IT Systems Engineer

Bamboo Health is the leader in Real-Time Care Intelligence™ solutions aimed at improving lives for everyone experiencing physical and behavioral health challenges. We are driven by our mission to empower clients to deliver seamless, high-quality and cost-effective care during pivotal moments to improve health outcomes. From coast to coast, Bamboo Health partners with all major retail pharmacy chains, 52 states and territories, 100% of the top 10 best hospitals and more than half of the country’s largest health plans to improve more than 1 billion patient encounters annually. Join us in improving lives during pivotal care moments! 

Summary:

We're hiring a Systems Engineer to work directly alongside our Senior Systems Engineer, taking ownership of the day-to-day, high-volume execution work across identity and access management, SaaS/vendor administration, and AI tooling support. This person will handle routine and escalated tickets, keep recurring operational work (access provisioning, certificate renewals, procurement intake, license/access requests) moving reliably, and free up the senior engineer to focus on architecture, vendor strategy, and higher-risk security work. This is a strong role for someone who wants hands-on exposure to modern identity infrastructure and emerging AI platform administration, with a clear growth path toward a senior identity/systems engineering role.

What You’ll Do:

• Process day-to-day Azure AD/Entra access requests: group membership changes, access package assignments, and standard onboarding/offboarding.
• Monitor and action alerts for registered-app secrets and SSO/SAML certificates approaching expiration; execute routine renewals under senior engineer guidance.
• Handle first-pass triage and provisioning for SCIM-based app access requests.
• Support Atlassian (Jira/Confluence) group access requests and routine permission changes.
• Own intake and initial documentation for new SaaS vendor procurement reviews (e.g., Zip requests), preparing them for senior/security review.
• Execute standard software lifecycle tasks — user provisioning/deprovisioning, license tracking, renewal reminders — for existing SaaS tools.
• Assist with license and cost audits to support ongoing SaaS cost-management initiatives.
• Handle routine AI tool access requests (e.g., Claude/Anthropic license grants, Bedrock access requests) and standard troubleshooting for existing MCP integrations.
• Support configuration and rollout tasks for AI vendor tools (e.g., Letter AI, Clay, Granola) — SSO/SCIM setup, basic integration troubleshooting — under senior engineer direction.
• Document AI tool setup procedures and known issues to build a self-serve knowledge base for common requests.
• Execute assigned phases of endpoint management rollouts (Intune Suite, NinjaOne) and OS end-of-life remediation projects.
• Apply routine patches and respond to standard CVE remediation tasks as assigned.
• Serve as first-line owner for escalated help-desk (ITHD) tickets involving access grants, credential issues, and standard cross-system troubleshooting.
• Triage incoming escalations, resolve what's within scope, and flag higher-risk or ambiguous issues to the senior engineer with clear context.
• Execute routine MFA/conditional access policy changes as directed.
• Flag anomalous activity or potential security events for senior engineer review; assist with documented remediation steps.

What Success Looks Like…

In 3 months…

• Gain proficiency in the organization's core platforms (Entra ID, SaaS applications, endpoint management, and AI tooling) and independently perform routine access, provisioning, and lifecycle management tasks.
• Resolve standard identity, access, SaaS, and endpoint-related tickets while adhering to documented procedures, security controls, and SLA expectations.
• Build foundational platform knowledge by completing required training and creating or updating documentation for common processes, troubleshooting steps, and support workflows.
• Identify at least one opportunity in your role to pilot or apply AI or automation (e.g., streamlining a task, summarizing data, generating content).

In 6 months…

• Independently manage assigned operational responsibilities, including SCIM provisioning, SSO/SAML certificate renewals, license management, endpoint administration, and AI platform support.
• Troubleshoot cross-platform issues involving identity, authentication, device management, and SaaS integrations, escalating only higher-risk or complex issues.
• Contribute to process improvement efforts through documentation enhancements, automation opportunities, cost optimization initiatives, or workflow standardization.

In 12 months…

• Serve as the primary owner for one or more technology areas, consistently delivering reliable administration, maintenance, and support for assigned platforms.
• Lead assigned components of system implementations, upgrades, integrations, or remediation projects while collaborating effectively with security, infrastructure, and business stakeholders.
• Demonstrate engineering-level impact by identifying operational risks, implementing efficiency improvements, and acting as a technical resource for peers and service desk teams.

What You Need:

• 2+ years of experience in IT support, systems administration, or a related identity/access role.
• Working knowledge of Azure AD/Entra ID, SSO/SAML concepts, and basic SCIM provisioning (or strong aptitude and willingness to ramp quickly).
• Comfort working in a ticketing system (Jira Service Management or similar) and managing a queue of concurrent requests with competing priorities.
• Familiarity with common enterprise SaaS administration (user provisioning, license management) is a plus.
• Interest in AI tooling and willingness to learn enterprise AI platform administration (Claude/Anthropic, Bedrock, MCP integrations) — no prior AI-specific experience required.
• Strong written communication — this role documents its own work and hands off context clearly.
• Comfort being the first point of contact on escalated, sometimes urgent, end-user issues.
• Comfort using or learning AI-supported tools (e.g., ChatGPT, CoPilot, or role-specific tools) to improve daily workflows.
• A forward-thinking, curious mindset with an openness to experimenting with new technologies.
• Strong analytical and problem-solving skills, with sound judgment and creativity in designing solutions.
• Proven ability to thrive in fast-paced, high-growth, and rapidly evolving environments.
• Ability to work effectively in a remote-first environment, ensuring high-quality virtual interactions with minimal distractions. 
• The ability to travel periodically for work.

What You Get:

• Join one of the most innovative healthcare technology companies in the country.
• Have the autonomy to build something with an enthusiastically supportive team.
• Learn from working at the highest levels and on the most strategic priorities of the company, including from world class investors and advisors.
• Receive competitive compensation including health, dental, vision and other benefits.

Belonging at Bamboo

We Care. #BambooHealthValuesCare

Every human being has the right to the best possible healthcare. Our Real-Time Care Intelligence™ solutions enable healthcare professionals to see and treat every individual as a whole person by providing the right information, at the right time – regardless of physical, behavioral or social barriers.  

We’re a great place to work because we care. We continually seek to learn about our differences and ensure the unique perspectives and contributions of all employees are welcome, valued and celebrated.  

Our commitment to making a positive impact starts by recognizing and leveraging our differences, building inclusive teams and cultivating a sense of belonging.

Bamboo Health is proud to provide equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Bamboo Health GDPR/RODO

To protect our applicants from fraudulent recruitment activity, we recommend that all applicants verify the validity of an interview and hiring process by visiting our website www.bamboohealth.com. All valid job postings will be listed on our careers page. Bamboo Health does not conduct interviews via text and will not request sensitive information such as banking details during the application process.

#LI-Remote