<h3 style="text-align: justify;"><span style="font-family: 'times new roman', times, serif;">Who we are</span></h3> <div style="text-align: justify;"> <p><span style="font-family: 'times new roman', times, serif;">Gatik, the leader in autonomous middle-mile logistics, is revolutionizing the B2B supply chain with its autonomous transportation-as-a-service (ATaaS) solution and prioritizing safe, consistent deliveries while streamlining freight movement by reducing congestion. The company focuses on short-haul, B2B logistics for Fortune 500 retailers and in 2021 launched the world’s first fully driverless commercial transportation service with Walmart. Gatik's Class 3-7 autonomous trucks are commercially deployed across major markets, including Texas, Arkansas, and Ontario, Canada, driving innovation in freight transportation. </span></p> <p><span style="font-family: 'times new roman', times, serif;">The company's proprietary Level 4 autonomous technology, Gatik Carrier™, is custom-built to transport freight safely and efficiently between pick-up and drop-off locations on the middle mile. With robust capabilities in both highway and urban environments, Gatik Carrier™ serves as an all-encompassing solution that integrates advanced software and hardware powering the fleet, facilitating effortless integration into customers' logistics operations. </span></p> </div> <h3 style="text-align: justify;"><span style="font-family: 'times new roman', times, serif;">About the role</span></h3> <p><span style="font-family: 'times new roman', times, serif;">The IT IAM & SaaS Integration Engineer is the architect of our digital perimeter. You will transform manual provisioning into automated, "Zero-Touch" workflows, ensuring our SaaS stack (Google workspace, Okta, Slack, Azure, etc.) is perfectly synced and compliant. You will architect the identity lifecycle across our hybrid Google/Okta environment. Your mission is to eliminate manual ticketing by leveraging IGA tools (e.g. Lumos) to automate access requests and governance. You will ensure that every SaaS integration is secure, automated, and audit-ready.</span></p> <div> <p><span style="font-family: 'times new roman', times, serif;">This role is onsite 5 days/week at our Santa Clara, CA office!</span></p> </div> <h3 style="text-align: justify;"><span style="font-family: 'times new roman', times, serif;">What you'll do</span></h3> <ul style="text-align: justify;"> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Identity Governance & RBAC: Design and manage comprehensive RBAC frameworks. Conduct regular access reviews and audits for SOC2/ISO 27001 compliance.</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Automated Lifecycle Management: Build and maintain automated onboarding/offboarding workflows using Google workspace, Okta Workflows, MSFT Entra, or Python.</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">IGA Implementation: Lead the rollout of IGA tools (e.g. Lumos) to automate User Access Reviews (UAR) and build a self-service "AppStore" for employees.</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Automated Lifecycle: Design "Zero-Touch" onboarding/offboarding workflows using Zapier and Okta Workflows, ensuring access is revoked instantly across all 50+ SaaS tools.</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Governance & Compliance: Use your IGA platform to enforce Least Privilege and provide "push-button" audit evidence for SOC2/ISO 27001.</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Integration Development: Connect new SaaS tools via SAML/OIDC/SCIM, primarily utilizing Google Cloud Identity for the majority of our stack.</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Risk Mitigation: Proactively track for orphaned accounts, stale roles, and over-privileged access to maintain a "Least Privilege" environment</span></li> </ul> <h3 style="text-align: justify;"><span style="font-family: 'times new roman', times, serif;">What we're looking for</span></h3> <ul style="text-align: justify;"> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">3+ years managing Google Workspace and Okta.</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Expertise in SAML, OAuth 2.0, and SCIM.</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Experience with Lumos, IdenHQ, or similar modern IGA platforms.</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Proficiency in Zapier as well as Python or PowerShell for API-based automation.</span></li> <li style="font-family: 'times new roman', times, serif;"><span style="font-family: 'times new roman', times, serif;">Experience with HRIS-to-IdP integra