IT Operations Analyst

Who are we?

At UpGuard , we are replacing manual security bottlenecks with AI-driven precision. Fresh off a US$75M Series C, we are scaling our infrastructure to process 100 billion risk signals daily. This isn’t just growth; it’s a total reimagining of how the world manages cyber risk.

We build the Cyber Risk Posture Management (CRPM) platform that security teams actually love. By integrating security ratings, threat intel, and agentic AI, we empower organisations to stay ahead of an ever evolving attack surface.

We aren’t just building another tool; we’re defining a category. We provide the autonomy to ship world-class technology and the resources to do it at a global scale.

Where does this role fit in?

Build, operate and continually improve the technology platform that lets every UpGuardian work securely, efficiently and with minimal friction.

You’ll own the lifecycle of our corporate technology end to end: identity, endpoints, SaaS and the service practices that hold them together. You’ll automate the repetitive parts, instrument the rest, and make security a property of how systems are built rather than a task someone remembers to do.

This is an engineering role, not a ticket queue. If you see the same request three times and your first thought is “why is a human still doing this?” - you’ll fit.

Security is an outcome of excellent operational engineering here, not the primary function of the role.

What will you do?

Platform, identity and fleet

Google Workspace, Okta (or equivalent IdP), and MDM (Kandji, Jamf or similar) across a mostly macOS and ChromeOS fleet

You’ll own SaaS administration and lifecycle, asset management, endpoint standards and compliance, and the joiner–mover–leaver process end to end

Zero Trust and secure access

Operate and continually improve our Cloudflare Zero Trust environment across ZTNA, Secure Web Gateway, DNS filtering, tunnels and identity and device aware access policies

You’ll help move us away from traditional network trust, maintain secure access to internal applications and services, troubleshoot access and connectivity issues, and make sure security controls don’t create unnecessary friction for employees

Automation and internal tooling

Automation is the default approach, not a stretch goal. If a task happens more than twice, it’s a candidate for code

You’ll work with REST APIs, Python, Apps Script, Terraform, n8n and AI assisted workflows to build internal tooling that removes work rather than making it faster to do by hand

Service operations

Incident, problem and change management. Service catalogue, knowledge base, service metrics, capacity planning and operational readiness

You’ll define these practices where they don’t exist yet and improve the ones that do

Reliability and continuous improvement

Zero touch provisioning, endpoint compliance, fleet health, monitoring, reporting, SaaS governance and self service. Making internal platforms boringly reliable is the goal

Security, embedded

Deploy and maintain security controls, harden endpoints, support security incidents, reduce operational risk and keep baselines current

Security is part of how you’ll operate the platform rather than a separate function you’ll own

What will you bring?

You won’t have all of this. Tell us which parts you’d be learning, and we’ll tell you honestly whether that works

Depth across enterprise SaaS and identity - you’ve administered Google Workspace or Microsoft 365, an IdP such as Okta or Entra, and MDM at organisational scale. You’re comfortable with SSO, SAML, SCIM, DNS and certificates

Zero Trust, hands on - you’ve worked with ZTNA, Secure Web Gateway or modern network access controls, ideally Cloudflare Zero Trust or a similar platform such as Zscaler, Netskope, Tailscale or Entra Private Access. You understand identity and device aware access and the principles behind repl