IT Engineering Manager — Endpoint, SaaS

IT Engineering Manager — Endpoint, SaaS Full-time Company Description A little bit about talabat

talabat is the leading online food and groceries ordering platform in MENA, operating in 9 countries across the region. Founded in 2004 by a small group of entrepreneurs in Kuwait, talabat’s success expanded to the rest of the GCC region, Egypt & Jordan, making it the largest and most popular food ordering app. With over 2,000+ employees and millions of users, we deliver hundreds of thousands of orders every day.We are part of the Delivery Hero network building the next generation of online delivery platforms across the globe. Our network is truly international with engineering teams in 13 countries and operations in 40+ countries. Job Description About the Role We are hiring a hands-on IT Engineering Manager to own the Enterprise Applications domain — the devices, collaboration tools, and identity/access that talabat employees rely on every day — and to lead the small engineering team behind it, coordinating across our markets. This is a working manager role: roughly 70–80% technical execution and standard-setting, and 20–30% people and delivery leadership. You will operate with a high degree of autonomy, staying close to the work while building the automation, documentation, and standards that let the function scale consistently across markets. It is a build role — you set the technical bar by doing, then make that excellence repeatable so it outlives any one person. Your domain sits alongside other IT engineering domains, and your success depends as much on clean collaboration across those boundaries as on the depth of your own work. You will define and defend clear ownership of your systems while partnering openly with adjacent teams who depend on them. You will cultivate strong vendor relationships and drive strategic partnerships that enhance application functionality and support — a single quote is a starting point, not a decision. Scope boundary: This role owns corporate and employee-facing IT (the digital workplace), including identity and endpoint end-to-end, which adjacent IT teams consume. It does not own product, ordering, or operational (rider/vendor-facing) systems, which sit with separate engineering functions. Where core platforms are provided centrally by Delivery Hero, this role owns the local instances and acts as talabat's engineering interface to those central teams. What You'll Own Endpoint & Device Management Own endpoint fleet strategy across macOS and Windows — MDM (Jamf, Intune, Jump Cloud), security baselines, patching, encryption, inventory, and the full device lifecycle from procurement and provisioning through to offboarding and asset recovery. Maintain endpoint posture in partnership with Security. SaaS Administration Own day-to-day administration of the core SaaS stack — Google Workspace, Slack, Atlassian, and similar — including configuration, license management, integrations, cost optimization, and strategic licensing negotiations with vendors. Evaluate and onboard new business tools, retire redundant ones, and operate the local instances of centrally provided platforms. Drive Power User Community deployment and management across entities where applicable. Identity & Access Administer SSO, MFA, and identity providers (Okta, Entra, Google or similar), operating local instances and interfacing with the central identity platform. Own the Joiner-Mover-Leaver lifecycle — provisioning, deprovisioning, role-based access, least-privilege, and periodic access reviews — automated wherever possible. Automation & AI (a core expectation, not a future investment) Engineer away repetitive work: if a task is done the same way more than twice, automate it. Scripting (Python, Bash, PowerShell) and AI tooling are current expectations of this role. Use automation and AI to create team capacity without growing headcount, and lead the team's adoption of these tools. Incident Response &