Staff Client Platform Engineer

Okta•San Francisco, CA

9d•Hybrid

About The Position

Okta is seeking a Staff Client Platform Engineer for its Technology, Data, and Insights (TDI) Client Platform Engineering Team. The role is the subject matter expert for Okta’s macOS and iOS fleet, while contributing as needed to endpoint management workflows for Windows, Android, Linux, and VDI. The engineer will use an automation-first approach, combining Jamf Pro expertise with tools such as Munki, Santa, and FleetDM. As “Customer Zero,” the engineer will work with Okta Product and Engineering teams to validate capabilities across platforms, provide operational feedback, and help shape product roadmaps. The role sets architecture and technical direction for a domain, supports endpoint security and compliance, and provides Tier 3 escalation support to global IT teams. It reports to the Senior Manager of Client Platform Engineering. This is a hybrid role, and candidates must be located near an Okta office. In the San Francisco Bay Area, employees are expected to work in the office at least two days per week. For San Francisco Bay Area candidates, the annual base salary range is $194,000–$267,000. The role requires the ability to access federal environments and/or protected federal data; the successful candidate must submit documentation establishing U.S. Person status upon hire.

Requirements

At least 8 years of endpoint engineering experience, focused on Apple platforms at enterprise scale.
Strong understanding of Windows and Linux operating systems.
Deep expertise managing endpoints at scale using MDM solutions such as Jamf Pro.
Proficiency in Bash, Python, Go, or Swift; PowerShell experience is a bonus.
Experience with Git, GitHub Actions, Terraform, or similar CI/CD frameworks.
Understanding of ADE/DEP, MDM/DDM protocols, and platform-specific hardening such as BitLocker, FileVault, and LUKS.
Familiarity with SAML and OIDC and their integration with endpoint authentication.
Ability to access federal environments and/or protected federal data.
Ability to submit documentation establishing U.S. Person status upon hire.

Nice To Haves

Familiarity with Microsoft Intune, FleetDM, or other cross-platform MDM/UEM solutions.
Hands-on experience with FleetDM or osquery for multi-OS visibility.
Experience with Autopkg pipelines or AWS Lambda for endpoint automation.
Background in federal compliance, including FedRAMP.
Relevant Apple, Okta, Microsoft, AWS, or Jamf certifications.

Responsibilities

Own Okta’s global macOS and iOS fleet using Jamf Pro, including enrollment, configuration profiles, and application deployment.
Contribute to management and security of Windows endpoints using Intune/Autopilot and Linux endpoints as the program evolves.
Administer open-source tools such as Munki and Santa, and lead evaluations of platforms such as FleetDM to improve cross-platform fleet visibility.
Ensure endpoints meet NIST, CIS, and STIG standards, and partner with Security teams to respond to fleet-wide vulnerabilities.
Apply infrastructure-as-code principles to device management using code-based workflows such as Terraform, Ansible, or the Jamf API.
Build and maintain CI/CD pipelines for repeatable, scalable, automated deployments across operating systems.
Set architecture and technical direction for a domain such as Apple platforms, endpoint security tooling, or devices-as-code, and document the direction through designs or other documentation.
Test new Okta product features in production, provide operational feedback to internal product teams, and influence product roadmaps using operational data.
Provide Tier 3 escalation support for global IT teams and participate in an on-call rotation.