Files.com · 1 month ago
Onboarding Engineer (Remote – U.S.)
United States
Full-time
Remote
Mid, Senior Level
$95K/yr - $150K/yrFiles.com is a profitable, founder-led SaaS company powering secure file transfer and automation for over 4,000 brands. The Onboarding Engineer will design and implement secure file workflows, integrating APIs and hardening networks to ensure successful deployments for enterprise clients.
Enterprise SoftwareFile SharingSaaS
Responsibilities
Design production-ready deployments
Map requirements into robust architectures: identity, access, encryption, automation, retention, and auditability
Author cutover plans with throughput targets, back-pressure handling, retry logic, and verification (checksums, manifests)
Implement identity & access correctly
Stand up SAML/OIDC SSO with Okta/Azure AD; configure SCIM for lifecycle provisioning
Model least-privilege RBAC, groups/roles, device/IP policies, and MFA posture
Integrate and automate
Connect storage backends (e.g., S3/Blob), enterprise systems, and endpoints
Use our REST API and webhooks to build event-driven automations; script glue in Python/PowerShell/Bash when needed
Harden the network path
Work through real-world constraints: egress proxies, TLS versions/cipher suites, DPI/IDS appliances, MTU/path issues, DNS/CAA/CAA misconfigurations, and IP allowlists
Validate performance end-to-end: parallelism, window sizes, chunking, and timeouts
Teach, document, and scale
Run admin training and technical handoffs; produce crisp diagrams, runbooks, and KB articles
Feed patterns back to Product & Engineering; turn one-off fixes into repeatable playbooks
SAML assertion bugs (NameID/ACS mismatch, clock skew) and OIDC scope/claim mapping
SCIM drift detection, deprovisioning safety, and group-driven role assignment
SFTP/FTPS tuning across high-latency links; negotiating ciphers/MACs; passive mode firewall pinholes
Proxy/TLS handshake failures (SNI, intermediate certs, mTLS); rotating keys/certs without downtime
Event-driven pipelines with webhooks, retries, idempotency keys, and dead-letter strategies
Bulk migrations: parallel workers, rate limiting, checksum validation, and resumable transfers
Building observability from day one: audit streams, SIEM forwarding, and success SLOs
Production deployments shipped on schedule with zero “failed launches.”
Adoption curves that climb in the first 30–90 days: usage, automations, departments onboarded
Security posture locked: SSO/SCIM live, RBAC least-privilege, audit forwarding enabled
Throughput targets met or exceeded with documented performance baselines and runbooks
Expansion signals identified early via consultative discovery (more sites, features, or storage)
Playbooks created that the next Onboarding Engineer (or customer admin) can reuse verbatim
Qualification
Required
Deep systems knowledge and crisp customer communication
Fluency in at least several of: SAML/OIDC/SCIM, SFTP/FTPS/HTTPS, TLS & PKI, REST/webhooks, Python/PowerShell/Bash, IP networking, proxies/firewalls
Ability to design production architectures: SSO, RBAC, data flows, automation triggers, IP allowlists, encryption at rest/in transit, audit pipelines
Experience with enterprise surface area and real technical depth: SFTP/FTPS/HTTPS, PGP, REST APIs, webhooks; IdPs (Okta, Azure AD, AD FS, LDAP), key management, least-privilege RBAC; hybrid networks, reverse proxies, TLS, DNS, NAT, egress controls; storage integrations (S3/Blob), SharePoint/OneDrive connectors
Experience in implementing identity & access correctly: Stand up SAML/OIDC SSO with Okta/Azure AD; configure SCIM for lifecycle provisioning
Ability to model least-privilege RBAC, groups/roles, device/IP policies, and MFA posture
Experience in connecting storage backends (e.g., S3/Blob), enterprise systems, and endpoints
Ability to use REST API and webhooks to build event-driven automations; script glue in Python/PowerShell/Bash when needed
Experience in working through real-world constraints: egress proxies, TLS versions/cipher suites, DPI/IDS appliances, MTU/path issues, DNS/CAA/CAA misconfigurations, and IP allowlists
Ability to validate performance end-to-end: parallelism, window sizes, chunking, and timeouts
Experience in running admin training and technical handoffs; producing crisp diagrams, runbooks, and KB articles
Ability to feed patterns back to Product & Engineering; turn one-off fixes into repeatable playbooks
Ability to anticipate failure modes and design guardrails so they never reach production
Strong async notes, tight agendas, excellent ownership
Benefits
100% Paid Health, Dental & Vision (75% for family)
401(k) with 4% Company Match
Equity Grants for Every Employee
Paid Parental Leave
20 PTO Days + 11 Holidays + Full Company Winter Break
$1,000 Signing Bonus + Modern Apple Laptop + Anniversary Gifts
Team Travel to NYC, Austin, Nashville, Miami, and more
Company
Files.com
Files.com is a SaaS file transfer platform that helps organizations securely transfer & share files between users, teams, and organizations.
Founded in 2008
51-200 employees
Funding
Current Stage
Growth StageTotal Funding
$46.5MKey Investors
Riverwood Capital
2021-02-01Series A· $46.5M
Leadership Team
Kevin Bombino
CEO / Founder
Recent News
2025-12-18
2025-07-24
Company data provided by crunchbase