IT Client Engineer

Own zero-touch enrollment end to end: Apple Business Manager for macOS, Windows Autopilot for Windows, and PXE provisioning for Ubuntu workstations

Translate CIS Benchmarks into deployable configuration profiles across all platforms: deterministically applied settings accompanied with osquery validations to validate posture

Operate FleetDM as the cross-platform management agent across macOS, Windows, and Ubuntu LTS

Maintain standard, reproducible workstation builds with measured and enforced patch compliance

Build hardened device configurations for factories, contract manufacturers, and low-connectivity sites: loaner and clean-device programs, encryption enforcement and escrow, conditional access, and remote wipe and recovery

Deploy and maintain CrowdStrike Falcon coverage across the fleet in partnership with Security, closing gaps on unmanaged or drifted devices

Translate data handling and IP protection requirements from Security, Legal, and Engineering leadership into enforceable technical controls

Own SSO integration of applications into Okta (SAML and OIDC), including internal tools with no vendor documentation

Design application authentication and RBAC from first principles, in coordination with Security

Automate the identity lifecycle end to end: provisioning, entitlement, and deprovisioning driven by Okta Workflows and integrated with Google Workspace, Slack, and Jira

Build tooling in Python, Bash, or PowerShell to eliminate manual work across onboarding, offboarding, provisioning, reporting, and audit