EN
Senior IT Engineer (Corporate IT)
- Hiring from
- Portugal
- Work type
- Hybrid
- Posted
622,542 remote jobs, straight from company career pages
100% free · New jobs every minute
Show job descriptionHide job description
About Enline
Enline builds software products that help transmission system operators and utilities manage their electrical lines and grids. We're a fully remote, Portugal-based company of around 50 people, working on software that keeps critical energy infrastructure running.
Our customers hold us to critical-infrastructure security standards, and we're building an ISMS to match.
The foundations of our corporate IT are designed and partly in place: an HR-driven identity chain, managed devices, and a single IT security policy. We need someone to own it.
The role
You'll own Enline's corporate IT end to end: identity, devices, third-party services, cloud organization administration, and the IT side of compliance. This is not a helpdesk role. You'll take systems that are designed and half-built, finish them, run them, and document them. Your first major project: leading the IT workstream that gets Enline certified for ISO 27001 and SOC 2, and compliant with NIS2.
You'll report to the Head of Technology, who approves tool choices, architecture, and budget. You'll bring the evaluations and recommendations; once a decision is made, deployment, operation, and documentation are yours. You'll work closely with our Cybersecurity team on controls, incidents, and audits.
Where the line sits:
Enline builds software products that help transmission system operators and utilities manage their electrical lines and grids. We're a fully remote, Portugal-based company of around 50 people, working on software that keeps critical energy infrastructure running.
Our customers hold us to critical-infrastructure security standards, and we're building an ISMS to match.
The foundations of our corporate IT are designed and partly in place: an HR-driven identity chain, managed devices, and a single IT security policy. We need someone to own it.
The role
You'll own Enline's corporate IT end to end: identity, devices, third-party services, cloud organization administration, and the IT side of compliance. This is not a helpdesk role. You'll take systems that are designed and half-built, finish them, run them, and document them. Your first major project: leading the IT workstream that gets Enline certified for ISO 27001 and SOC 2, and compliant with NIS2.
You'll report to the Head of Technology, who approves tool choices, architecture, and budget. You'll bring the evaluations and recommendations; once a decision is made, deployment, operation, and documentation are yours. You'll work closely with our Cybersecurity team on controls, incidents, and audits.
Where the line sits:
- The Head of Technology decides which tools we use, the architecture, and the budget. Your recommendations carry real weight in those decisions.
- You own the deployment and operation of everything employees and admins log into, carry, or install, every third-party service we use, and cloud organization-level administration (IAM, SSO, org policies, billing).
- Platform/Infrastructure owns the product's infrastructure and workloads inside those cloud organizations, all managed as code through a GitOps and ChatOps workflow. You're welcome to work in it too, via pull requests and chat commands.
- Cybersecurity owns the ISMS and risk management; you own and operate the IT controls within it.
- Operations owns company finance; together with them, you manage spend against the approved IT budget.
What You'll Own
- Identity and access. The joiner–mover–leaver lifecycle from HR system to directory to identity provider. SSO and SCIM for every SaaS app, MFA everywhere, and our privileged access model: separate admin accounts and just-in-time elevation instead of standing admin rights.
- Endpoints. A remote fleet of macOS, Windows, and Linux machines: zero-touch enrollment, MDM, EDR, patching, encryption, and software distribution. Device logistics too (provisioning, shipping, retrieval, and wipes) with no office to fall back on.
- Third-party services. Running every vendor and SaaS tool we use: access (SSO, provisioning, admin roles), vendor support, contracts, renewals, and billing. With our Operations team, you'll manage spend against the approved IT budget: tracking costs, forecasting, flagging overruns, and keeping SaaS sprawl in check.
- Cloud organization administration. Our GCP organization and remaining AWS accounts at org level: resource hierarchy, org policies, IAM, SSO federation, billing accounts, budgets, and cost visibility.
- Compliance. Driving the IT workstream of our certification push (ISO 27001, SOC 2, NIS2, and IEC 62443-4-1) through to audit, then operating those controls: evidence collection, quarterly access reviews, policy enforcement, and customer security questionnaires.
- Automation. Configuration as code wherever it's possible: Terraform, ACLs in Git, scripts over click-ops. If you do something twice, the third time is automated.
- Documentation. A living knowledge base: how our systems work, runbooks for operations, and clear guides for the rest of the company, with short decision records where they matter. In a fully remote company, undocumented systems don't exist.
- Support. Being the IT person for :50 people across time zones, async-first, with self-service as the goal.
- By day 30: You've inventoried every system, vendor, admin account, device, and license (with owners and costs), read our documentation and policies, and taken over onboarding and offboarding.
- By day 60: Directory and device management are rolled out across the whole fleet (macOS, Windows, and Linux), with HR and identity-provider integrations live and SSO covering our core apps.
- By day 90: You've agreed an ISO 27001, CRA, and NIS2 gap assessment and remediation plan, mediating the process between external consultants and auditors and internal teams, and a repeatable evidence process is running. Runbooks exist for joiners, movers, leavers, device lifecycle, and incidents, and the first quarterly access review is done.
Our stack
The main choices are made. Where they're still in rollout, you'll finish them.
Area Tools
Send your CV to careers@enline.energy and one piece of documentation you've written: a runbook, a knowledge base article, a policy, or a user guide. Remove anything confidential. We care more about how you think and write than about certifications.
Requirements:
What We're Looking For
The main choices are made. Where they're still in rollout, you'll finish them.
Area Tools
- HR and employee lifecycle Deel
- Directory and device management JumpCloud, Apple Business Manager
- Identity provider and productivity Google Workspace
- Endpoint security CrowdStrike Falcon
- Network access Tailscale
- Secrets and passwords 1Password
- Collaboration Slack
- Work and knowledge management Linear, Outline, Attio
- Cloud GCP & AWS
- Code and config as code GitHub, Terraform
- Full-time position. Hybrid in Porto preferred, with flexibility. The company is fully remote and has no physical office (yet).
- Async and written first. Slack for conversations, knowledge lives in Outline, work is tracked in Linear, and key decisions get a short written record.
- Clear ownership. You research and recommend; the Head of Technology decides. From there, delivery and operation are fully yours.
Send your CV to careers@enline.energy and one piece of documentation you've written: a runbook, a knowledge base article, a policy, or a user guide. Remove anything confidential. We care more about how you think and write than about certifications.
Requirements:
What We're Looking For
- 5+ years in IT or systems administration, including at least 2 years owning corporate IT end to end at a remote or distributed company.
- Deep identity knowledge: SAML, OIDC, SCIM, directory services, MFA, and privileged access management.
- Multi-platform endpoint management: macOS with Apple Business Manager and MDM, plus Windows and Linux.
- Google Workspace administration beyond the basics: org units, context-aware access, admin roles, and audit logs.
- Cloud organization-level administration in GCP, AWS, or Azure: resource hierarchy, org policies, IAM, and billing.
- Real automation skills: shell plus Python or PowerShell, Git, and infrastructure as code (Terraform or similar).
- Hands-on experience taking a company through an ISO 27001 or SOC 2 audit as a control owner.
- You know what good evidence looks like.
- Vendor and budget management: contracts, renewals, license true-ups, and tracking spend with finance or operations.
- Strong technical writing. Documentation is part of the job, not an afterthought.
- High autonomy: you turn direction into finished, documented work without being chased.
- Fluent English, written and spoken.
- Hands-on experience with JumpCloud, CrowdStrike Falcon, Tailscale, or 1Password Business.
- Managing SaaS configuration as code (e.g. Terraform providers for Google Workspace or Tailscale).
- Working in GitOps or ChatOps workflows: pull-request-driven changes and chat-driven automation.
- Fleet-scale package management on macOS (Homebrew, Workbrew, Munki, or similar).
- Experience in energy, utilities, or other critical-infrastructure environments, or with IEC 62443.
- Building small internal tools or integrations to remove manual work.
- Portuguese.
