Staff Client Engineer

Role overview A Staff Client Systems Engineer is needed to own the global endpoint ecosystem and employee lifecycle automation across a diverse macOS, Windows, and Ubuntu Linux environment. The role blends principal-level endpoint architecture with strategic IT/HR integration, designing Gold Images and zero-touch provisioning while engineering the automated Workday-to-Okta identity pipeline. It is a hands-on technical leadership position critical to scaling a secure, frictionless day-one experience for a globally distributed workforce.

Responsibilities - Design, build, and maintain enterprise-grade Gold OS Images and deployment configurations for macOS, Windows 10/11, and Ubuntu Linux. - Architect zero-touch provisioning workflows using Windows Autopilot and Apple Business Manager/Apple Device Enrollment. - Optimize Unified Endpoint Management and MDM platforms such as Jamf, Intune, or Kandji for automated patching and compliance enforcement. - Architect the end-to-end Workday-to-Okta lifecycle pipeline for onboarding, transfers, role changes, and terminations, including downstream SaaS provisioning and access revocation. - Serve as the Tier-3 escalation point for complex IAM and provisioning failures, building runbooks and mentoring junior administrators and helpdesk staff.

Requirements - 6+ years in client systems engineering, endpoint architecture, or IT infrastructure automation. - Proven experience configuring and maintaining Workday-driven identity provisioning within Okta, including attribute mapping, lifecycle states, and Okta expression language troubleshooting. - Expert-level knowledge of configuring, securing, and imaging Windows, macOS, and Ubuntu Linux at enterprise scale. - Hands-on familiarity with modern zero-touch deployment frameworks and configuration management tools such as Ansible, Chef, or Puppet. - Proficiency in scripting languages such as Bash, PowerShell, or Python for API integrations and OS configuration automation. - Experience engaging hardware vendors and resellers for staging and procurement workflows.

Nice to have - Advanced certifications such as Okta Certified Consultant/Developer, Jamf Certified Admin, or Workday Extend/Integration certification. - Experience with API integration tooling such as Postman, Workato, or Okta Workflows.

Benefits and work setup - Location preference is Seattle, WA; open to candidates in College Park, MD, or fully remote within the US. - Approximately 10% domestic or international travel expected.