IT Engineering Manager — Endpoint, SaaS

About the opportunity About the Role We are hiring a hands-on IT Engineering Manager to own the Enterprise Applications domain — the devices, collaboration tools, and identity/access that talabat employees rely on every day — and to lead the small engineering team behind it, coordinating across our markets. This is a working manager role: roughly 70–80% technical execution and standard-setting, and 20–30% people and delivery leadership. You will operate with a high degree of autonomy, staying close to the work while building the automation, documentation, and standards that let the function scale consistently across markets. It is a build role — you set the technical bar by doing, then make that excellence repeatable so it outlives any one person. Your domain sits alongside other IT engineering domains, and your success depends as much on clean collaboration across those boundaries as on the depth of your own work. You will define and defend clear ownership of your systems while partnering openly with adjacent teams who depend on them. You will cultivate strong vendor relationships and drive strategic partnerships that enhance application functionality and support — a single quote is a starting point, not a decision. Scope boundary: This role owns corporate and employee-facing IT (the digital workplace), including identity and endpoint end-to-end, which adjacent IT teams consume. It does not own product, ordering, or operational (rider/vendor-facing) systems, which sit with separate engineering functions. Where core platforms are provided centrally by Delivery Hero, this role owns the local instances and acts as talabat's engineering interface to those central teams. What You'll Own Endpoint & Device Management Own endpoint fleet strategy across macOS and Windows — MDM (Jamf, Intune, Jump Cloud), security baselines, patching, encryption, inventory, and the full device lifecycle from procurement and provisioning through to offboarding and asset recovery. Maintain endpoint posture in partnership with Security. SaaS Administration Own day-to-day administration of the core SaaS stack — Google Workspace, Slack, Atlassian, and similar — including configuration, license management, integrations, cost optimization, and strategic licensing negotiations with vendors. Evaluate and onboard new business tools, retire redundant ones, and operate the local instances of centrally provided platforms. Drive Power User Community deployment and management across entities where applicable. Identity & Access Administer SSO, MFA, and identity providers (Okta, Entra, Google or similar), operating local instances and interfacing with the central identity platform. Own the Joiner-Mover-Leaver lifecycle — provisioning, deprovisioning, role-based access, least-privilege, and periodic access reviews — automated wherever possible. Automation & AI (a core expectation, not a future investment) Engineer away repetitive work: if a task is done the same way more than twice, automate it. Scripting (Python, Bash, PowerShell) and AI tooling are current expectations of this role. Use automation and AI to create team capacity without growing headcount, and lead the team's adoption of these tools. Incident Response & Reliability Own incident response and the on-call rotation for your domain. Act as escalation point during peak and out-of-hours periods, run proactive incident communication, and drive root-cause resolution rather than recurring workarounds. Participate in cross-domain incident coordination where issues span into adjacent IT teams. Build reliability and security in by design — every system has a clear answer to "what happens when this fails?" Service, Compliance & Standards Define and track IT service standards, SLAs, and operational metrics, and run ticketing/ITSM workflows that reduce friction for employees. Ensure a consistent support model across locations and time zones, adhering to agreed service levels. Champion change management practices to ensure seamless application delivery and effective transitions. Contribute to compliance and audit readiness (e.g. SOC 2 / ISO 27001 IT controls, access reviews, evidence) in partnership with Security and central teams. Standardize before scaling — build solutions that work across all markets on a shared foundation, allowing local flavor without fragmenting the stack. Leadership, People & Vendors Lead, coach, and raise the technical bar of a small IT engineering team, with a mandate to grow both its capability and its headcount. Set the standard hands-on, develop your engineers, and manage performance fairly and decisively — investing genuinely in growth, and making the hard call when the bar cannot be met. Provide mentorship to team members, promote knowledge sharing and professional growth. Create and maintain runbooks, training materials, and self-service resources so knowledge is never trapped in one person's head. Manage vendors, procurement, and renewals — actively challenge cost

Own endpoint fleet strategy across macOS and Windows (MDM, security baselines, patching, encryption, inventory, device lifecycle). Manage SaaS stack administration (Google Workspace, Slack, Atlassian, licensing, integrations, cost optimization, vendor negotiations) and local instances of central platforms. Administer SSO/MFA and identity providers (Okta, Entra, Google), manage Joiner-Mover-Leaver lifecycle with least-privilege and automated reviews. Drive automation and AI adoption to reduce manual work; script in Python, Bash, PowerShell and leverage AI tooling. Own incident response and on-call rotation; lead cross-domain incident coordination; drive root-cause analysis and reliability by design. Define and track IT service standards, SLAs, and ITSM workflows; ensure consistent support across locations/time zones; contribute to compliance/audit readiness (SOC 2/ISO 27001). Lead, coach, and grow a small IT engineering team; manage vendors, procurement, and renewals; create runbooks and self-service resources to disseminate knowledge.