IT Client Engineer

Job summary

Responsibilities

We are looking for a Client Engineer to own Figure's endpoint fleet everywhere it operates: our San Jose campus, our factories, our contract manufacturing partners, and connectivity-challenged field sites.

• Own zero-touch enrollment end to end: Apple Business Manager for macOS, Windows Autopilot for Windows, and PXE provisioning for Ubuntu workstations.
• Translate CIS Benchmarks into deployable configuration profiles across all platforms: deterministically applied settings accompanied with osquery validations to validate posture.
• Operate FleetDM as the cross-platform management agent across macOS, Windows, and Ubuntu LTS.
• Maintain standard, reproducible workstation builds with measured and enforced patch compliance.
• Build hardened device configurations for factories, contract manufacturers, and low-connectivity sites: loaner and clean-device programs, encryption enforcement and escrow…

What they're looking for

• Hands-on experience managing macOS, Windows, and Linux (Ubuntu LTS) endpoint fleets in production.
• Practical experience with zero-touch enrollment and modern endpoint tooling: FleetDM or comparable osquery-based management, Apple Business Manager, Windows Autopilot or…
• Experience turning security benchmarks (CIS or similar) into enforced, validated configuration policy.
• Strong scripting skills in Python, Bash, and/or PowerShell, with a track record of replacing manual processes with code.
• Working knowledge of authentication fundamentals: SAML, OIDC, SCIM, and the tradeoffs between them.

Tech stack

• Python