Staff Client Engineer

This is a fully remote position, open to applicants in Maryland, +1 more state.

📋 Description

• Design, develop, and maintain enterprise-level Gold OS Images along with deployment configurations for macOS, Windows 10/11, and Ubuntu Linux.

• Create zero-touch provisioning workflows utilizing Autopilot and ADE.

• Collaborate with the IT Provisioning Team to enhance hardware staging workflows.

• Take ownership of and optimize UEM and MDM platforms including Jamf, Intune, and Kandji.

• Architect and oversee the automated Workday and Okta Lifecycle Management pipeline.

• Design and implement automated intake forms and workflows through Jira Service Management or Okta Workflows.

• Automate workflows related to employee transfers, role changes, and terminations for SaaS provisioning and access revocation.

• Act as the technical escalation point for IAM and automated provisioning issues.

• Troubleshoot attribute mismatches between Workday and Okta as well as downstream applications.

• Maintain technical documentation and troubleshooting runbooks.

• Mentor junior administrators, helpdesk technicians, and contractor teams.

⛳️ Requirements

• A minimum of 6 years of experience in Client Systems Engineering, Endpoint Architecture, or IT Infrastructure Automation.

• Demonstrated expertise in configuring and maintaining Workday-driven identity provisioning within Okta.

• Familiarity with Workday attribute mapping, lifecycle states, and Okta expression language/workflows.

• Advanced knowledge in configuring, securing, and imaging Windows, macOS, and Ubuntu Linux on an enterprise scale.

• Extensive experience with Windows Autopilot and Apple Business Manager (ABM).

• Proficient in Ansible, Chef, and Puppet.

• Practical experience in building dynamic service catalogs, custom forms, and conditional routing workflows.

• Proficiency in scripting languages such as Bash, PowerShell, or Python.

• Experience working with various hardware vendors and VARs.

• Must possess U.S. Person status or relevant export-control authorization/license exception to access export-controlled technology and government contract work.

• Preferred qualifications: Okta Certified Consultant/Developer, Jamf Certified Admin, or Workday Extend/Integration certification.

• Preferred: Familiarity with Postman, Workato, or Okta Workflows.

🏝️ Benefits

• Comprehensive medical, dental, and vision plans.

• Matching 401(k).

• Unlimited PTO.

• Paid holidays.

• Parental/adoption leave.

• Legal insurance.

• Home technology stipend.

• Bonus and equity included in the total compensation package.