Build, operate and continually improve the technology platform that lets every UpGuardian work securely, efficiently and with minimal friction. You’ll own the lifecycle of our corporate technology end to end: identity, endpoints, SaaS and the service practices that hold them together. You’ll automate the repetitive parts, instrument the rest, and make security a property of how systems are built rather than a task someone remembers to do.
🏢 About UpGuard
At UpGuard, we are replacing manual security bottlenecks with AI-driven precision. Fresh off a US$75M Series C, we are scaling our infrastructure to process 100 billion risk signals daily. This isn’t just growth; it’s a total reimagining of how the world manages cyber risk. We build the Cyber Risk Posture Management (CRPM) platform that security teams actually love. By integrating security ratings, threat intel, and agentic AI, we empower organisations to stay ahead of an ever evolving attack surface.
🎯 The Role
You’ll own the lifecycle of our corporate technology end to end: identity, endpoints, SaaS and the service practices that hold them together. This is an engineering role, not a ticket queue. If you see the same request three times and your first thought is “why is a human still doing this?” - you’ll fit. Security is an outcome of excellent operational engineering here, not the primary function of the role.
✅ Key Responsibilities
Own SaaS administration and lifecycle, asset management, endpoint standards and compliance, and the joiner–mover–leaver process end to end
Operate and continually improve our Cloudflare Zero Trust environment across ZTNA, Secure Web Gateway, DNS filtering, tunnels and identity and device aware access policies
Build internal tooling that removes work rather than making it faster to do by hand using REST APIs, Python, Apps Script, Terraform, n8n and AI assisted workflows
Define and improve incident, problem and change management practices, service catalogue, knowledge base, service metrics, capacity planning and operational readiness
Deploy and maintain security controls, harden endpoints, support security incidents, reduce operational risk and keep baselines current
📌 Required Qualifications
Depth across enterprise SaaS and identity - you’ve administered Google Workspace or Microsoft 365, an IdP such as Okta or Entra, and MDM at organisational scale
Zero Trust, hands on - you’ve worked with ZTNA, Secure Web Gateway or modern network access controls, ideally Cloudflare Zero Trust or a similar platform
You genuinely automate - you write code using Python, Apps Script or similar, work confidently with REST APIs, and can point to internal tooling you’ve shipped
Fleet management maturity - you’ve worked with macOS at scale, zero touch provisioning and endpoint compliance baselines
Service operations experience - you’ve run incident and change practices, defined metrics and built documentation people actually use
Security and infrastructure fundamentals - you’re comfortable with endpoint hardening, identity security, DNS, certificates, secure network access and making sensible risk trade offs
Process improvement instinct - you make the system better, not just the outcome of one request
⭐ Desirable Experience
Terraform or other Infrastructure as Code
Cloudflare
n8n or similar orchestration
AI and LLM-assisted workflows
Deep macOS expertise
Chrome Enterprise
Working in a security-first or audited environment (SOC 2, ISO 27001)
🎁 Benefits
Monthly Lifestyle subsidy: Use this for financial, physical, and mental well-being
WFH set-up allowance: To ensure you have the right environment to work in
$1500 USD annual Learning & Development allowance
Annual leave: PTO plus two additional UpGuardian leave days
18 weeks paid Parental Leave: Irrespective of parenting role
Personal Leave Allowance: This includes sick & carer’s leave
Please let Upguard know that you found this role at devopsprojectshq.com as a way to support us, so we can keep providing you with awesome DevOps jobs.
Never miss a job
Join 2,000+ DevOps developers getting weekly alerts for remote and US/EU roles, Kubernetes, AWS, Terraform, filtered for your stack.
🔒 Need an IP to whitelist?
Get a dedicated static EU outbound IP for Banks, payments, EHRs, APIs, AI.