Senior IT Systems/Platform Engineer

Our mission at Oura is to empower every person to own their inner potential. Our award-winning products help our global community gain a deeper knowledge of their readiness, activity, and sleep quality by using their Oura Ring and its connected app. We've helped millions of people understand and improve their health by providing daily insights and practical steps to inspire healthy lifestyles. Empowering the world starts with living our values and empowering our team. As a quickly growing company focused on helping people live healthier and happier lives, we ensure that our team members have what they need to do their best work — both in and out of the office. Oura is redefining what it means to understand your body — and the platform engineering team that underpins that mission is expanding. As a Senior IT Systems/Platform Engineer, you'll own hands-on technical delivery across enterprise identity, endpoint engineering, network infrastructure, and day-to-day systems engineering for a globally distributed workforce scaling at pace. You'll work alongside senior engineers on a lean, technically excellent team — operating with high autonomy from week one. You are expected to bring production-level ownership, a strong IT engineering foundation, and the judgment to prioritize and execute independently in a fast-moving environment. The right person brings an AI-first mindset — they proactively identify automation opportunities, build with scale in mind, and use modern tooling to eliminate toil. They are equally employee experience focused — they understand that the systems they build and maintain are the foundation of how every Oura employee works every day, and they hold themselves accountable to that standard. San Francisco Bay Area–based role. In-office presence three days per week in OURA’s San Francisco office is required; this is not a fully remote role. What You Will Do • Own hands-on platform and systems engineering delivery across the global IT stack — identity, endpoint, enterprise browsers/SASE, network infrastructure, and day-to-day systems engineering; this is a global function, not a regional one • Contribute actively to Oura's enterprise identity program — Okta lifecycle management, SCIM provisioning, JML workflow automation, IGA governance via Lumos, and PAM deployment via Delinea — as a full contributing engineer alongside the Staff engineer and delivery partners • Own endpoint engineering globally — MDM fleet management across macOS and Windows, policy enforcement, compliance baselines, zero-touch provisioning, and device lifecycle for a globally distributed workforce • Support and maintain network infrastructure in coordination with the Network-as-a-Service partner — operational support, change management, and monitoring across global office locations • Serve as an escalation point for the Global IT support team — triaging complex issues, resolving what the support tier cannot, and closing the loop with clear documentation • Drive IaC practices — Terraform, Pulumi, or equivalent — treating infrastructure with the same engineering rigor as application code across the full IT stack • Operate as a strong async contributor in a distributed, global team — proactive communication, structured documentation, and strong Jira/Confluence agile discipline across timezones Requirements We Would Love to Consider You for This Role if You Have: • 8+ years of enterprise IT platform or systems engineering experience in a high-growth, fast-paced technology company — infrastructure, identity, endpoint, security and network domains • Hands-on Okta or modern enterprise IAM platform proficiency — must have deployed, configured, or administered it in a production environment; this is a hard requirement • Hands-on IAM/IGA experience — SCIM provisioning, JML workflow automation, directory services, and entitlement management; must have built or operated these, not just supported them • Infrastructure as code in practice — Terraform, Pulumi, Ansible, or equivalent at enterprise scale; version-controlled, peer-reviewed, production-grade • Multi-cloud platform engineering experience across at least 2 of AWS, Azure, and/or GCP — must have operated in a multi-cloud environment and contributed to infrastructure decisions with confidence • Endpoint engineering proficiency — MDM fleet management across macOS and/or Windows (Mosyle, Intune, or equivalent); policy enforcement, zero-touch provisioning, patch compliance, and device lifecycle management • Experience operating in a SOX, HIPAA, or compliance-regulated environment — understands how engineering decisions map to compliance controls and audit evidence • Strong async communication — written, structured, proactive; equally effective in a distributed team across multiple timezones without defaulting to synchronous-only communication • Proficient in agile methodologies; Jira and Confluence are everyday tools for work tracking, documentation, and collaboration — not afterthoughts • On-call rotation participation — This role is part of a rotating on-call schedule for critical IT infrastructure incidents; comfort with occasional after-hours response is required Nice to Have • Hands-on PAM experience (Delinea, CyberArk, BeyondTrust) — vaulting, session recording, JIT access • Experience with Network-as-a-Service or outsourced network partner management — SLA governance, change windows, escalation paths • Atomicwork, JSM, ServiceNow, or similar modern ITSM platform experience • Background in digital health or HIPAA-regulated technology environments Benefits At Oura, we care about you and your well-being. Everyone here at Oura has a ring of their own and we are continually looking to improve employee health. What we offer: • Competitive salary and equity packages • Health, dental, vision insurance, and mental health resources • An Oura Ring of your own plus employee discounts for friends & family • 20 days of paid time off plus 13 paid holidays plus 8 days of flexible wellness time off • Paid sick leave and parental leave Oura takes a market-based approach to pay, which may vary depending on your location. US locations are categorized into tiers based on a cost of labor index for that geographic area. While most offers will be closer to the starting range, successful candidates' pay will be determined based on job-related skills, experience, qualifications, work location, internal peer equity, and market conditions. These ranges may be modified in the future. • Region 1 $172,550 - $203,000 A recruiter can determine your Region based on your US location. We are not considering candidates residing in the following states: Alaska (AK), Delaware (DE), Iowa (IA), Mississippi (MS), Nebraska (NE), South Dakota (SD), West Virginia (WV), and Wisconsin (WI). Oura is proud to be an equal opportunity workplace. We celebrate diversity and are committed to creating an inclusive environment for all employees. Individuals seeking employment at Oura are considered without regard to age, ancestry, color, gender (including pregnancy, childbirth, or related medical conditions), gender identity or expression, genetic information, marital status, medical condition, mental or physical disability, national origin, protected family care or medical leave status, race, religion (including beliefs and practices or the absence thereof), sexual orientation, military or veteran status, or any other characteristic protected by federal, state, or local laws. We will not tolerate discrimination or harassment based on any of these characteristics. We will work to ensure individuals with disabilities are provided reasonable accommodation to participate in the interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Disclaimer: Beware of fake job offers! We’ve been alerted to scammers posing as ŌURA recruiters, especially for remote roles. Please note: • Our jobs are listed only on the ŌURA Careers page and trusted job boards. • We will never ask for personal information like ID or payment for equipment upfront. • Official offers are sent through Docusign after a verbal offer, not via text or email. Stay cautious and protect your personal details. To all recruitment agencies: Oura does not accept agency resumes. Please do not forward resumes to our jobs alias, Oura employees, or any other organization's location. Oura is not responsible for any fees related to unsolicited resumes.

• We Would Love to Consider You for This Role if You Have:
• 8+ years of enterprise IT platform or systems engineering experience in a high-growth, fast-paced technology company — infrastructure, identity, endpoint, security and network domains
• Hands-on Okta or modern enterprise IAM platform proficiency — must have deployed, configured, or administered it in a production environment; this is a hard requirement
• Hands-on IAM/IGA experience — SCIM provisioning, JML workflow automation, directory services, and entitlement management; must have built or operated these, not just supported them
• Infrastructure as code in practice — Terraform, Pulumi, Ansible, or equivalent at enterprise scale; version-controlled, peer-reviewed, production-grade
• Multi-cloud platform engineering experience across at least 2 of AWS, Azure, and/or GCP — must have operated in a multi-cloud environment and contributed to infrastructure decisions with confidence
• Endpoint engineering proficiency — MDM fleet management across macOS and/or Windows (Mosyle, Intune, or equivalent); policy enforcement, zero-touch provisioning, patch compliance, and device lifecycle management
• Experience operating in a SOX, HIPAA, or compliance-regulated environment — understands how engineering decisions map to compliance controls and audit evidence
• Strong async communication — written, structured, proactive; equally effective in a distributed team across multiple timezones without defaulting to synchronous-only communication
• Proficient in agile methodologies; Jira and Confluence are everyday tools for work tracking, documentation, and collaboration — not afterthoughts
• On-call rotation participation — This role is part of a rotating on-call schedule for critical IT infrastructure incidents; comfort with occasional after-hours response is required