Staff Client Platform Engineer

Okta•San Francisco, CA

7h•$194,000 - $267,000•Hybrid

About The Position

The Staff Client Platform Engineer is the subject matter expert for Okta’s macOS and iOS fleet and contributes to endpoint strategy across Windows, Android, Linux, and VDI as needed. The role combines Jamf Pro expertise with open-source tools such as Munki and Santa and helps bridge platforms using tools such as FleetDM. As “Customer Zero,” the engineer works directly with Okta Product and Engineering teams to validate capabilities, provide operational feedback, and influence product direction. The position reports to the Senior Manager of Client Platform Engineering. This is a hybrid role for candidates located near an Okta office. In the San Francisco Bay Area, employees are expected to work in the office at least two days per week. The position includes participation in an on-call rotation and Tier 3 escalation support for global IT teams. Candidates must be able to submit documentation establishing U.S. Person status upon hire because the position requires access to federal environments and/or protected federal data.

Requirements

At least 8 years of endpoint engineering experience, focused on Apple platforms at enterprise scale.
Strong understanding of Windows and Linux operating systems and the ability to apply engineering principles across operating systems.
Deep expertise managing endpoints at scale through MDM, such as Jamf Pro.
Proficiency in Bash, Python, Go, or Swift; PowerShell experience is a bonus.
Experience with Git, GitHub Actions, Terraform, or similar CI/CD frameworks.
Understanding of ADE/DEP, MDM/DDM protocols, and platform-specific hardening such as BitLocker, FileVault, and LUKS.
Familiarity with SAML and OIDC and their integration with endpoint authentication.
Ability to submit documentation establishing U.S. Person status upon hire, as required for access to federal environments and/or protected federal data.

Nice To Haves

Familiarity with Microsoft Intune, FleetDM, or other cross-platform MDM/UEM solutions.
Hands-on experience with FleetDM or osquery for multi-OS visibility.
Experience with Autopkg pipelines or AWS Lambda for endpoint automation.
Background in Federal compliance, including FedRAMP.
Relevant Apple, Okta, Microsoft, AWS, or Jamf certifications.

Responsibilities

Own Okta’s global macOS and iOS fleet using Jamf Pro, including enrollment, configuration profiles, and application deployment.
Contribute to management and security of Windows endpoints using Intune and Autopilot, as well as Linux endpoints, as the program evolves.
Administer open-source tools such as Munki and Santa, and lead evaluations of emerging platforms such as FleetDM.
Ensure endpoints meet NIST, CIS, and STIG standards and partner with Security teams to respond to fleet-wide vulnerabilities.
Apply infrastructure-as-code principles to device management using code-based workflows such as Terraform, Ansible, or the Jamf API.
Build and maintain CI/CD pipelines for repeatable, scalable, automated deployments across operating systems.
Set architecture and technical direction for a domain such as Apple platforms, endpoint security tooling, or devices-as-code, and document the direction in designs or other documentation.
Test new features in production as an internal customer, provide feedback to Okta product teams, and influence the product roadmap using operational data.
Provide Tier 3 escalation support for global IT teams and participate in an on-call rotation.