Say hello to possibilities.

It's not everyday that you consider starting a new career challenge.

RingCentral, Inc. (NYSE: RNG) is a global leader in cloud-based communications and collaboration software. We are fundamentally changing the nature of human interaction—giving people the freedom to connect powerfully and personally from anywhere, at any time, on any device. The company provides unified voice, video meetings, team messaging, digital customer engagement, and integrated contact center solutions for enterprises globally. RingCentral's open platform integrates with leading business apps and enables customers to easily customize business workflows.

We're a $2 billion company that's growing at 30+% annually and we're expanding our Engineering Team to make sure we stay ahead of the competition. RingCentral is headquartered in Belmont, California, and has offices around the world.

Title: Senior Systems Engineer (AWS)

Team: IT Infrastructure & Systems Engineering

Location: [Bengaluru / Hybrid]

Role

You'll own the design, automation, and reliability of our cloud and identity infrastructure across AWS and GCP, with hybrid identity spanning Okta, Active Directory, and Entra ID. You'll set technical standards for the team, lead incident response, and mentor engineers. This role covers infrastructure and identity only. It does not include SaaS application administration or endpoint management.

What You'll Do

Cloud architecture and operations

Design and operate AWS infrastructure: multi-account and multi-region structure, VPC and network design, IAM, compute, and storage, with security and cost in mind
Plan and test high availability and disaster recovery, and run regular cost reviews
Support GCP workloads, org-level IAM, and org policy
Maintain consistent networking, connectivity, and guardrails across clouds and on-prem

Infrastructure as code and automation

Own Terraform module design, remote state, and CI/CD-driven plan/apply with drift detection
Use Ansible or equivalent for configuration management of Linux systems
Automate operational and lifecycle work with Python, PowerShell, or Bash, vendor APIs, and workflow platforms (Okta Workflows, n8n, or similar), and track the toil removed

Identity and access

Own Okta (Identity Engine) architecture: SSO (SAML/OIDC), SCIM lifecycle provisioning, MFA, authentication policy, and Device Trust
Manage hybrid identity across Active Directory and Entra ID, including sync and federation
Own service-account and machine-identity lifecycle, secrets management, and least-privilege role design across cloud and identity platforms

Reliability and observability

Define SLIs and SLOs with service owners, and build the metrics, logs, traces, dashboards, and alerting that support them with low noise
Work with paging and ITSM tooling (e.g., PagerDuty or Freshservice) and OpenTelemetry-based instrumentation
Join the on-call rotation, lead major incidents, write RCAs, and drive fixes that prevent repeat pages
Troubleshoot across network, OS, identity, and application layers

Security and compliance

Drive vulnerability remediation and hardening
Own audit evidence collection and remediation for SOC 2 or similar
Review and document risk exceptions

Leadership

Review designs and pull requests, mentor engineers, and maintain runbooks and architecture documentation
Partner with security, DevOps, and application teams on infrastructure changes

Required Qualifications

6+ years in systems, infrastructure, or cloud engineering
Production AWS architecture experience beyond basic provisioning, including multi-account design and DR
Hands-on GCP experience (IAM, projects, org policy, networking)
Terraform at scale: module design, state management, testing, and pipeline integration
Production Okta experience: debugging SAML/OIDC failures, building SCIM integrations, and working with the Okta API
Working knowledge of Active Directory and Entra ID in a hybrid environment, including LDAP
Understanding of modern authentication standards (OAuth 2.0, FIDO2)
Strong networking fundamentals (TCP/IP, DNS, VPN, load balancing, firewalls)
Linux administration; Windows Server a plus
Proficiency in Python or PowerShell, plus Bash
Experience with an observability stack (Datadog, Prometheus/Grafana, CloudWatch, ELK, or similar) and with defining SLOs
Willingness to join an on-call rotation and lead incidents

Preferred Qualifications

Okta Certified Professional or Administrator
AWS Solutions Architect Professional, AWS Security Specialty, or equivalent GCP
Okta Workflows, n8n, or other automation platform experience
Zero trust or device-trust implementation experience
Kubernetes (EKS) and CI/CD (GitHub Actions, Jenkins)
Experience supporting SOC 2 or similar audits

On-Call

Primary/secondary rotation, roughly one week in 4, including weekends. Pages are tied to defined severity levels. Because the team supports global operations, expect some out-of-hours coverage.

First 12 Months

Own a defined segment of AWS/GCP end-to-end, fully in Terraform
Cut manual operational work measurably through automation, with the hours saved tracked
Define SLOs for the services you own and improve alert quality and time to resolution
Close identified SSO, SCIM, and IAM gaps, and complete at least one access certification cycle

Senior IT Infrastructure & Systems Engineering - AWS