Jobs / Okt***
Staff Client Platform Engineer
Okt*** · San Mateo, CA, United States
San Mateo, CA, United StatesExp: 8+ yrs194,000-267,000 USD/yearlyHybrid
Remuneration
194,000-267,000 USD/yearly
Location
San Mateo, CA, United States
Visa sponsorship
Sponsors visa
Job summary
Own and evolve enterprise endpoint management, serving as the subject matter expert for macOS and iOS while contributing to Windows, Linux, Android, and VDI workflows. Use Jamf Pro, Munki, Santa, and cross-platform tools to automate device management, enforce security standards, and set technical direction. Partner with internal product teams to validate device-management capabilities, provide operational feedback, and support global IT teams.
Qualifications
- At least 8 years of enterprise endpoint engineering experience focused on Apple platforms.
- Strong understanding of Windows and Linux operating systems.
- Expertise managing endpoints at scale with MDM solutions such as Jamf Pro.
- Proficiency in Bash, Python, Go, or Swift; PowerShell experience is a bonus.
- Experience with Git, GitHub Actions, Terraform, or similar CI/CD frameworks.
- Understanding of ADE/DEP, MDM/DDM protocols, and platform-specific hardening such as BitLocker, FileVault, or LUKS.
- Familiarity with SAML and OIDC integration with endpoint authentication.
- Ability to provide documentation establishing U.S. Person status upon hire.
Responsibilities
- Manage the global macOS and iOS fleet using Jamf Pro, including enrollment, configuration profiles, and application deployment.
- Contribute to Windows and Linux endpoint management and security, including workflows using Intune and Autopilot.
- Administer Munki and Santa, and evaluate platforms such as FleetDM.
- Ensure endpoint compliance with NIST, CIS, and STIG standards, and partner with Security teams on vulnerability response.
- Build and maintain code-based device-management workflows and CI/CD pipelines for automated, repeatable deployments.
- Set architecture and technical direction for Apple platforms, endpoint security tooling, or devices-as-code.
- Test product capabilities in production and provide operational feedback to internal product teams.
- Provide Tier 3 escalation support to global IT teams and participate in an on-call rotation.
Skills
AnsibleAWSBashGitGitHubGitHub ActionsGoAWS LambdaLinuxmacOSOktaPowerShellPythonTerraformWindowsS3
Certifications
AppleOktaMicrosoftAWSJamf
Languages
BashPythonGoSwiftPowerShell
Work schedule
On-call rotationIn-office at least 2 days per week in the San Francisco Bay Area
Industry
Identity and device management
Relocation
No