Staff Client Platform Engineer

About the Role

SandboxAQ is seeking a multidisciplinary Staff Client Platform Engineer to join our small but growing team. In this role, you will contribute towards designing, implementing, and maintaining our endpoint management systems, as well as contributing to identity-related initiatives. You will play a key role in ensuring that our users have secure and reliable access to our applications and data via both corporate-owned and BYOD devices. 

What You’ll Do

  • Implement and maintain enterprise-level endpoint management systems
  • Deploy and maintain endpoint security systems such as EDR
  • Develop and enforce endpoint configuration standards and policies
  • Manage software application deployment and patching
  • Participate in incident response and remediation tasks
  • Build automation using a mix of code, low-code, and infrastructure-as-code
  • Troubleshoot endpoint management related issues and resolve problems efficiently
  • Work closely with our Security team to ensure best practices and compliance standards are followed
  • Contribute to the maintenance of our Identity Access Management (IAM) and SSO (Single Sign-On) systems
  • Collaborate with other teams on cross-functional projects related to Identity as well as user lifecycle management
  • Document IT processes and procedures
  • Contribute to the development and implementation of new IT initiatives
  • Serve as escalation point for endpoint related support issues
  • Rotate on other IT and Security projects and tasks as needed / desired
  • Act as a technical leader and mentor for junior members of the team

Who You Are

  • Extensive experience in IT systems administration / engineering
  • Extensive experience administrating endpoint management systems such as Jamf, Intune
  • Extensive understanding of Apple hardware and software, including advanced knowledge of macOS and iOS
  • Experience administrating identity management systems such as Okta
  • Experience working with low-code automation tools such as Okta Workflows, Workato, Tines, etc.
  • Experience configuring and administrating Virtual Desktop Infrastructure (VDI) in AWS and/or GCP
  • Experience running a corporate BYOD program for mobile devices
  • Experience with shell scripting such as Bash, zsh, etc.
  • Proficiency with one or more object-oriented programming languages such as Python, Ruby, etc.
  • Excellent analytical and problem-solving skills
  • Strong communication and interpersonal skills
  • Ability to work independently and as part of a team
  • You’re passionate and naturally curious about automation and technology in general

Nice to have

  • Experience with Zero Trust architecture including endpoint Device Trust
  • Experience with alternative, platform-agnostic endpoint management systems such as Chef, Ansible, etc.

The US base salary range for this full-time position is expected to be $154k – $216k per year. Our salary ranges are determined by role and level. Within the range, individual pay is determined by factors including job-related skills, experience, and relevant education or training. This role may be eligible for annual discretionary bonuses and equity.