Senior Client Platform Engineer

What You’ll Be Doing

• Apple Fleet Management: Own the global macOS and iOS fleet using Jamf Pro, overseeing enrollment, configuration profiles, and application deployment.
• Cross-Platform Support: Contribute to the management and security of Windows (via Intune/Autopilot) and Linux endpoints as the program evolves, ensuring a consistent security posture across all OS types.
• Tooling & Evolution: Administer open-source tools (Munki, Santa) and lead evaluations of emerging platforms like FleetDM to enhance cross-platform fleet visibility.
• Security & Compliance: Ensure endpoints meet NIST, CIS, and STIG standards. Partner with Security teams to respond to vulnerabilities across the entire fleet.
• Engineering & Infrastructure as Code (IaC): Apply an IaC mindset to device management using code-based workflows (e.g., Terraform, Ansible, or Jamf API). Build and maintain CI/CD pipelines to ensure repeatable, scalable, and automated deployments regardless of the OS.
• Customer Zero Advocacy: Act as a primary feedback loop for Okta’s internal product teams. Test new features in production and influence the product roadmap based on operational data.
• Operational Excellence: Provide Tier 3 escalation support for global IT teams and participate in an on-call rotation.

What You’ll Bring

• Core Experience: 5+ years in endpoint engineering with a focus on Apple platforms at enterprise scale.
• Technical Versatility: A strong understanding of Windows and Linux operating systems; you aren't just a "Mac person", you understand how to apply engineering principles to any OS.
• MDM Mastery: Deep expertise in Jamf Pro. Familiarity with Microsoft Intune or other cross-platform MDM/UEM solutions is a significant plus.
• Scripting: Proficiency in Bash, Python, Go, or Swift (PowerShell experience is a bonus).
• Tooling: Experience with Git, GitHub Actions, Terraform, or similar CI/CD frameworks.
• Security: Understanding of ADE/DEP, MDM protocols, and platform-specific hardening (e.g., BitLocker, FileVault, LUKS).
• Identity Knowledge: Familiarity with SAML and OIDC and how they integrate with endpoint authentication.

Extra Credit

• Hands-on experience with FleetDM or osquery for multi-OS visibility.
• Experience with Autopkg pipelines or AWS Lambda for endpoint automation.
• Background in Federal compliance (FedRAMP).
• Relevant certifications (Apple, Okta, Microsoft, AWS, Jamf).