Senior IT Platform Engineer

Oura is redefining what it means to understand your body — and the platform engineering team that underpins that mission is expanding. As a Senior IT Platform Engineer, you'll own hands-on technical delivery across enterprise identity, endpoint engineering, network infrastructure, and day-to-day systems engineering for a globally distributed workforce scaling at pace.

You'll work alongside senior engineers on a lean, technically excellent team — operating with high autonomy from week one. You are expected to bring production-level ownership, a strong IT engineering foundation, and the judgment to prioritize and execute independently in a fast-moving environment.

The right person brings an AI-first mindset — they proactively identify automation opportunities, build with scale in mind, and use modern tooling to eliminate toil. They are equally employee experience focused — they understand that the systems they build and maintain are the foundation of how every Oura employee works every day, and they hold themselves accountable to that standard.

San Francisco Bay Area–based role. In-office presence at OURA’s San Francisco office is required; this is not a fully remote role.

• →Own hands-on platform and systems engineering delivery across the global IT stack — identity, endpoint, enterprise browsers/SASE, network infrastructure, and day-to-day systems engineering; this is a global function, not a regional one
• →Contribute actively to Oura's enterprise identity program — Okta lifecycle management, SCIM provisioning, JML workflow automation, IGA governance via Lumos, and PAM deployment via Delinea — as a full contributing engineer alongside the Staff engineer and delivery partners
• →Own endpoint engineering globally — MDM fleet management across macOS and Windows, policy enforcement, compliance baselines, zero-touch provisioning, and device lifecycle for a globally distributed workforce
• →Support and maintain network infrastructure in coordination with the Network-as-a-Service partner — operational support, change management, and monitoring across global office locations
• →Serve as an escalation point for the Global IT support team — triaging complex issues, resolving what the support tier cannot, and closing the loop with clear documentation
• →Drive IaC practices — Terraform, Pulumi, or equivalent — treating infrastructure with the same engineering rigor as application code across the full IT stack
• →Operate as a strong async contributor in a distributed, global team — proactive communication, structured documentation, and strong Jira/Confluence agile discipline across timezones

We Would Love to Consider You for This Role if You Have:

• 8+ years of enterprise IT platform or systems engineering experience in a high-growth, fast-paced technology company — infrastructure, identity, endpoint, security and network domains
• Hands-on Okta or modern enterprise IAM platform proficiency — must have deployed, configured, or administered it in a production environment; this is a hard requirement
• Hands-on IAM/IGA experience — SCIM provisioning, JML workflow automation, directory services, and entitlement management; must have built or operated these, not just supported them
• Infrastructure as code in practice — Terraform, Pulumi, Ansible, or equivalent at enterprise scale; version-controlled, peer-reviewed, production-grade
• Multi-cloud platform engineering experience across at least 2 of AWS, Azure, and/or GCP — must have operated in a multi-cloud environment and contributed to infrastructure decisions with confidence
• Endpoint engineering proficiency — MDM fleet management across macOS and/or Windows (Mosyle, Intune, or equivalent); policy enforcement, zero-touch provisioning, patch compliance, and device lifecycle management
• Experience operating in a SOX, HIPAA, or compliance-regulated environment — understands how engineering decisions map to compliance controls and audit evidence
• Strong async communication — written, structured, proactive; equally effective in a distributed team across multiple timezones without defaulting to synchronous-only communication
• Proficient in agile methodologies; Jira and Confluence are everyday tools for work tracking, documentation, and collaboration — not afterthoughts
• On-call rotation participation — This role is part of a rotating on-call schedule for critical IT infrastructure incidents; comfort with occasional after-hours response is required

• Hands-on PAM experience (Delinea, CyberArk, BeyondTrust) — vaulting, session recording, JIT access
• Experience with Network-as-a-Service or outsourced network partner management — SLA governance, change windows, escalation paths
• Atomicwork, JSM, ServiceNow, or similar modern ITSM platform experience
• Background in digital health or HIPAA-regulated technology environments