IT Systems Engineer

Location Type: Remote Employment Type: Full-Time

Position Overview

The Sui Foundation exists to support the development, growth, and adoption of the Sui network. Sui is the first permissionless Layer 1 blockchain designed from the ground up to enable creators and developers to build unique Web3 experiences from gaming to finance. The Sui Foundation is committed to three decentralization principles: Embrace transparency and level the playing field, Communicate openly to build a culture of trust, and Engage directly with the community.

Mission: Onboard the next billion users to web3 by supporting the advancement and global adoption of the Sui blockchain. Vision: To create a better world that unlocks opportunities through universal access and individual ownership.

Location: Hybrid Athens

Team Description

Join the Sui TechOps team and help shape the IT systems that power a secure, global, and distributed company. In this role, you’ll manage devices, access control, and enterprise IT security, while partnering closely with Security and Engineering to safeguard critical Sui assets. You’ll have the opportunity to design and implement new solutions, automate operational workflows, and improve cross-functional processes. Success in this role requires being hands-on, detail-oriented, and committed to elevating our security posture and IT best practices.

Role Description

You will be the backbone of secure and seamless IT operations, ensuring employees can work efficiently and safely. Your strategic approach to improving systems and workflows will have a direct impact on productivity and scalability across the company. How can we better support a globally distributed, security-conscious team? Where can automation and process refinement unlock time and reduce risk?

As an IT Systems Engineer, you will need to manage and secure devices with confidence, proactively resolve issues, and continuously improve the tools and workflows that underpin daily operations. You’ll balance hands-on support with long-term systems thinking, maintaining reliable access today while building infrastructure that scales with the organization’s growth tomorrow.

Responsibilities

• Own and automate onboarding and offboarding processes, including global laptop procurement.
• Manage identity and access for full-time employees and contractors, developing scalable workflows for account lifecycle management.
• Administer identity systems using tools like Okta, Google Workspace, and Slack, including SSO, group management, and access policies.
• Collaborate with HR and Operations to streamline and evolve internal processes for operational efficiency.
• Serve as the first line of support for IT tickets, resolving Tier 1–2 issues across SaaS platforms, endpoints, and identity systems.
• Design and deploy automated workflows using Okta Workflows and AI-based Helpdesk tools.
• Manage macOS endpoints via Kandji, deploying security policies, applications, and scripts to enforce compliance.
• Onboard and configure SaaS applications in Okta, including access automation via SAML, SCIM, or API integration.
• Create and maintain clear documentation for end-user support, onboarding guides, and IT runbooks.
• Provide remote support and basic network troubleshooting for office infrastructure in the EU and US.
• Support security investigations by exporting logs, identifying anomalies, and delivering insights from IT tooling.
• Build custom integrations and automation scripts using APIs (e.g., Google Workspace, Okta, Slack) to support IT workflows and reduce manual ops.

Required Qualifications

• Experience managing modern SaaS applications such as Google Workspace, Zoom, Slack, Notion, and Airtable.
• Hands-on experience deploying and maintaining MDM tools to manage Windows, macOS, and Linux endpoints at scale.
• Strong general troubleshooting skills to diagnose, identify, and resolve technical issues.
• Skilled in setting up SSO integrations and provisioning automation using IdPs like Okta.
• Understanding and experience with domain management, maintaining DNS records, and updating.