Staff Client Engineer

About the role

We are seeking a high-caliber Staff Client Systems Engineer to own, integrate, and optimize our global endpoint ecosystem and employee lifecycle automation.

In this role, you will be the principal designer of our core operating system configurations and "Gold Images" across a diverse enterprise environment (Mac, Windows, and Ubuntu Linux).

Responsibilities

• Enterprise Endpoint Architecture & Imaging Design, build, and maintain enterprise-grade "Gold OS Images" and deployment configurations for macOS, Windows 10/11, and Ubuntu Linux.
• Architect zero touch provisioning workflows leveraging Autopilot and ADE.
• Partner closely with the IT Provisioning Team to optimize hardware staging workflows, ensuring images deploy flawlessly and efficiently to end-user machines.
• Own and optimize modern Unified Endpoint Management (UEM) and MDM platforms (e.g., Jamf, Intune, Kandji) for zero-touch provisioning, automated patching, and security compliance enforcement.
• HR & IT Lifecycle Automation (Workday ⇄ Okta)
• Design and implement intelligent, automated intake forms and workflows (via Jira Service Management, or Okta Workflows) for hiring managers to submit new-hire technical profiles.
• Build automated solutions for employee transfers, role changes, and terminations to ensure instant down-stream SaaS provisioning, precise access revocation, and tight security governance.
• Tier-3 Escalation & Mentorship
• Act as the ultimate technical escalation point for complex identity, access management (IAM), and automated provisioning failures.
• Proactively troubleshoot and resolve deep architectural mismatches between Workday data attributes and Okta downstream applications.
• Establish and maintain robust troubleshooting runbooks and technical documentation, empowering Helpdesk and Systems Administrators to independently resolve lifecycle and imaging issues.
• Provide continuous technical mentorship to junior administrators, helpdesk technicians, and contractor teams to elevate the organization's overall technical capability and operational self-sufficiency.

Requirements

• Experience: 6+ years of experience in Client Systems Engineering, Endpoint Architecture, or IT Infrastructure Automation.
• Workday & Okta Integration: Proven track record of configuring and maintaining Workday-driven identity provisioning within Okta. Must understand Workday attribute mapping, lifecycle states, and troubleshooting Okta expression language/workflows.
• Multi-OS Mastery: Expert-level knowledge of configuring, securing, and imaging Windows, macOS, and Ubuntu Linux at enterprise scale.
• Modern Provisioning: Deep familiarity with modern, zero-touch deployment frameworks such as Windows Autopilot and Apple Business Manager (ABM).
• Experience with Configuration Management tools: Ansible, Chef, Puppet.
• Automation & Form Building: Hands-on experience building dynamic service catalogs, custom forms, and conditional routing workflows for business stakeholders.
• Scripting Capabilities: Proficiency in scripting languages (e.g., Bash, PowerShell, Python) to automate API integrations, custom packaging, and OS configurations.
• Experience in engaging with multiple hardware vendors and VARs.

Preferred Qualifications

• Advanced certifications: Okta Certified Consultant/Developer, Jamf Certified Admin, or Workday Extend/Integration certification.
• Experience with API integration tools (Postman, Workato, or Okta Workflows).