{"id":2496326,"url":"https://alion.io/job/paystack-senior-it-engineer","title":"Senior IT Engineer","company":{"id":62358,"name":"Paystack","domain":"paystack.com","url":"https://alion.io/company/paystack","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":{"grade":"A","score":95,"open_postings":5,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":96,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Support","role_family":"Support","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Lagos, Nigeria"],"countries":["NG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":9000,"max_usd":24000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":721},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"DLP","optional":false},{"name":"Git","optional":false},{"name":"ISO 27001","optional":false},{"name":"LDAP","optional":false},{"name":"PCI DSS","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Terraform","optional":false},{"name":"VLAN","optional":false},{"name":"Zero Trust","optional":false},{"name":"CIS Benchmarks","optional":true},{"name":"ITIL","optional":true},{"name":"ITSM","optional":true},{"name":"osquery","optional":true}],"status":"live","first_seen_at":"2026-08-26T08:10:32Z","employer_posted_date":"2026-08-26","last_verified_at":"2026-10-17T17:13:08Z","board_verified":true,"closed_at":null,"days_open":52,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":52},"description":"About Paystack\nPaystack’s mission is to power African ambition. Over 300K businesses across Nigeria, South Africa, Ghana, and Kenya use Paystack’s modern payments gateway, including Qatar Airways, MTN, Burger King, UPS, Africa World Airlines, AXA Mansard Insurance, FairMoney, PiggyVest, Crocs, Under Armour, Richemont Lifestyle Group, and many others.\nOver the last 10 years, we’ve built products that have helped shape online payments in Africa, from automated recurring payments to direct bank payments and automated chargebacks. Today, Paystack is part of The Stack Group (TSG), a family of technology brands building modern infrastructure across payments, banking, consumer products, and emerging technologies.\nAt Paystack, we hire talented people, treat them with genuine respect, and give them the space, resources, and support to do the best work of their lives. We’d love your help.\nAbout the Senior IT Engineer role\nOur IT Operations team is a small, high-impact platform engineering unit. We manage the identity, endpoint, network, and access infrastructure for over 300 employees and 100+ outsourced agents across six offices (Lagos, Nairobi, Accra, Cape Town, and Dubai).\nWe manage a fully automated macOS fleet, every physical office network, and roughly thirty core applications secured behind SSO. We do all of this inside a highly regulated fintech environment that holds PCI-DSS and ISO 27001 certifications and operates under the CBN.\nOur environment is heavily integrated and highly automated. We’ve built an identity lifecycle that flows automatically from our HR systems into our identity provider. Macs deploy zero-touch, and access requests provision themselves.\nAs our scale and complexity increase, we are bringing on a Senior IT Infrastructure Engineer to expand our engineering capacity and provide critical redundancy across our Tier-1 systems. Reporting directly to the Head of IT, you will help drive, manage, and maintain this integrated ecosystem while executing on our long-term infrastructure roadmap.\nWe’ll trust you to\nDrive Identity Management: Manage our identity lifecycle. You will configure SAML and OIDC across our application estate, maintain SCIM provisioning, manage attribute-driven RBAC, and enforce phishing-resistant authentication.\n\nMaintain Lifecycle Automation: Support and improve the joiner/mover/leaver pipeline. Build automated processes for accessmenent from approval to access provisioning\n\nManage the Fleet & Device Trust: Oversee our macOS environment. This includes automated enrollment, configuration profiles, EDR, and enforcing DLP on outsourced devices. You will help maintain device trust as a real, certificate-backed control that rejects unmanaged or unpatched devices.\n\nMaintain Global Networks: Manage the physical network across six locations. You’ll handle multi-WAN failover, VLAN segmentation, centrally managed wireless/switching, server rooms, and the carrier connectivity linking our on-premise infrastructure to the cloud.\n\nDrive the Zero Trust Migration: Help us execute the transition away from legacy VPNs. You will drive our move to Zero Trust Network Access (ZTNA), enforcing per-application authorization based on real-time device posture.\n\nBuild as Code: Treat the IT environment as code. You’ll use Terraform, Git-based staging-to-production pipelines, and Python/Bash where no provider exists. Your first instinct should always be to reach for an API before logging into an admin console.\n\nEnforce Automated Compliance: Turn regulatory requirements into automated controls that generate their own evidence. We balance ISO 27001, ISO 20000, PCI-DSS, NDPR, and the CBN IT Blueprint simultaneously.\n\nResolve Complex Tickets: We all work tickets leadership included. You will handle complex escalations and diagnose faults that span a firewall, a carrier, and a cloud provider all at once.\n\nDocument for the Future: Write documentation to a standard that survives your absence.\n\nYou’ll thrive in this role if you have\n5+ years in infrastructure or systems engineering, ideally including time on a small, high-leverage team.\nReal depth in at least two of the four areas below, and enough baseline competence in the rest to handle an escalation (we are not looking for a unicorn who is a master of all four):\nIdentity & Access Management: SAML 2.0, OIDC, OAuth 2.0, SCIM 2.0, LDAP, WebAuthn/FIDO2. You have actually built lifecycle automation, not just clicked through SSO setup wizards.\n\nEndpoint Management at Scale: Apple MDM protocols, zero-touch enrollment, declarative configurations, and compliance enforcement across hundreds of devices.\n\nNetwork Engineering: Multi-site and multi-carrier setups, VLANs, complex routing, firewall policies, multi-WAN failover, 802.1X, and RADIUS.\n\nInfrastructure as Code: Terraform, Git workflows (with peer review), and enough Python, Go, or Bash to confidently build against a REST API.\n\nYou should also have:\nExperience operating under external assessors with multiple active compliance frameworks.\n\nA track record of inheriting live, critical systems and improving them without breaking what already works.\n\nThe engineering judgment to know when not to automate. (Not everything needs to be code).\n\nStrong technical writing skills. You write specs, procedures, and audit responses that other teams can actually understand and act on.\n\nBonus points if you\nExperience with public cloud networking, certificate management, and identity federation.\n\nKnowledge of X.509, mTLS, ACME, or SCEP for certificate-backed device identity.\n\nExperience using osquery (or equivalent) and turning CIS benchmarks into enforced configurations.\n\nExperience enforcing security baselines on BPOs and devices you do not physically own.\n\nTenant-level administration of enterprise collaboration suites, including deep DLP classification.\n\nITSM design experience under ISO 20000 or ITIL.\n\nBenefits\nCompetitive compensation package and benefits\n\n13th month bonus\n\nTSG Equity compensation\n\nFull medical coverage\n\nWellbeing stipend\n\nHybrid working environment\n\nSmart, kind colleagues who are invested in your growth.\n\nPaystack is an equal opportunity employer and prohibits discrimination and harassment of any kind. We’re committed to providing employees with a work environment that is progressive and open-minded. Our employment philosophy is to hire the best people and empower them to do the best work of their lives. Employment decisions are based on business needs and individual merit without regard to race, color, religion, ethnicity, sexual orientation, nationality, marital status, gender, or age.","description_format":"text","description_chars":6607,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Hybrid work"],"hiring_locations":[{"name":"Nigeria","iso":"NG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-10-14T04:43:34Z"}],"visa":[],"liveness":{"score":74,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.825,"p_room":0.9,"age_days":51,"expected_fill_days":96,"reasons":["conf:0","win:mid"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/paystack-senior-it-engineer","json_url":"https://alion.io/job/paystack-senior-it-engineer.json","meta":{"generated_at":"2026-10-17T17:54:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":513,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":62358},"rest":"https://alion.io/mcp/rest/get_company?id=62358"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpaystack-senior-it-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpaystack-senior-it-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpaystack-senior-it-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/paystack-senior-it-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpaystack-senior-it-engineer"}]}