Senior IT Engineer - Cloud, Automation & Security

About Strava

Strava is the app for active people. With over 200 million athletes in more than 185 countries, it’s more than tracking workouts—it’s where people make progress together, from new habits to new personal bests. No matter your sport or how you track it, Strava’s got you covered. Find your crew, crush your goals, and make every effort count.
Start your journey with Strava today.

Our mission is simple: to motivate people to live their best active lives. We believe in the power of movement to connect and drive people forward.

We're growing our IT team, and this is a great opportunity to help build a modern, scalable, and coordinated IT environment that's still early in its evolution.

As our Senior IT Engineer, you'll act as a domain expert across our core enterprise systems, crafting and implementing a robust SaaS application architecture while supporting endpoint management, security, and IT operations. You'll drive efficiency through automation, AI, and thoughtful integration, and partner closely with IT leadership and security teams to keep our environment secure and our people productive. If you enjoy solving complex technical challenges and want to help shape an IT function from the ground up, we want to hear from you.

We follow a flexible hybrid model that translates to more than half of your time on-site in our San Francisco office, three days per week.

• Act as a domain expert and optimize our core enterprise cloud applications, including messaging, storage, identity management and governance, and collaboration tools

• Work cross-functionally to automate business processes and IT workflows, implementing scalable integrations across our application stack using APIs and iPaaS tools

• Partner with IT leadership and security teams to secure endpoints using NIST (or similar) frameworks and perform regular user access audits, keeping user experience top of mind

• Implement data privacy standard processes in collaboration with legal and security teams

• Evaluate and recommend tools for data loss prevention and disaster recovery

• Lead and automate patching for company laptops to ensure ongoing vulnerability management

• Provide Tier 2 support for IT incidents and mentor junior team members

• Build and maintain clear documentation, including architecture diagrams and business process flows

• Partner with your manager to define the technical vision for the team and help implement that vision

• Substantial, hands-on experience implementing, managing, and customizing corporate applications such as Google Workspace, Slack, JIRA, Notion, and Linear

• Proficiency with infrastructure management tools such as Okta, JAMF, and In Tune

• Experience working with integration platforms (e.g., Okta Workflows,
  Tray.ai
  , Workato, Boomi, Zapier, or similar tools)

• Strong understanding of REST/SOAP APIs and industry-standard integration practices

• Experience with cloud platforms like AWS, Azure, or GCP

• Proficiency with Google Apps Script, GAM, Python, Java, PHP, or other scripting languages to automate IT tasks

• Solid knowledge of networking fundamentals and protocols (TCP/IP, DNS, SPF, DKIM, DMARC)

• Strong documentation skills and the ability to translate complex systems into clear visual artifacts

• Improve Okta beyond app-assignment into a granular authorization/entitlement model (groups, app roles, admin roles, access policies)

• Review and improve Git Hub/engineering platform access: org ownership, repo privileges, privileged teams, service accounts/apps, access lifecycle

• Define granular access patterns for business applications: birthright access, request-based access, role changes, deprovisioning, periodic access review

• Experience with RPA tools (e.g., Automation…