Staff Client Engineer

IonQ•College Park, MD

12d•$126,887 - $166,127•Hybrid

About The Position

We are seeking a high-caliber Staff Client Systems Engineer to own, integrate, and optimize our global endpoint ecosystem and employee lifecycle automation. In this role, you will be the principal designer of our core operating system configurations and "Gold Images" across a diverse enterprise environment (Mac, Windows, and Ubuntu Linux). Beyond endpoint management, you will serve as the strategic technical bridge between IT and HR. You will architect, implement, and troubleshoot advanced onboarding, offboarding, and transfer workflows—specifically engineering the automated enterprise identity pipeline between Workday and Okta. This role is critical to scaling our global infrastructure, eliminating manual IT overhead, and ensuring a secure, flawless day-one experience for our workforce.

Requirements

6+ years of experience in Client Systems Engineering, Endpoint Architecture, or IT Infrastructure Automation.
Proven track record of configuring and maintaining Workday-driven identity provisioning within Okta. Must understand Workday attribute mapping, lifecycle states, and troubleshooting Okta expression language/workflows.
Expert-level knowledge of configuring, securing, and imaging Windows, macOS, and Ubuntu Linux at enterprise scale.
Deep familiarity with modern, zero-touch deployment frameworks such as Windows Autopilot and Apple Business Manager (ABM).
Experience with Configuration Management tools: Ansible, Chef, Puppet.
Hands-on experience building dynamic service catalogs, custom forms, and conditional routing workflows for business stakeholders.
Proficiency in scripting languages (e.g., Bash, PowerShell, Python) to automate API integrations, custom packaging, and OS configurations.
Experience in engaging with multiple hardware vendors and VARs.

Nice To Haves

Advanced certifications: Okta Certified Consultant/Developer, Jamf Certified Admin, or Workday Extend/Integration certification.
Experience with API integration tools (Postman, Workato, or Okta Workflows).

Responsibilities

Design, build, and maintain enterprise-grade "Gold OS Images" and deployment configurations for macOS, Windows 10/11, and Ubuntu Linux.
Architect zero touch provisioning workflows leveraging Autopilot and ADE.
Partner closely with the IT Provisioning Team to optimize hardware staging workflows, ensuring images deploy flawlessly and efficiently to end-user machines.
Own and optimize modern Unified Endpoint Management (UEM) and MDM platforms (e.g., Jamf, Intune, Kandji) for zero-touch provisioning, automated patching, and security compliance enforcement.
Architect and manage the end-to-end automated lifecycle pipeline using Workday and Okta Lifecycle Management.
Design and implement intelligent, automated intake forms and workflows (via Jira Service Management, or Okta Workflows) for hiring managers to submit new-hire technical profiles.
Build automated solutions for employee transfers, role changes, and terminations to ensure instant down-stream SaaS provisioning, precise access revocation, and tight security governance.
Act as the ultimate technical escalation point for complex identity, access management (IAM), and automated provisioning failures.
Proactively troubleshoot and resolve deep architectural mismatches between Workday data attributes and Okta downstream applications.
Establish and maintain robust troubleshooting runbooks and technical documentation, empowering Helpdesk and Systems Administrators to independently resolve lifecycle and imaging issues.
Provide continuous technical mentorship to junior administrators, helpdesk technicians, and contractor teams to elevate the organization's overall technical capability and operational self-sufficiency.