IT Platform Engineer

Summary

Join Loft Orbital's IT team and play a critical role in securing, automating, and optimizing internal and SaaS platforms. Collaborate with infrastructure engineering, finance, and the People team to develop scalable and secure solutions. This position offers the opportunity to contribute to Loft's innovative mission of seamless space access using cutting-edge technologies. You will develop and implement automated workflows and integrations among critical SaaS platforms. You will also automate and manage security infrastructure and administer AWS and VMware environments. The role involves managing IAM solutions, administering GitLab, optimizing IT processes, and coordinating disaster recovery planning.

Requirements

• SaaS & Data Integration: Expertise automating SaaS platforms (NetSuite, Atlassian Cloud, HRIS, GitLab, Tailscale) through APIs/iPaaS, ETL pipelines, and identity standards (SCIM, SAML/OAuth)
• Scripting & Automation: Advanced scripting proficiency (Python, Bash, PowerShell) for cloud/on-prem orchestration, CI/CD workflows, and configuration management
• Cloud & Virtualization: Hands-on administration of AWS (IAM, EC2, WorkSpaces, VPC) and VMware vSphere, including hybrid environment management and directory integrations (AWS Directory Service, Azure AD, Okta)
• Network Troubleshooting: Proven capability diagnosing complex issues across SaaS, cloud, and on-premises networks, ensuring reliability and performance
• Automation Mindset: Demonstrated track record transforming manual IT processes into automated, reliable, and testable solutions

Responsibilities

• Develop and implement automated workflows and integrations among critical SaaS platforms (NetSuite, Duro, HRIS tools, Google Workspace) using APIs
• Automate and manage security infrastructure including network security (firewalls, VPNs), endpoint protection, encryption, and secure OS configurations
• Administer and secure AWS environments (WorkSpaces, EC2, IAM, VPC) with directory integrations (Azure AD, Okta)
• Deploy and maintain VMware virtualization infrastructure (vSphere/ESXi), including migrations, patching, and capacity management
• Manage IAM solutions across hybrid environments, automating user provisioning and permissions via SCIM, SAML/OAuth
• Administer GitLab repositories and CI/CD pipelines, automating permissions and access management through API integrations
• Optimize existing IT processes and policies to enhance operational efficiency
• Coordinate disaster recovery and business continuity planning and testing

Preferred Qualifications

• Familiarity with monitoring, alerting, and ITSM platforms
• Experience with vulnerability scanning, penetration testing, and incident response
• Understanding of DevOps and Agile methodologies
• Knowledge of container platforms (Kubernetes, Docker) and related security practices
• Familiarity with Google Workspace DLP tools
• Ability to mentor junior IT staff in security and automation best practices
• Enterprise security experience (firewalls, VPNs, endpoint protection, OS lockdown) and familiarity with SIEM/log management for real-time threat detection and automated patching
• Experience in highly regulated or engineering-driven industries (aerospace, defense)

Benefits

• 100% company-paid medical, dental, and vision insurance option for employees and dependents
• Flexible Spending (FSA) and Health Savings (HSA) Accounts offered with an employer contribution to the HSA
• 100% employer paid Life, AD&D, Short-Term, and Long-Term Disability insurance
• Flexible Time Off policy for vacation and sick leave, and 12 paid holidays
• 401(k) plan and equity options
• Daily catered lunches and snacks
• International exposure to our team in France
• Fully paid parental leave; 14 weeks for primary caregiver and 10 weeks for secondary caregiver
• Carrot Fertility provides comprehensive, inclusive fertility healthcare and family-forming benefits with financial support
• Off-sites and many social events and celebrations
• Relocation assistance when applicable