, networking, identity, SaaS, and automation.
- Strong collaborator and connector who bridges teams and disciplines.
- Strong sense of ownership over cross-cutting work end to end.
- Security-minded across domains.
- Clear thinking and composure during incidents and outages.
- Ability to mentor and raise the technical bar across teams.
- Excellent documentation habits.
- Strong organizational skills and attention to detail.

Languages

- Advanced level of English.

Job Types: Full-time, Temporary
Contract length: 6 months

Work Location: Remote

📌 Senior System Engineer (México)
🏢 Fast Dolphin
📍 México