Staff CPE Engineer

This is a fully remote position, open to applicants in Texas.

📋 Description

• Assist in developing the IT roadmap, establishing technical direction for endpoint management, fleet automation, and IT operations across all KoBold offices and field locations in over 10 countries.

• Design and execute zero-touch provisioning and automated reimaging processes for macOS (Jamf) and Windows (Intune) endpoints.

• Create endpoint monitoring, alerting, and fleet health dashboards to transition IT from a reactive to a proactive support model.

• Lead device lifecycle management, including end-of-life/end-of-service tracking, hardware refresh planning, and inventory oversight across Jamf, Intune, CrowdStrike, and associated tools.

• Develop self-service application deployment and access processes to decrease helpdesk demand and empower employees.

• Implement DevOps principles in IT operations: configuration-as-code (e.g., managing Intune policies via Terraform), infrastructure automation, version-controlled policies, and repeatable processes.

• Oversee internet reliability and network performance at all global remote KoBold locations.

• Manage the entire software procurement lifecycle: new acquisitions, renewals, expansions, and cancellations, ensuring uninterrupted user access due to license lapses or last-minute renewals.

• Direct and execute the annual software budget, focusing on process enhancements year-over-year and ensuring proactive renewal pipeline visibility for legal and finance departments.

• Maximize license utilization across the SaaS portfolio—monitor usage, optimize seat counts, consolidate redundant tools, and negotiate vendor pricing.

• Collaborate with the legal team on contract reviews, navigating the current procurement process to expedite low-risk purchases while ensuring thorough evaluation for larger expenditures.

• Integrate new SaaS applications with appropriate Okta configurations (SSO, SCIM) prior to launch, and manage the phase-out of outdated tools.

• Handle Okta administration, including SSO integrations, SCIM provisioning, group management, access request workflows, and lifecycle automation.

• Administer Google Workspace, overseeing license management, security settings, and governance for super-admin access.

• Establish automation for seamless employee onboarding and offboarding, ensuring new hires are fully equipped on their first day and departing employees are properly deprovisioned.

• Support the rollout of AI tools (Claude Desktop, Claude Code, and related resources) across the endpoint fleet, encompassing deployment, configuration, and employee training.

• Supervise and mentor IT support personnel, offering technical guidance, setting priorities, managing performance, and facilitating career growth.

• Develop and sustain IT training programs for new employees and ongoing staff development, including documentation, video tutorials, and live onboarding sessions.

• Provide helpdesk support during high-demand periods, exemplifying the responsiveness and quality expected from the team.

• Gain insights into mineral exploration by collaborating closely with exploration teams, including fieldwork in remote operations.

• Partner with infrastructure engineering and security teams on cross-functional initiatives such as observability, access controls, endpoint security posture, and incident response.

• Collaborate across the organization to assist in specification, vendor selection, and change management for new software requests.

• Work alongside finance for budget tracking, invoice approvals, and AFE submissions related to software expenditures.

• Team up with legal to streamline the contract review process, maintain timelines on renewals, and advocate for tiered review processes that align risk with effort.

• Coordinate global digitization efforts, ensuring consistent standards and tools for converting physical records into digital archives at field and office locations.

⛳️ Requirements

• Over 5 years of experience in IT engineering, IT management, or a comparable role that integrates hands-on technical expertise with operational responsibilities.

• Strong background with MDM platforms, particularly Jamf (macOS) and Microsoft Intune (Windows), encompassing policy configuration, automated enrollment, compliance enforcement, and ideally, infrastructure-as-code methodologies (e.g., Terraform).

• Experience with identity and access management systems (Okta preferred), including SSO integration, SCIM provisioning, access request workflows, and lifecycle automation.

• Proficient in managing software procurement and renewals: specification and change management, vendor negotiation, license optimization, renewal pipeline oversight, and budget responsibility.

• Practical experience in developing zero-touch provisioning, automated reimaging, and self-service deployment workflows.

• Experience in endpoint monitoring and fleet management at scale, particularly in remote/distributed environments.

• People management or technical lead experience: proven ability to coach, mentor, and develop IT personnel while upholding high execution standards.

• Strong scripting abilities (Python, Bash, PowerShell, or similar) for creating automation and tools.

• Intellectually curious; enthusiastic about learning the intricacies of mineral exploration and exploration technology.

• Excellent communication and collaboration skills—comfortable engaging across disciplines with engineers, scientists, legal, finance, and leadership in a remote-first context.

• Demonstrated ability to take ownership: you create the roadmap, conduct the research, implement solutions, document processes, and communicate rollouts effectively.

• Strong prioritization skills—you can assess a lengthy list of IT initiatives and differentiate between essential and non-essential tasks, articulating the rationale.

• Comfortable with ambiguity and a dynamic work environment; eager to take on a diverse range of responsibilities in a rapidly growing company.

• Experience supporting global teams across various time zones is an advantage.

• Familiarity with Google Workspace administration, CrowdStrike, Datadog, or similar tools is a plus.

🏝️ Benefits

• 401k matching