IT Engineer
As a member of the IT Engineering team, you will collaborate closely with IT, Security, and other multi-functional partners to develop, handle, and secure Figma’s internal IT services. This role has a strong emphasis on Identity & Access Management (IAM), Identity Governance, and GitOps-driven automation, while also supporting endpoint management and SaaS platforms used daily by Figmates.
Our team owns and supports crucial services such as Okta, Google Workspace, and Slack, as well as backend solutions including Jamf, Okta Workflows, and Terraform-based infrastructure. You’ll help scale and automate these systems to ensure security, compliance, and a seamless employee experience.
This is a full time role that can be held from one of our US hubs or remotely in the United States.
What you'll do at Figma:
Be responsible for the ongoing management and optimization of the Okta Identity and Access Management platform, including advanced configurations and lifecycle policies
Build, develop, and maintain IAM workflows and integrations using Okta Workflows, APIs, or custom code to automate repetitive and manual tasks
Define and implement Identity Governance practices (RBAC, ABAC, access reviews, device trust policies) to strengthen Figma’s security posture
Assist in the management and maintenance of our macOS endpoint infrastructure, ensuring efficient performance and security
Deploy and handle systems via GitOps practices, using GitHub, Terraform, YAML, or similar tooling
Collaborate with Security and IT Ops to ensure endpoints and SaaS integrations align with company policies and compliance standards
Build and maintain documentation and runbooks for supported applications, processes, and training materials for internal employees and IT staff
We’d love to hear from you if you have:
3+ years of experience managing Okta Identity Engine and Okta Workflows
Proven experience with GitOps/configuration as code (GitHub, Terraform)
In-depth knowledge of identity and access management concepts and practices
Knowledge of device trust and zero trust security models
Knowledge of macOS endpoint management (Jamf Pro or similar)
Good communication and interpersonal skills; able to work cross-functionally with Security, Ops, and Engineering teams
At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you’re excited about this role but your past experience doesn’t align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles.
Pay Transparency Disclosure
If based in Figma’s San Francisco or New York hub offices, this role has the annual base salary range stated below.
Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. The listed range is a guideline, and the range for this role may be modified. For roles that are available to be filled remotely, the pay range is localized according to employee work location by a factor of between 80% and 100% of range. Please discuss your specific work location with your recruiter for more information.
Figma offers equity to employees, as well a competitive package of additional benefits, including health, dental & vision, retirement with company contribution, parental leave & reproductive or family planning support, mental health & wellness benefits, generous PTO, company recharge days, a learning & development stipend, a work from home stipend, and cell phone reimbursement. Figma also offers sales incentive pay for most sales roles and an annual bonus plan for eligible non-sales roles. Figma’s compensation and benefits are subject to change and may be modified in the future.
Annual Base Salary Range (SF/NY Hub):
$122,000—$215,000 USD
About the job
Apply for this position
IT Engineer
As a member of the IT Engineering team, you will collaborate closely with IT, Security, and other multi-functional partners to develop, handle, and secure Figma’s internal IT services. This role has a strong emphasis on Identity & Access Management (IAM), Identity Governance, and GitOps-driven automation, while also supporting endpoint management and SaaS platforms used daily by Figmates.
Our team owns and supports crucial services such as Okta, Google Workspace, and Slack, as well as backend solutions including Jamf, Okta Workflows, and Terraform-based infrastructure. You’ll help scale and automate these systems to ensure security, compliance, and a seamless employee experience.
This is a full time role that can be held from one of our US hubs or remotely in the United States.
What you'll do at Figma:
Be responsible for the ongoing management and optimization of the Okta Identity and Access Management platform, including advanced configurations and lifecycle policies
Build, develop, and maintain IAM workflows and integrations using Okta Workflows, APIs, or custom code to automate repetitive and manual tasks
Define and implement Identity Governance practices (RBAC, ABAC, access reviews, device trust policies) to strengthen Figma’s security posture
Assist in the management and maintenance of our macOS endpoint infrastructure, ensuring efficient performance and security
Deploy and handle systems via GitOps practices, using GitHub, Terraform, YAML, or similar tooling
Collaborate with Security and IT Ops to ensure endpoints and SaaS integrations align with company policies and compliance standards
Build and maintain documentation and runbooks for supported applications, processes, and training materials for internal employees and IT staff
We’d love to hear from you if you have:
3+ years of experience managing Okta Identity Engine and Okta Workflows
Proven experience with GitOps/configuration as code (GitHub, Terraform)
In-depth knowledge of identity and access management concepts and practices
Knowledge of device trust and zero trust security models
Knowledge of macOS endpoint management (Jamf Pro or similar)
Good communication and interpersonal skills; able to work cross-functionally with Security, Ops, and Engineering teams
At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you’re excited about this role but your past experience doesn’t align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles.
Pay Transparency Disclosure
If based in Figma’s San Francisco or New York hub offices, this role has the annual base salary range stated below.
Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. The listed range is a guideline, and the range for this role may be modified. For roles that are available to be filled remotely, the pay range is localized according to employee work location by a factor of between 80% and 100% of range. Please discuss your specific work location with your recruiter for more information.
Figma offers equity to employees, as well a competitive package of additional benefits, including health, dental & vision, retirement with company contribution, parental leave & reproductive or family planning support, mental health & wellness benefits, generous PTO, company recharge days, a learning & development stipend, a work from home stipend, and cell phone reimbursement. Figma also offers sales incentive pay for most sales roles and an annual bonus plan for eligible non-sales roles. Figma’s compensation and benefits are subject to change and may be modified in the future.
Annual Base Salary Range (SF/NY Hub):
$122,000—$215,000 USD