Location: Seattle, WA (preferred); open to College Park, MD or Remote
Travel: 10% domestic or international
Job ID: 1714

The Role:

We are seeking a high-caliber Staff Client Systems Engineer to own, integrate, and optimize our global endpoint ecosystem and employee lifecycle automation. In this role, you will be the principal designer of our core operating system configurations and "Gold Images" across a diverse enterprise environment (Mac, Windows, and Ubuntu Linux).

Beyond endpoint management, you will serve as the strategic technical bridge between IT and HR. You will architect, implement, and troubleshoot advanced onboarding, offboarding, and transfer workflows-specifically engineering the automated enterprise identity pipeline between Workday and Okta. This role is critical to scaling our global infrastructure, eliminating manual IT overhead, and ensuring a secure, flawless day-one experience for our workforce.

Responsibilities:

Enterprise Endpoint Architecture & Imaging

• Design, build, and maintain enterprise-grade "Gold OS Images" and deployment configurations for macOS, Windows 10/11, and Ubuntu Linux.
• Architect zero touch provisioning workflows leveraging Autopilot and ADE.
• Partner closely with the IT Provisioning Team to optimize hardware staging workflows, ensuring images deploy flawlessly and efficiently to end-user machines.
• Own and optimize modern Unified Endpoint Management (UEM) and MDM platforms (e.g., Jamf, Intune, Kandji) for zero-touch provisioning, automated patching, and security compliance enforcement.

HR & IT Lifecycle Automation (Workday 14 Okta)

• Architect and manage the end-to-end automated lifecycle pipeline using Workday and Okta Lifecycle Management.
• Design and implement intelligent, automated intake forms and workflows (via Jira Service Management, or Okta Workflows) for hiring managers to submit new-hire technical profiles.
• Build automated solutions for employee transfers, role changes, and terminations to ensure instant down-stream SaaS provisioning, precise access revocation, and tight security governance.

Tier-3 Escalation & Mentorship

• Act as the ultimate technical escalation point for complex identity, access management (IAM), and automated provisioning failures.
• Proactively troubleshoot and resolve deep architectural mismatches between Workday data attributes and Okta downstream applications.
• Establish and maintain robust troubleshooting runbooks and technical documentation, empowering Helpdesk and Systems Administrators to independently resolve lifecycle and imaging issues.
• Provide continuous technical mentorship to junior administrators, helpdesk technicians, and contractor teams to elevate the organization19s overall technical capability and operational self-sufficiency.

Requirements:

• Experience: 6+ years of experience in Client Systems Engineering, Endpoint Architecture, or IT Infrastructure Automation.
• Workday & Okta Integration: Proven track record of configuring and maintaining Workday-driven identity provisioning within Okta. Must understand Workday attribute mapping, lifecycle states, and troubleshooting Okta expression language/workflows.
• Multi-OS Mastery: Expert-level knowledge of configuring, securing, and imaging Windows, macOS, and Ubuntu Linux at enterprise scale.
• Modern Provisioning: Deep familiarity with modern, zero-touch deployment frameworks such as Windows Autopilot and Apple Business Manager (ABM).
• Experience with Configuration Management tools: Ansible, Chef, Puppet.
• Automation & Form Building: Hands-on experience building dynamic service catalogs, custom forms, and conditional routing workflows for business stakeholders.
• Scripting Capabilities: Proficiency in scripting languages (e.g., Bash, PowerShell, Python) to automate API integrations, custom packaging, and OS configurations.
• Experience in engaging with multiple hardware vendors and VARs.

Preferred Qualifications:

• Advanced certifications: Okta Certified Consultant/Developer, Jamf Certified Admin, or Workday Extend/Integration certification.
• Experience with API integration tools (Postman, Workato, or Okta Workflows).

The approximate base salary range for this position is $126,887- $166,127. The total compensation package includes base, bonus, equity, and a range of benefit options found on our career site.

Compensation will vary based on individual factors such as education, qualifications, and experience of the final candidate(s), specific office location, and calibration against relevant market data and internal team equity. Posted base salary figures are subject to change as new market data becomes available. Our benefits include comprehensive medical, dental, and vision plans, matching 401(k), unlimited PTO and paid holidays, parental/adoption leave, legal insurance, and a home technology stipend. Details of participation in these benefit plans will be provided when a candidate receives an offer of employment.