Senior Client Platform Engineer

About This RoleAI processing…

Key Responsibilities

• 1
  Apple Fleet Management: Own the global macOS and iOS fleet using Jamf Pro, overseeing enrollment, configuration profiles, and application deployment.
• 2
  Cross-Platform Support: Contribute to the management and security of Windows (via Intune/Autopilot) and Linux endpoints as the program evolves, ensuring a consistent security posture across all OS types.
• 3
  Tooling & Evolution: Administer open-source tools (Munki, Santa) and lead evaluations of emerging platforms like FleetDM to enhance cross-platform fleet visibility.
• 4
  Security & Compliance: Ensure endpoints meet NIST, CIS, and STIG standards. Partner with Security teams to respond to vulnerabilities across the entire fleet.
• 5
  Engineering & Infrastructure as Code (IaC): Apply an IaC mindset to device management using code-based workflows (e.g., Terraform, Ansible, or Jamf API). Build and maintain CI/CD pipelines to ensure repeatable, scalable, and automated deployments regardless of the OS.
• 6
  Customer Zero Advocacy: Act as a primary feedback loop for Okta’s internal product teams. Test new features in production and influence the product roadmap based on operational data.
• 7
  Operational Excellence: Provide Tier 3 escalation support for global IT teams and participate in an on-call rotation.

Requirements

• Core Experience: 5+ years in endpoint engineering with a focus on Apple platforms at enterprise scale.
• Technical Versatility: A strong understanding of Windows and Linux operating systems; you aren't just a "Mac person",you understand how to apply engineering principles to any OS.
• MDM Mastery: Deep expertise in Jamf Pro. Familiarity with Microsoft Intune or other cross-platform MDM/UEM solutions is a significant plus.
• Technical Stack:
• Scripting: Proficiency in Bash, Python, Go, or Swift (PowerShell experience is a bonus).
• Tooling: Experience with Git, GitHub Actions, Terraform, or similar CI/CD frameworks.
• Security: Understanding of ADE/DEP, MDM protocols, and platform-specific hardening (e.g., BitLocker, FileVault, LUKS).
• Identity Knowledge: Familiarity with SAML and OIDC and how they integrate with endpoint authentication.
• This position requires the ability to access federal environments and/or have access to protected federal data. As a condition of employment for this position, the successful candidate must be able to submit documentation establishing U.S. Person status (e.g. a U.S. Citizen, National, Lawful Permanent Resident, Refugee, or Asylee. 22 CFR 120.15) upon hire.
• Hands-on experience with FleetDM or osquery for multi-OS visibility.
• Experience with Autopkg pipelines or AWS Lambda for endpoint automation.
• Background in Federal compliance (FedRAMP).
• Relevant certifications (Apple, Okta, Microsoft, AWS, Jamf).
• Amazing Benefits
• Making Social Impact
• Fostering Diversity, Equity, Inclusion and Belonging at Okta

Perks & Benefits