Staff Client Systems Engineer

Responsibilities

Enterprise Endpoint Architecture & Imaging

• Design, build, and maintain enterprise-grade "Gold OS Images" and deployment configurations for macOS, Windows 10/11, and Ubuntu Linux.
• Architect zero touch provisioning workflows leveraging Autopilot and ADE.
• Partner closely with the IT Provisioning Team to optimize hardware staging workflows, ensuring images deploy flawlessly and efficiently to end-user machines.
• Own and optimize modern Unified Endpoint Management (UEM) and MDM platforms (e.g., Jamf, Intune, Kandji) for zero-touch provisioning, automated patching, and security compliance enforcement.

HR & IT Lifecycle Automation (Workday ⇄ Okta)

• Architect and manage the end-to-end automated lifecycle pipeline using Workday and Okta Lifecycle Management.
• Design and implement intelligent, automated intake forms and workflows (via Jira Service Management or Okta Workflows) for hiring managers to submit new-hire technical profiles.
• Build automated solutions for employee transfers, role changes, and terminations to ensure instant down-stream SaaS provisioning, precise access revocation, and tight security governance.

Tier-3 Escalation & Mentorship

• Act as the ultimate technical escalation point for complex identity, access management (IAM), and automated provisioning failures.
• Proactively troubleshoot and resolve deep architectural mismatches between Workday data attributes and Okta downstream applications.
• Establish and maintain robust troubleshooting runbooks and technical documentation, empowering Helpdesk and Systems Administrators to independently resolve lifecycle and imaging issues.
• Provide continuous technical mentorship to junior administrators, helpdesk technicians, and contractor teams to elevate the organization's overall technical capability and operational self-sufficiency.

Requirements

• Experience: 6+ years of experience in Client Systems Engineering, Endpoint Architecture, or IT Infrastructure Automation.
• Workday & Okta Integration: Proven track record of configuring and maintaining Workday-driven identity provisioning within Okta. Must understand Workday attribute mapping, lifecycle states, and troubleshooting Okta expression language/workflows.
• Multi-OS Mastery: Expert-level knowledge of configuring, securing, and imaging Windows, macOS, and Ubuntu Linux at enterprise scale.
• Modern Provisioning: Deep familiarity with modern, zero-touch deployment frameworks such as Windows Autopilot and Apple Business Manager (ABM).
• Configuration Management tools: Ansible, Chef, Puppet.
• Automation & Form Building: Hands-on experience building dynamic service catalogs, custom forms, and conditional routing workflows for business stakeholders.
• Scripting Capabilities: Proficiency in scripting languages (e.g., Bash, PowerShell, Python) to automate API integrations, custom packaging, and OS configurations.
• Experience in engaging with multiple hardware vendors and VARs.

Preferred Qualifications

• Advanced certifications: Okta Certified Consultant/Developer, Jamf Certified Admin, or Workday Extend/Integration certification.
• Experience with API integration tools (Postman, Workato, or Okta Workflows).