Staff Client Platform Engineer (Apple Endpoint Management)

Location: Hybrid; candidates must be located near an Okta office. San Francisco Bay Area employees must work in the office at least 2 days per week.

Annual base salary for candidates in the San Francisco Bay Area: $194,000–$267,000 USD, plus applicable equity, bonus, and benefits.

Company

Okta builds identity and device-management infrastructure that helps organizations securely use AI and other technologies.

What you will do

• Own Okta’s global macOS and iOS fleet through Jamf Pro, including enrollment, configuration profiles, and application deployment.
• Support Windows, Linux, Android, and VDI management workflows and maintain a consistent endpoint security posture.
• Administer Munki and Santa, evaluate FleetDM and other cross-platform tooling, and improve fleet visibility.
• Ensure endpoint compliance with NIST, CIS, and STIG standards and partner with Security teams on vulnerability response.
• Build code-based device-management workflows and CI/CD pipelines using Terraform, Ansible, Jamf APIs, or similar tools.
• Set technical direction, provide Tier 3 escalation support, participate in on-call rotations, and act as Customer Zero for Okta product teams.

Requirements

• 8+ years of enterprise-scale endpoint engineering experience, focused on Apple platforms.
• Strong understanding of Windows and Linux operating systems and the ability to apply engineering principles across operating systems.
• Deep expertise managing endpoints at scale with MDM, such as Jamf Pro.
• Proficiency in Bash, Python, Go, or Swift; PowerShell experience is a bonus.
• Experience with Git, GitHub Actions, Terraform, or similar CI/CD frameworks.
• Understanding of ADE/DEP, MDM/DDM protocols, and platform hardening including BitLocker, FileVault, and LUKS.
• Familiarity with SAML and OIDC and their integration with endpoint authentication.
• Must be able to submit documentation establishing U.S. Person status upon hire because the role requires access to federal environments and/or protected federal data.

Nice to have

• Experience with Microsoft Intune, FleetDM, osquery, or other cross-platform MDM/UEM solutions.
• Experience with Autopkg pipelines or AWS Lambda for endpoint automation.
• Federal compliance or FedRAMP experience.
• Apple, Okta, Microsoft, AWS, or Jamf certifications.

Culture & Benefits

• Hybrid work near an Okta office, with at least 2 in-office days per week in the San Francisco Bay Area.
• Participation in an on-call rotation and collaboration with global IT, Security, Product, and Engineering teams.
• Health, dental, and vision insurance; 401(k); flexible spending account; PTO; and parental leave according to applicable plans.
• Immersive, in-person onboarding and programs supporting well-being, talent development, social impact, and community.