Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 4 hours ago

Principal Systems Engineer

Nasuni27 open roles

Where
Denver, Colorado, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowPrincipal Systems EngineerNasuni · Denver, Colorado, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Nasuni's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.8% of postings close within 7 days. Measured by our own scanner across the market. Nasuni postings stay open a median of 49 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.8%7 days
  4. 22.3%14 days
  5. 37.8%30 days
  6. 59.0%60 days
This job: posted 4 hours ago

Nasuni median: 49 days open

The posting

Principal Systems Engineer

Location: United States — Remote (Denver, Colorado preferred)

About the Role

Nasuni is seeking a Principal Systems Engineer to lead the architecture, security, reliability, and continuous improvement of our enterprise identity, access, and endpoint management platforms.

This is a highly visible, hands-on technical leadership role for an experienced engineer who enjoys solving complex problems, building secure and scalable systems, and helping others become stronger engineers.

You will serve as the primary technical owner of Okta, identity and access management (IAM), and endpoint management across Nasuni's global environment. Working closely with Security, IT, and business stakeholders, you will strengthen access governance, improve automation, support compliance requirements, and ensure our employees can work securely and efficiently.

Equally important, you will help elevate the IT team's technical capabilities through mentorship, documentation, and collaborative problem-solving.

What You'll Do

  • Own enterprise identity platforms: Lead the architecture, configuration, operational health, and continuous improvement of Okta, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity lifecycle management.
  • Strengthen identity governance: Design and maintain role-based access controls, least-privilege standards, access certification processes, and audit-ready identity controls in partnership with Security.
  • Lead endpoint engineering: Establish and maintain scalable endpoint provisioning, configuration, patching, compliance, and security standards across a geographically distributed workforce.
  • Drive automation and operational excellence: Improve joiner, mover, and leaver workflows, application provisioning, endpoint operations, and IT service delivery through scripting, integrations, and automation.
  • Resolve complex technical challenges: Serve as the senior escalation resource for identity, access, and endpoint incidents. Lead root cause analysis and implement sustainable corrective actions.
  • Remain hands-on: Participate in the IT team's regular support rotation, directly resolving tickets and supporting escalations at all levels.
  • Develop technical talent: Mentor engineers through troubleshooting, technical coaching, pairing, knowledge-sharing sessions, and practical guidance.
  • Build scalable knowledge: Own documentation standards and improve the quality of troubleshooting guides, runbooks, and knowledge base articles to reduce repeat incidents and unnecessary escalations.
  • Partner across the business: Collaborate with Security and business stakeholders on technology integrations, application onboarding, acquisitions, and evolving identity and endpoint requirements.
  • Apply AI responsibly: Use approved AI-enabled tools and automation to improve troubleshooting, technical documentation, operational analysis, and workflow efficiency while validating outputs and protecting sensitive information.

What You'll Bring

Required Qualifications

  • Significant professional experience in systems engineering, enterprise IT infrastructure, or identity and access management, including substantial hands-on platform ownership.
  • Deep technical expertise administering and designing enterprise Okta environments, including SSO, MFA, application integrations, and automated user provisioning.
  • Hands-on experience managing enterprise endpoint platforms and implementing security, configuration, provisioning, and patch management standards.
  • Experience designing and implementing identity governance, least-privilege access, and audit-supporting controls.
  • Proven ability to troubleshoot complex infrastructure issues, lead technical escalations, and deliver permanent solutions.
  • Demonstrated ability to mentor engineers, improve technical documentation, and influence engineering practices without formal management authority.
  • Strong communication and stakeholder collaboration skills, with the ability to explain technical decisions to technical and non-technical audiences.
  • Ability to collaborate effectively with distributed teams across the United States, India, Poland, and the United Kingdom.

Preferred Qualifications

  • Experience with Microsoft Intune, Jamf, or comparable enterprise endpoint management platforms.
  • Experience with identity automation, SCIM, SAML, OIDC, APIs, PowerShell, or Python.
  • Experience supporting SOC 2, ISO 27001, or comparable security and compliance requirements.
  • Experience integrating identity and endpoint environments following mergers or acquisitions.
  • Experience using AI-assisted troubleshooting, scripting, documentation, or workflow automation with appropriate security and validation practices.

Ideal Candidate

You have owned enterprise identity and endpoint platforms—not simply supported them. You bring strong technical judgment, enjoy remaining close to work, and take pride in creating secure, scalable systems that other engineers can operate confidently.

You are equally comfortable resolving a complex incident, designing long-term architecture, or coaching a teammate through a difficult technical challenge.

Experience Guideline: Typically, 10+ years in IT infrastructure or systems engineering, including 5+ years of substantial identity and access management experience. Equivalent expertise demonstrated will be considered.

A bachelor’s degree in computer science, Information Technology, or a related field is valued; equivalent practical experience is welcome.

Occasional travel to Nasuni offices may be required.

About Nasuni

Nasuni is the unstructured data foundation for enterprise teams—and the AI that supports them. We manage, protect, and activate the world’s unstructured data so organizations can work smarter, spend wisely, and create safely without limits. As a Vista-backed SaaS data infrastructure company, Nasuni is transforming how enterprises manage file data with a next-generation, AI-ready platform—turning massive file stores into secure, actionable, and AI-ready data for intelligent automation, analytics, and global collaboration.

Why work at Nasuni?

As part of our commitment to your well-being, we are pleased to offer comprehensive benefits packages to employees across the US. Benefits packages generally include:

• Best in class employee onboarding and training

• "Take What You Need” paid time off policy

• Comprehensive health, dental and vision plans

• Company-paid life and disability insurance

• 401(k) and Roth IRA retirement plan

• Generous employee referral bonuses

• Flexible remote work policy

• 10 Paid Holidays

• Wide array of wellbeing offerings

• Pre-tax savings accounts with company contributions

• Great team culture and social activities

• Collaborative workspaces

• Free on-site fitness centers and stocked kitchens in select office locations

• Professional development resources

Compensation Transparency:

In accordance with U.S. pay transparency laws, Nasuni is committed to providing visibility into compensation for all U.S.-based roles. Click HERE to view our compensation ranges by job grade. Actual compensation will be based on a variety of factors, including a candidate’s experience, skills, education, and work location.

To all recruitment agencies: Nasuni does not accept agency resumes. Please do not forward resumes to our job boards, Nasuni employees or any other company location. Nasuni is not responsible for any fees related to unsolicited resumes.

Nasuni is an equal opportunity employer. The equal employment opportunity policy at Nasuni protects employees and job applicants from discrimination on the bases of race, religion, color, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, family medical history or genetic information, political affiliation, military service, or other non-merit based factors. These protections extend to all management practices and decisions, including recruitment and hiring practices, appraisal systems, promotions, and training and career development programs.

This privacy notice relates to information collected (whether online or offline) by Nasuni Corporation and our corporate affiliates (collectively, “Nasuni”) from or about you in your capacity as a Nasuni employee, independent contractor/service provider or as an applicant for an employment or contractor relationship with Nasuni.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Nasuni's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Nasuni's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Nasuni's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.