← All roles

IT Client Engineer

Figure· IT
Apply on company site
San Jose, CA$150k - $200kfull-timePosted 1mo ago

About the role

Figure is an AI robotics company seeking a Client Engineer to own endpoint fleet management across multiple environments, lead client-side infrastructure, and automate identity and SaaS operations with a security-conscious approach.

Responsibilities

  • Endpoint Engineering
  • Own zero-touch enrollment end to end: Apple Business Manager for macOS, Windows Autopilot for Windows, and PXE provisioning for Ubuntu workstations.
  • Translate CIS Benchmarks into deployable configuration profiles across all platforms: deterministically applied settings accompanied with osquery validations to validate posture.
  • Operate FleetDM as the cross-platform management agent across macOS, Windows, and Ubuntu LTS.
  • Maintain standard, reproducible workstation builds with measured and enforced patch compliance.
  • Build hardened device configurations for factories, contract manufacturers, and low-connectivity sites: loaner and clean-device programs, encryption enforcement and escrow, conditional access, and remote wipe and recovery.
  • Deploy and maintain CrowdStrike Falcon coverage across the fleet in partnership with Security, closing gaps on unmanaged or drifted devices.
  • Translate data handling and IP protection requirements from Security, Legal, and Engineering leadership into enforceable technical controls.
  • Identity and SSO Engineering
  • Own SSO integration of applications into Okta (SAML and OIDC), including internal tools with no vendor documentation.
  • Design application authentication and RBAC from first principles, in coordination with Security.
  • Automate the identity lifecycle end to end: provisioning, entitlement, and deprovisioning driven by Okta Workflows and integrated with Google Workspace, Slack, and Jira.
  • SaaS Operations and Automation
  • Build tooling in Python, Bash, or PowerShell to eliminate manual work across onboarding, offboarding, provisioning, reporting, and audit.
  • Run license and access audits, surface inactive accounts and orphaned entitlements, and drive cost recovery with Procurement.
  • Formalize change management for endpoint and SaaS changes and participate in the Change Advisory Board.
  • Document standards, runbooks, and automation so the broader IT team can operate and extend what you build.
  • Act as escalation point for complex client-side issues and mentor Operations Specialists.

Qualifications

  • Hands-on experience managing macOS, Windows, and Linux (Ubuntu LTS) endpoint fleets in production.
  • Practical experience with zero-touch enrollment and modern endpoint tooling: FleetDM or comparable osquery-based management, Apple Business Manager, Windows Autopilot or Microsoft Intune.
  • Experience turning security benchmarks (CIS or similar) into enforced, validated configuration policy.
  • Strong scripting skills in Python, Bash, and/or PowerShell, with a track record of replacing manual processes with code.
  • Working knowledge of authentication fundamentals: SAML, OIDC, SCIM, and the tradeoffs between them.
  • Experience administering identity and SaaS platforms at scale: Okta, Google Workspace, Slack, Jira, including SCIM and API-driven provisioning.
  • Sound judgment on security and risk tradeoffs, and the ability to explain technical controls to non-technical stakeholders.
  • Detail-oriented and process-driven, particularly in documenting standards and policy.
  • Great communication, collaboration, and interpersonal skills.

Skills

Required:macOS endpoint managementWindows endpoint managementUbuntu LTS endpoint managementFleetDM / osquery-based managementApple Business Manager / AutopilotMicrosoft Intune / Windows AutopilotCIS Benchmarks to policyScripting (Python / Bash / PowerShell)Okta / SSO / IAMGoogle Workspace / Slack / Jira provisioning
Last updated Oct 7, 2026. Interested? Apply on the company site.

About Figure

The future of home help is here

Figure is the first-of-its-kind AI robotics company bringing a general purpose humanoid to life.

liquid-ai-recruiting-targetphysical-ai-funding-landscapesetter-30setter-30-2026-q1
Company profileWebsite

More open roles at Figure