Staff IT Systems Engineer (6443) - Microsoft Suite

Today, through BHN’s single global platform, businesses of all kinds can tap into the world’s largest network of branded payment solutions. BHN helps businesses grow revenue, increase loyalty, motivate and reward their teams, disburse funds and engage consumers. Branded payment solutions include the issuance and distribution of gift cards, egifts, corporate payouts and rewards, along with the technology to deliver these products in seamless, integrated ways. BHN’s network spans the globe with more than 400,000 consumer touchpoints. Learn more at BHN.com.

At Blackhawk Network (BHN), we deliver cutting-edge payment and rewards solutions that power the global fintech ecosystem. As a Staff Cloud Systems Engineer, you will play a key role in shaping the technology foundation that keeps our teams connected, secure, and productive. This is a senior, hands-on role where you’ll architect and scale our cloud identity, automation, and AI platforms, while partnering across security, compliance, and infrastructure teams to drive innovation and resilience.

You’ll be both a builder and a leader — creating scalable systems, guiding cross-functional projects, and mentoring peers as we modernize and expand our corporate IT environment. For the right candidate, this is an opportunity to influence strategy, deliver enterprise-scale impact, and help advance BHN’s mission to transform the way people connect, transact, and reward. Location: US - Remote

Responsibilities 

• Partner with teams to design, maintain, and scale BHN’s corporate cloud identity platforms (Okta, Azure Active Directory, Google Workspace, Microsoft 365, Teams) and SaaS resources, while contributing to the long-term roadmap and strategy for cloud identity, automation, and AI-enabled IT services. 
• Participate in the AI Tooling team with hands-on administration of AI platforms and building agents to streamline IT operations and business processes, helping shape adoption of emerging technologies. 
• Collaborate with Employee Technology teams to build and maintain automation (PowerShell, Bash) for provisioning, licensing, and system management; ensure knowledge is shared across the group, while continuously evaluating workflows for simplification, standardization, and automation. 
• Partner with security and compliance teams to secure cloud platforms, oversee vulnerability management, patching, and hardening, and advance a Zero Trust security model across identity and SaaS, ensuring alignment with regulatory frameworks (SOC 2, ISO, PCI, GDPR) and maintaining accurate inventory. 
• Support corporate IT infrastructure in collaboration with networking and vendor teams, including VPN, connectivity, SaaS integrations, and monitoring/observability systems (logging, alerting, performance). 
• Act as a tier-3 escalation point, coordinating with Helpdesk and business stakeholders to resolve complex issues, while providing technical guidance and mentorship to promote best practices across infrastructure, security, and automation. 
• Lead cross-functional projects, SaaS lifecycle management (evaluation, integration, optimization, decommissioning), and vendor/contract oversight to align services with BHN priorities and compliance needs. 
• Demonstrate a passion for clear documentation, knowledge sharing, and strong communication across technical and non-technical teams. 
• Travel occasionally (5–10%) to satellite offices for project execution and support. 

Core Values 

• You’re a self-starter who needs little to no direction from management. 
• You perform well in ambiguous situations, knowing how to research and learn what needs to be done. 
• You have excellent troubleshooting skills and dig down to the root of problems — there are no dead ends. 
• You prioritize effectively, knowing when and how to juggle multiple tasks at once. 
• You pay close attention to detail, producing polished and easy-to-understand documentation, while keeping systems and processes current. 

Qualifications 

• Bachelors Degree in a related technical field, or 2 year technical degree.
• 7+ years of experience in systems engineering or corporate IT, including at least 3+ years designing and managing identity platforms such as Okta and Azure Active Directory. 
• 5+ years of experience in scripting and automation (PowerShell, Bash), with hands-on expertise building and maintaining automation workflows and AI-driven agents. 
• 5+ years of experience managing SaaS ecosystems (Google Workspace, Microsoft 365, Teams, Box), including full SaaS lifecycle management (evaluation, integration, optimization, decommissioning). 
• 4+ years of experience with corporate networking, VPN, and monitoring/observability tools (logging, alerting, performance monitoring). 
• 4+ years working with security and compliance frameworks (SOC 2, ISO, PCI, GDPR), with demonstrated experience implementing Zero Trust or similar modern security architectures. 
• Proven ability to lead projects, mentor peers, and collaborate across teams with strong communication and documentation practices; fintech or other regulated industry experience is preferred. 
• Trainings or certifications (Okta Certified Professional, Microsoft Certified: Identity and Access Administrator, CISSP) are desired but not required. 
• Willingness to travel up to 10% of the time 

Pay is based on several factors including but not limited to education, work experience, certifications, etc. In addition to your salary, Blackhawk Network offers benefits including 401k with employer match, medical, dental, vision, 12 paid holidays throughout the year 2025, sick pay accrual according to state law, parental leave, life insurance, disability insurance, accident and illness insurance, health and dependent care flexible spending accounts, wellness benefits, and flexible time off for all full-time employees. 

Blackhawk Network provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.  Blackhawk Network believes that diversity leads to strength. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

Blackhawk Network encourages applicants with previous criminal records to apply to all positions and, pursuant to the San Francisco and Los Angeles Fair Chance Acts (and other “Fair Chance” laws), Blackhawk Network will consider for employment qualified applicants with arrest and conviction records.  For Philadelphia applicants or jobs, please see a copy of Philadelphia’s ordinance on this topic by clicking this link: https://codelibrary.amlegal.com/codes/philadelphia/latest/philadelphia_pa/0-0-0-280104.