IT Solutions Engineer

About Finom

 Finom is a European tech startup headquartered in Amsterdam, and we’re on a journey towards revolutionizing the financial landscape for entrepreneurs worldwide. Our mission is to develop an all-in-one financial B2B solution that integrates banking functions, accounting, financial management, and invoicing into a seamless, mobile-first platform.

About the Role

We're looking for an IT Solutions Engineer who thinks like a systems builder - someone who doesn't just run internal infrastructure, but engineers it away where it shouldn't need a human at some point. This is a build-focused role on our IT Operations team. As we scale past 600 employees, our biggest lever is no longer closing tickets faster - it's removing the work that generates them.

You'll own the automation and integration layer that connects our identity, HR, device, and SaaS-governance systems, so that provisioning, deprovisioning, and access lifecycle events happen reliably and automatically instead of by hand. You'll pair closely with our Solutions Engineer, help set the technical standard for how automations are built and documented, and work cross-functionally with Security, People Ops, and DevOps to design end-to-end solutions rather than point fixes.

A DevOps and API background is exactly what this role is built around: you're comfortable reading API docs, wiring 2-3 systems together, scripting from scratch when a no-code tool won't cut it, and thinking about reliability, edge cases, and security from the first line. Above all, you're curious - about the systems you build, the people who depend on them, and how your engineering decisions impact the business.

What You'll Do

• Build the access lifecycle automation layer: Own the design, build, and maintenance of automated provisioning and deprovisioning across our top applications by ticket volume. Implement birthright roles for our highest-volume employee profiles and HiBob-driven trigger events (joiners, movers, leavers) that flow through to downstream systems without manual intervention.

• Integrate our core systems: Build and maintain the integrations that tie HiBob → JumpCloud → Tequipy (and Google Workspace, Slack, Notion, and the wider SaaS estate) into one coherent, event-driven lifecycle. Use REST APIs, SCIM, and our self-hosted n8n instance to create complex, reliable workflows.

• Manage identity and access at the backend: Configure and debug SSO/SCIM and SAML flows in JumpCloud as our Identity Provider. Own SSO app integrations end to end, troubleshoot complex provisioning and authentication issues, and keep access governance clean and auditable.

• Deliver the Security controls programme: Build the automations behind our security and compliance initiatives - local admin removal, least-privilege enforcement - contributing directly to DORA, ISO 27001, and SOC 2 efforts. Security is embedded in every config and every script, not bolted on afterward.

• Administer and optimize business-critical platforms: Manage the technical backend of Jira Service Management as our ITSM platform - configuring workflows, request types, forms, and automations to streamline internal processes - alongside the wider Atlassian Suite, Slack, and Notion.

• Own endpoint automation: Build and test JumpCloud MDM device policies, profiles, and scripts for zero-touch deployment across Windows and macOS endpoints (via Apple Business Manager), handling software deployment and OS-level configuration at scale.

• Drive SaaS and budget optimization: Monitor system logs, performance, and SaaS usage to identify waste and cost-saving opportunities, and implement the technical changes that reclaim them (e.g. license reclamation flows).

• Document everything you build: Proactively create and maintain technical documentation configs, automation flows, API maps - so that what you build can be run, understood, and extended by the rest of the team. Reliable, documented, alerted workflows are the standard, not the exception.

• Lead technical projects: Lead smaller technical projects end to end a new SSO app integration, a JSM form build-out, a new integration between systems - owning them from requirement to delivery, and providing technical guidance to the team as you go.

Who You Are

• At least 3 years in IT support, systems administration, or IT/DevOps engineering, with hands-on expertise across Windows and macOS environments.

• Strong IAM experience: JumpCloud (or a comparable IdP) for SSO, SCIM, and SAML - including configuring integrations and debugging complex provisioning and authentication issues.

• Strong MDM / UEM experience: endpoint management via JumpCloud MDM (or Intune / Jamf), including profiles and scripts for zero-touch deployment.

• An automation-first mindset with real scripting skills - PowerShell, Bash, Python, or similar - to build reliable, scalable solutions from scratch, not just wire up templates.

• API fluency: comfortable reading API documentation and integrating multiple systems (REST APIs, webhooks, SCIM). Experience with n8n or a comparable automation/iPaaS platform.

• Proficiency administering Google Workspace (or M365) and experience with ITSM tools - ideally Jira Service Management (workflows, request types, automations).

• Clear, concise communication in English across technical and non-technical audiences - able to explain configs and tradeoffs to Security, People, and Engineering alike.

• Advanced use of AI tools to accelerate troubleshooting, draft automations, and continuously raise the bar on operational efficiency.

Strong Plus

• Familiarity with security frameworks (ISO 27001, DORA, SOC 2) and SaaS governance / management tooling.

• Experience with HRIS-driven automation (HiBob or similar) and hardware lifecycle tooling (Tequipy or similar).

• Experience in high-growth, modern infrastructure environments.

• ITIL 4 Foundation and JumpCloud Core Certification (or willingness to certify).