infrastructure engineer

Tango is a live-streaming platform with over 450 million registered users, operating in the video technology industry. Founded in 2018, the company employs over 500 people globally and provides a B2C application that enables creators to broadcast live content, interact with audiences, and monetize their talents.

• Own corporate identity in Okta: user lifecycle, group-based access, SSO/SAML/SCIM app integrations, MFA, and automated joiner-mover-leaver flows;
• Own and evolve the corporate network across offices: LAN/WiFi, switching, routing, VLAN segmentation, DHCP/DNS, and VPN — design, configuration, and L3 troubleshooting;
• Own FortiGate firewalls: policy, segmentation, and VPN, in partnership with security;
• Own the corporate GCP footprint: IAM, PAM, VPC and cloud networking, firewall rules, and the services backing corporate tooling;
• Administer Google Workspace at the org level;
• Use GitLab as the backbone for configuration-as-code, CI/CD, and IaC: manage repos and pipelines for IT automation;
• Build automation that removes manual work and JML toil: scripting (Bash, Python) and API integration across Okta, Google Workspace, JSM, and GCP;
• Author the runbooks and configuration-as-code that onsite engineers operate from;
• Provide L3 escalation for identity, network, cloud, and SaaS issues the onsite tier cannot resolve;
• Configure MDM;
• Keep technical documentation current.

• 4+ Years in infrastructure / systems / network engineering, ideally at a cloud-native company;
• Strong networking — hands-on design and troubleshooting of LAN/WiFi, switching, routing, VLANs, DHCP/DNS, and VPN;
• Okta hands-on: user lifecycle, SSO/SAML/SCIM integrations, MFA;
• GCP: IAM and cloud networking (VPC, firewall rules, routing);
• Google Workspace administration;
• GitLab: repositories, CI/CD pipelines;
• IaC workflows (terraform);
• Demonstrable automation/scripting (Bash, Python) with real examples you can walk us through;
• Good security instincts: credential hygiene, segmentation, patching urgency, incident discipline;
• Functional English — enough to coordinate with the global team and document your work clearly;
• Nice to have: Jamf / Intune MDM, Certificate-based access: SCEP, LDAP, RADIUS, FortiGate hands-on: policy, VPN, and segmentation, ZTNA (Zero Trust Network Access) concepts and rollout experience, AI-assisted IT operations — building tier-0 deflection in JSM/Slack, ticket triage/summarization, or agentic runbooks, HRIS-driven identity automation.

• No conditions specified