{bc}
greenhouse

IT Client Engineer

Figure
Napi Headquarters, USA
Mid
Discovered 1 months ago
bashjiralinuxoktapowershellpython

Full Job Posting

Endpoint Engineering

Own zero-touch enrollment end to end: Apple Business Manager for macOS, Windows Autopilot for Windows, and PXE provisioning for Ubuntu workstations

Translate CIS Benchmarks into deployable configuration profiles across all platforms: deterministically applied settings accompanied with osquery validations to validate posture

Operate FleetDM as the cross-platform management agent across macOS, Windows, and Ubuntu LTS

Maintain standard, reproducible workstation builds with measured and enforced patch compliance

Build hardened device configurations for factories, contract manufacturers, and low-connectivity sites: loaner and clean-device programs, encryption enforcement and escrow, conditional access, and remote wipe and recovery

Deploy and maintain CrowdStrike Falcon coverage across the fleet in partnership with Security, closing gaps on unmanaged or drifted devices

Translate data handling and IP protection requirements from Security, Legal, and Engineering leadership into enforceable technical controls

Identity and SSO Engineering

Own SSO integration of applications into Okta (SAML and OIDC), including internal tools with no vendor documentation

Design application authentication and RBAC from first principles, in coordination with Security

Automate the identity lifecycle end to end: provisioning, entitlement, and deprovisioning driven by Okta Workflows and integrated with Google Workspace, Slack, and Jira

SaaS Operations and Automation

Build tooling in Python, Bash, or PowerShell to eliminate manual work across onboarding, offboarding, provisioning, reporting, and audit

Run license and access audits, surface inactive accounts and orphaned entitlements, and drive cost recovery with Procurement

Formalize change management for endpoint and SaaS changes and participate in the Change Advisory Board

Document standards, runbooks, and automation so the broader IT team can operate and extend what you build

Act as escalation point for complex client-side issues and mentor Operations Specialists

Qualifications

  • Hands-on experience managing macOS, Windows, and Linux (Ubuntu LTS) endpoint fleets in production
  • Practical experience with zero-touch enrollment and modern endpoint tooling: FleetDM or comparable osquery-based management, Apple Business Manager, Windows Autopilot or Microsoft Intune
  • Experience turning security benchmarks (CIS or similar) into enforced, validated configuration policy
  • Strong scripting skills in Python, Bash, and/or PowerShell, with a track record of replacing manual processes with code
  • Working knowledge of authentication fundamentals: SAML, OIDC, SCIM, and the tradeoffs between them
  • Experience administering identity and SaaS platforms at scale: Okta, Google Workspace, Slack, Jira, including SCIM and API-driven provisioning
  • Sound judgment on security and risk tradeoffs, and the ability to explain technical controls to non-technical stakeholders
  • Detail-oriented and process-driven, particularly in documenting standards and policy
  • Great communication, collaboration, and interpersonal skills

Bonus Qualifications

Experience supporting devices or users at manufacturing sites, contract manufacturers, or other high-IP-risk environments

Familiarity with export control, data residency, or IP protection frameworks in hardware and software RD

Experience with employee-built AI applications: assess authentication and permissions risk, and redirect requests to a Security consult

Experience deploying or operating EDR agents at fleet scale (CrowdStrike Falcon or similar)

Experience building integrations against SaaS APIs and identity providers

Experience supporting engineering workloads on Linux, including workstation and build-host management

Experience standing up IT capability at new sites, or supporting international growth remotely from a central location

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Figure