Job Overview

Paystack is seeking a Senior IT Engineer to expand the engineering capacity of its IT Operations team and provide critical redundancy across Tier-1 systems. Reporting directly to the Head of IT, the successful candidate will help drive, manage and maintain an integrated infrastructure environment while delivering Paystack’s long-term infrastructure roadmap.

The IT Operations team manages identity, endpoint, network and access infrastructure for more than 300 employees and over 100 outsourced agents across offices in Lagos, Nairobi, Accra, Cape Town and Dubai. Its environment includes a fully automated macOS fleet, physical office networks and approximately 30 core applications secured behind single sign-on. The work is performed within a regulated fintech environment holding PCI-DSS and ISO 27001 certifications and operating under the CBN.

Job Details

Employer: Paystack
Experience: 5+ years in infrastructure or systems engineering
Job Field: Engineering
Location: Nigeria
Work Arrangement: Hybrid

About the Organization

Paystack’s mission is to power African ambition. More than 300,000 businesses across Nigeria, South Africa, Ghana and Kenya use its payments gateway, including Qatar Airways, MTN, Burger King, UPS, Africa World Airlines, AXA Mansard Insurance, FairMoney, PiggyVest, Crocs, Under Armour and Richemont Lifestyle Group.

Over the last 10 years, Paystack has developed products that have helped shape online payments in Africa, including automated recurring payments, direct bank payments and automated chargebacks. Paystack is part of The Stack Group, a family of technology brands building infrastructure across payments, banking, consumer products and emerging technologies.

Responsibilities

• Manage the identity lifecycle, including SAML and OIDC configuration, SCIM provisioning, attribute-driven RBAC and phishing-resistant authentication.
• Support and improve joiner, mover and leaver processes, including automated access approval and provisioning.
• Oversee the macOS environment through automated enrolment, configuration profiles, endpoint detection and response, and data loss prevention controls for outsourced devices.
• Maintain device trust as a certificate-backed control that rejects unmanaged or unpatched devices.
• Manage physical networks across six locations, including multi-WAN failover, VLAN segmentation, centrally managed wireless and switching, server rooms, and carrier connectivity between on-premises infrastructure and the cloud.
• Help transition from legacy VPNs to Zero Trust Network Access, with per-application authorisation based on real-time device posture.
• Manage the IT environment as code using Terraform, Git-based staging-to-production pipelines, and Python or Bash where no provider exists.
• Convert ISO 27001, ISO 20000, PCI-DSS, NDPR and CBN IT Blueprint requirements into automated controls that generate compliance evidence.
• Resolve complex escalations involving combinations of firewalls, carriers and cloud providers.
• Write documentation, specifications, procedures and audit responses that other teams can understand and use.

Requirements and Qualifications

The role requires 5+ years of experience in infrastructure or systems engineering, ideally including experience on a small, high-leverage team.

Candidates should have substantial expertise in at least two of the following areas, with enough baseline competence in the others to handle escalations:

• Identity and access management: SAML 2.0, OIDC, OAuth 2.0, SCIM 2.0, LDAP, WebAuthn and FIDO2, including lifecycle automation.
• Endpoint management at scale: Apple MDM protocols, zero-touch enrolment, declarative configurations and compliance enforcement across hundreds of devices.
• Network engineering: Multi-site and multi-carrier environments, VLANs, complex routing, firewall policies, multi-WAN failover, 802.1X and RADIUS.
• Infrastructure as code: Terraform, Git workflows with peer review, and Python, Go or Bash for building against REST APIs.

Applicants should also have experience operating under external assessors with multiple active compliance frameworks, a record of improving live critical systems without disrupting existing operations, sound judgement about when automation is appropriate, and strong technical writing skills.

Additional Experience

• Public cloud networking, certificate management and identity federation.
• X.509, mTLS, ACME or SCEP for certificate-backed device identity.
• osquery or an equivalent tool, and the use of CIS benchmarks to create enforced configurations.
• Security baselines for BPOs and devices not physically owned by the organisation.
• Tenant-level administration of enterprise collaboration suites, including deep DLP classification.
• ITSM design under ISO 20000 or ITIL.

Compensation and Work Conditions

• Competitive compensation package and benefits.
• 13th-month bonus.
• TSG equity compensation.
• Full medical coverage.
• Wellbeing stipend.
• Hybrid working environment.
• Equal-opportunity employment in a workplace that prohibits discrimination and harassment.

Career Growth

Paystack describes its colleagues as being invested in employee growth and provides the space, resources and support for people to do their best work.

Quick Eligibility Check

• Required experience: 5+ years in infrastructure or systems engineering
• Verified duty station:  Nigeria,
• Work arrangement: Hybrid
• Core requirement: Experience operating under external assessors with multiple active compliance frameworks
• Core requirement: Track record of improving live critical systems without breaking existing operations
• Core requirement: Strong technical writing skills
• Core requirement: Engineering judgement about when not to automate
• Preferred requirement: Public cloud networking, certificate management and identity federation
• Preferred requirement: Experience with osquery or an equivalent and CIS benchmark enforcement
• Preferred requirement: ITSM design under ISO 20000 or ITIL

Application Readiness Checklist

• Show evidence of the required experience through relevant roles, dates and measurable responsibilities.
• Tailor your CV to the verified responsibilities and Engineering skills stated in this vacancy.
• Confirm that the vacancy is still open before submitting your application.

Vacancy Verification

This vacancy was checked by AfriJobSpace on September 5, 2026 against the employer’s official recruitment source. View the official vacancy source.

Application Safety

Apply only through the official employer channel provided on this page. Do not pay anyone to submit or process your application, and verify unexpected recruitment messages directly with the employer.

How to Apply

Interested and qualified candidates should submit their application through the employer’s official application platform using the Apply for Job button on this page.