Senior IT Platform Engineer On-site

Our mission at Oura is to empower every person to own their inner potential. Our award-winning products help our global community gain a deeper knowledge of their readiness, activity, and sleep quality by using their Oura Ring and its connected app. We've helped millions of people understand and improve their health by providing daily insights and practical steps to inspire healthy lifestyles.

Empowering the world starts with living our values and empowering our team. As a quickly growing company focused on helping people live healthier and happier lives, we ensure that our team members have what they need to do their best work — both in and out of the office.

Oura is redefining what it means to understand your body — and the platform engineering team that underpins that mission is expanding. As a Senior IT Platform Engineer, you'll own hands‑on technical delivery across enterprise identity, endpoint engineering, network infrastructure, and day‑to‑day systems engineering for a globally distributed workforce scaling at pace.

You'll work alongside senior engineers on a lean, technically excellent team — operating with high autonomy from week one. You are expected to bring production‑level ownership, a strong IT engineering foundation, and the judgment to prioritize and execute independently in a fast‑moving environment.

The right person brings an AI‑first mindset — they proactively identify automation opportunities, build with scale in mind, and use modern tooling to eliminate toil. They are equally employee experience focused — they understand that the systems they build and maintain are the foundation of how every Oura employee works every day, and they hold themselves accountable to that standard.

San Francisco Bay Area–based role. In‑office presence at OURA’s San Francisco office is required; this is not a fully remote role.

• Contribute actively to Oura's enterprise identity program — Okta lifecycle management, SCIM provisioning, JML workflow automation, IGA governance via Lumos, and PAM deployment via Delinea — as a full contributing engineer alongside the Staff engineer and delivery partners
• Own endpoint engineering globally — MDM fleet management across macOS and Windows, policy enforcement, compliance baselines, zero‑touch provisioning, and device lifecycle for a globally distributed workforce
• Support and maintain network infrastructure in coordination with the Network‑as‑a‑Service partner — operational support, change management, and monitoring across global office locations
• Serve as an escalation point for the Global IT support team — triaging complex issues, resolving what the support tier cannot, and closing the loop with clear documentation
• Drive IaC practices — Terraform, Pulumi, or equivalent — treating infrastructure with the same engineering rigor as application code across the full IT stack
• Operate as a strong async contributor in a distributed, global team — proactive communication, structured documentation, and strong Jira/Confluence agile discipline across time zones

We Would Love to Consider You for This Role if You Have:

• 8+ years of enterprise IT platform or systems engineering experience in a high‑growth, fast‑paced technology company — infrastructure, identity, endpoint, security and network domains
• Hands‑on Okta or modern enterprise IAM platform proficiency — must have deployed, configured, or administered it in a production environment; this is a hard requirement
• Hands‑on IAM/IGA experience — SCIM provisioning, JML workflow automation, directory services, and entitlement management; must have built or operated these, not just supported them
• Infrastructure as code in practice — Terraform, Pulumi, Ansible, or equivalent at enterprise scale; version‑controlled, peer‑reviewed, production‑grade
• Multi‑cloud platform engineering experience across at least 2 of AWS, Azure, and/or GCP — must have operated in a multi‑cloud environment and contributed to infrastructure decisions with confidence
• Endpoint engineering proficiency — MDM fleet management across macOS and/or Windows (Mosyle, Intune, or equivalent); policy enforcement, zero‑touch provisioning, patch…