SasS Systems Administrator; Corporate IT

Voleon is a technology company that applies state‑of‑the‑art machine learning techniques to real‑world problems in finance. For nearly two decades, we have led our industry and worked at the frontier of applying machine learning to investment management. We have become a multi‑billion‑dollar asset manager, and we have ambitious goals for the future.

Voleon is looking for a SaaS Systems Engineer to join our Corporate IT Engineering (Corp‑ITE) team and play a mission‑critical role in the design, deployment, and maintenance of our enterprise IT infrastructure. This position emphasizes SaaS platform engineering, and user support, while also ensuring reliable operations of various Voleon enterprise systems and tools.

In this role, you will be directly involved in supporting the firm’s software engineering, quantitative research, and financial operations teams. You will contribute to both strategic infrastructure projects and day‑to‑day operational excellence, helping to drive productivity across the organization in a fast‑paced, high‑performance environment.

• Design, architect, and implement enterprise SaaS platforms including identity systems, collaboration tools, and security platforms. Develop platform architecture documentation and technical runbooks.
• Build integrations between SaaS platforms using APIs. Develop automation solutions using scripting languages (Power Shell, Python, Bash).
• Design and implement IAM workflows including authentication, provisioning, conditional access, etc.
• Administer and optimize SaaS platforms (Microsoft 365/Entra , Slack, Zoom, Atlassian, MDMs). Implement security best practices with the Security team.
• Monitor platform health, troubleshoot complex issues, and coordinate with vendors on escalations. Lead evaluations of new solutions.
• Partner with Security, Corp‑ITS, and business stakeholders to translate requirements into technical solutions and deliver projects.
• Lead cross‑functional IT projects. Stay current with SaaS trends, emerging technologies, and best practices.

• 5‑7+ years designing, implementing, and managing enterprise SaaS platforms at scale.
• Strong expertise in cloud identity and access management (Entra , Okta) with deep knowledge of authentication protocols (SAML, OAuth, OIDC, SCIM), SSO, conditional access, MFA, and PAM.
• Proficiency in at least two scripting languages (Power Shell, Python, Bash). Experience with REST APIs, API authentication (OAuth, JWT), and JSON/YAML.
• Expert‑level Microsoft 365 and Entra . Solid experience with endpoint management (Intune/Jamf Pro) and collaboration platforms (Slack, Zoom, Google Workspace).
• Strong macOS knowledge. Solid understanding of networking (TCP/IP, DNS, DHCP, TLS/SSL, VPN) and directory services (Active Directory, Entra , LDAP).
• Understanding of security tooling (EDR, DLP, CASB), certificate management, PKI, compliance frameworks (SOC 2, GDPR), and zero‑trust architectures.
• Hands‑on experience with SaaS marketplace integrations (Okta Integration Network, Microsoft App Source, Google Workspace Marketplace).
• Experience supporting technical users (engineers, data scientists, researchers) and scaling IT infrastructure.
• Track record leading cross‑functional projects. Strong technical writing and documentation skills. Experience mentoring engineers.
• Excellent problem‑solving across complex, multi‑platform environments. Strong communication skills with technical and non‑technical audiences.
• Proven ability to manage multiple priorities. Collaborative team player who works independently.

• Knowledge of multi‑tenant SaaS architectures including tenant isolation, data residency, and compliance controls. Familiarity with SaaS security posture management (SSPM) tools.
• Experience with infrastructure‑as‑code tools (Terraform, Ansible) and Dev Ops practices including CI/CD pipelines, version control (Git), and automated testing.
• Linux systems administration experience, particularly in containerized or cloud‑native environments.
• Experience with Apple Business Manager (ABM) or Apple Device Enrollment Program (DEP/ADE).
• Background with Atlassian suite (Jira, Confluence) including customization…