Impact you can see
What you build helps existing grids carry more clean energy and tackle climate change. And because we’re still building, your ideas don’t get lost in layers: they shape our products and the way we work, from day one.
Careers at Enline
Senior IT Engineer (Corporate IT).
Own Enline’s corporate IT end to end: identity, devices, third-party services and cloud administration, starting with our ISO 27001, SOC 2 and NIS2 push.
- Team
- Engineering
- Location
- Hybrid (Porto preferred)
- Type
- Full-time
What you’ll do.
- Identity and access: the joiner, mover and leaver lifecycle from HR system to directory to identity provider. SSO and SCIM for every SaaS app, MFA everywhere, and our privileged access model: separate admin accounts and just-in-time elevation instead of standing admin rights.
- Endpoints: a remote fleet of macOS, Windows and Linux machines, with zero-touch enrollment, MDM, EDR, patching, encryption and software distribution. Device logistics too (provisioning, shipping, retrieval and wipes) with no office to fall back on.
- Third-party services: running every vendor and SaaS tool we use, including access (SSO, provisioning, admin roles), vendor support, contracts, renewals and billing. With our Operations team, you’ll manage spend against the approved IT budget: tracking costs, forecasting, flagging overruns and keeping SaaS sprawl in check.
- Cloud organization administration: our GCP organization and remaining AWS accounts at org level, including resource hierarchy, org policies, IAM, SSO federation, billing accounts, budgets and cost visibility.
- Compliance: driving the IT workstream of our certification push (ISO 27001, SOC 2, NIS2 and IEC 62443-4-1) through to audit, then operating those controls: evidence collection, quarterly access reviews, policy enforcement and customer security questionnaires.
- Automation: configuration as code wherever it’s possible, with Terraform, ACLs in Git and scripts over click-ops. If you do something twice, the third time is automated.
- Documentation: a living knowledge base of how our systems work, runbooks for operations and clear guides for the rest of the company, with short decision records where they matter. In a fully remote company, undocumented systems don’t exist.
- Support: being the IT person for around 50 people across time zones, async-first, with self-service as the goal.
What we’re looking for.
- 5+ years in IT or systems administration, including at least 2 years owning corporate IT end to end at a remote or distributed company.
- Deep identity knowledge: SAML, OIDC, SCIM, directory services, MFA and privileged access management.
- Multi-platform endpoint management: macOS with Apple Business Manager and MDM, plus Windows and Linux.
- Google Workspace administration beyond the basics: org units, context-aware access, admin roles and audit logs.
- Cloud organization-level administration in GCP, AWS or Azure: resource hierarchy, org policies, IAM and billing.
- Real automation skills: shell plus Python or PowerShell, Git, and infrastructure as code (Terraform or similar).
- Hands-on experience taking a company through an ISO 27001 or SOC 2 audit as a control owner. You know what good evidence looks like.
- Vendor and budget management: contracts, renewals, license true-ups and tracking spend with finance or operations.
- Strong technical writing. Documentation is part of the job, not an afterthought.
- High autonomy: you turn direction into finished, documented work without being chased.
- Fluent English, written and spoken.
Nice to have.
- Hands-on experience with JumpCloud, CrowdStrike Falcon, Tailscale or 1Password Business.
- Managing SaaS configuration as code (e.g. Terraform providers for Google Workspace or Tailscale).
- Working in GitOps or ChatOps workflows: pull-request-driven changes and chat-driven automation.
- Fleet-scale package management on macOS (Homebrew, Workbrew, Munki or similar).
- Experience in energy, utilities or other critical-infrastructure environments, or with IEC 62443.
- Building small internal tools or integrations to remove manual work.
- Portuguese.
What we offer.
Room to do the best work of your career.
Freedom and flexibility
Our team works across countries and time zones. You set your own rhythm, balanced with the meetings and moments that keep us connected as one team.
Grow with us
Fairness, continuous learning and a safe place to speak up, in a company still writing its story.
Ready to apply?
Send your CV to [email protected] together with one piece of documentation you’ve written: a runbook, a knowledge base article, a policy or a user guide (remove anything confidential). We care more about how you think and write than about certifications.