Senior IT Systems Engineer

About this role

Confirmo is a stablecoin payment infrastructure trusted by market leaders. Founded over a decade ago by crypto natives, we're one of the first crypto payment processors in the world and have built one of the most established infrastructures in the industry. Over the past 4 years, we have been growing exponentially (130+%) and expanding across the U.S., Middle East, and Europe. As part of our continued growth, we are now expanding our internal IT team in Prague.

Overview: Confirmo has grown fast, and our internal IT has grown with it: dozens of SaaS platforms, a mixed fleet of endpoints, an identity layer they all depend on, and a growing number of people who need the right access on day one and none of it on their last. We need one person to own all of it. We are looking for a senior, hands-on engineer to take end-to-end, ongoing ownership of the systems that run the company: our SaaS estate and the identity platform behind it, collaboration platforms, endpoints, and internal monitoring.

You will design how these things should work, implement it, document it, and keep it running. This is not a helpdesk role. First-line support is handled by a junior colleague; you are the escalation point and decide how support should work. You will be given a problem, not a ticket. You will work closely with the Head of Security, who owns security policy and controls; you own the systems underneath them. Key Responsibilities: Own the SaaS estate: You are the technical owner and administrator of record for our cloud platforms across engineering, operations, finance, sales, and compliance.

For each one you know and maintain who has access, how it is configured and secured, how its data is backed up, and what it costs. You keep our asset and vendor registers accurate and own the access-request workflow. Own identity and access: Google Workspace structure, user lifecycle, group design, and the SSO / SAML / OAuth / SCIM integrations into every connected system. This includes offboarding end to end: access removal, data handover, email forwarding, and licence reclaim.

Own collaboration and file platforms: Run our messaging, documentation, and shared-drive platforms day to day. You design their structure, permissions, sharing, and retention, not just approve access to them. Own endpoint management: Run the rollout of MDM across our macOS, Windows, and Linux fleet with an external partner, then take it fully in-house. Own internal monitoring and alerting: Decide where alerts from our platforms go and who owns them.