Systems Engineer Manager

Job responsibilities

• Design conditional access policies, manage identity lifecycles, and ensure SSO health across a complex Microsoft Entra ID environment.
• Develop scripting and workflow tooling to reduce manual toil and increase reliability across the organization.
• Drive the adoption of AI-powered tooling to automate routine processes and scale the team's output beyond human hours.
• Partner with Endpoint Management to ensure seamless integration between identity, access, and device management across the fleet.
• Govern access to AI platforms and tooling (e.g. Copilot, Cursor, Langdock) - permissions, data boundaries, audit trails
• Lead the consolidation and standardization of core business platform configurations to bring consistency to our fast-growing landscape.
• Build a team where you will set clear expectations and actively support the career growth of your team members.
• Partner closely with Security & Compliance for access controls, the People Team for "Joiner-Mover-Leaver" processes, and Engineering teams for secure tool access.
• Own the IT service queue for systems-level issues, triaging and resolving with engineering rigour rather than a purely reactive support mindset.

Requirements

• 5+ years of experience in IAM or Systems Engineering, with deep expertise in tooling like Azure/Entra ID, Okta, or OneLogin.
• Familiarity with governing non-human identities and service accounts at scale.
• Proven track record of automating lifecycle processes (JML) and proficiency in scripting (PowerShell, Bash, or Python).
• Designs systems that solve access problems before they reach the helpdesk with expert knowledge of cloud-first identity principles like SCIM and OIDC.
• Experience acting as a technical lead, managing high-level administrative permissions, and navigating "Least Privilege" environments.
• Views technical debt and inconsistent configurations as an opportunity to create structure.

Qualifications

• Strong leadership capabilities to build and grow a team, with the ability to set expectations and guide career development.

Benefits & perks

• Global collaboration on large-scale fintech products with an office-first setup in Berlin.
• Diversity and Inclusion commitment.
• Annual learning and development budget of €2,000 for conferences or further education.
• Enrollment onto VSOP program with equity stake in SumUp.
• Corporate pension scheme with up to 20% employer contributions.
• 30 days sabbatical after 3 years of employment.
• Referral bonus and additional benefits such as Urban Sports Club subsidy, Kita placement assistance, relocation assistance, and subsidised office lunches.

What you'll do

As part of the Corporate IT team, you will establish and lead the Systems Engineering function, own and mature SumUp's identity infrastructure, consolidate core configurations, and drive automation and AI-enabled tooling to improve stability and performance across a multi-region fintech environment.

Who you are

• Technical strategic thinker who thrives in bringing structure to complexity.
• Excited about building unified identity platforms and scaling internal engineering.
• Committed to high accountability, technical excellence, and treating IT as an engineering discipline.

Tech stack

Microsoft Entra ID, Azure, SSO, SCIM, OIDC, AI tooling integration (Copilot, Cursor, Langdock), scripting (PowerShell, Bash, Python).

Team description

The Corporate IT team consists of a diverse group of System Administrators and outsourced support across the EU and the Americas, focused on providing secure, efficient access to tools for all SumUp employees and enabling identity and access as a seamless enabler of work.