IT Systems & Workspace Engineer

DeepSense; Poland; On-site; PLN 132,000 - 247,000; Full time

Job summary

DeepSense seeks a hands-on IT Systems & Workspace Engineer to build and maintain the corporate IT environment for a globally distributed tech company with 10–50 users. You’ll own Identity, Access, Devices and Virtual Workspaces, ensuring secure onboarding, offboarding, and standardized developer environments.

You’ll administer macOS, ABM and MDM, manage Google Workspace, and implement SSO and SCIM across platforms.

Qualifications

• 4+ years in IT Systems / Endpoint / Workspace Engineering.
• Strong hands-on macOS administration.
• Real Apple Business Manager + MDM experience.
• Google Workspace administration.
• Strong SSO / MFA / SAML / OIDC / SCIM knowledge.
• Experience implementing VDI, cloud workspaces or cloud development environments.
• AWS/GCP/Azure familiarity.
• Ability to personally configure and automate systems — not just design architecture.
• Strong English.

Responsibilities

• Own the layer between users and company systems: Identity → Access → Devices → Virtual Workspaces.
• Design and implement secure environments for short-term contractors.
• Evaluate and operate solutions like WorkSpaces, Coder, GitHub Codespaces, Google Cloud Workstations.
• Automate onboarding/offboarding and integrate with hardware lifecycle.
• Maintain documentation and runbooks; provide lightweight ongoing administration.

Skills

macOS administration

Google Workspace administration

SSO / MFA / SAML / OIDC / SCIM

VDI / cloud workspaces

MDM (Kandji / Jamf / Mosyle / Intune)

Apple Business Manager

AWS / GCP / Azure familiarity

Automation / scripting

Tools

Kandji

Jamf

Mosyle

Intune

Apple Business Manager

Google Workspace Admin Console

Terraform

Job description

We are looking for a hands‑on IT Systems & Workspace Engineer to build and maintain the corporate IT environment for a globally distributed technology company with approximately 10–50 users.

You will own the layer between the user and company systems:

Identity → Access → Devices → Virtual Workspaces

Our model:

• Long-term and privileged users receive company‑managed MacBooks;
• Short-term contractors work through secure Virtual Workspaces;
• Direct corporate work from unmanaged personal devices is prohibited;
• A third‑party provider handles hardware procurement, delivery and retrieval;
• DevOps owns production infrastructure, Kubernetes and CI/CD.

What You’ll Own

• Apple & Endpoint Management
• Apple Business Manager
• MDM (Kandji / Jamf / Mosyle / Intune)
• Automated Mac enrollment and configuration
• FileVault, updates, applications, compliance, remote lock/wipe
• Device inventory and lifecycle

Identity & Access

• Google Workspace administration
• SSO / MFA
• SAML / OIDC / SCIM
• Groups and role‑based access
• Automated onboarding and offboarding

Virtual Workspaces

• Design and implement secure environments for short‑term contractors
• Evaluate and operate solutions such as Amazon WorkSpaces, Coder, GitHub Codespaces, Google
• Cloud Workstations or MacStadium
• Create standardized business and developer workspace templates
• Prevent corporate code/files from being stored on personal devices
• Optimize security, latency and cloud costs

Automation & Operations

• Automate routine onboarding/offboarding
• Integrate with our hardware lifecycle provider
• Maintain documentation and runbooks
• Provide lightweight ongoing administration and troubleshooting

What We’re Looking For

• 4+ years in IT Systems / Endpoint / Workspace Engineering
• Strong hands‑on macOS administration
• Real Apple Business Manager + MDM experience
• Google Workspace administration
• Strong SSO / MFA / SAML / OIDC / SCIM knowledge
• Experience implementing VDI, cloud workspaces or cloud development environments
• AWS/GCP/Azure familiarity
• Ability to personally configure and automate systems — not just design architecture
• Strong English

Experience with Kandji/Jamf, Coder, Amazon WorkSpaces, Google Cloud Workstations, MacStadium and Terraform is a strong plus.

Engagement

Phase 1 — Implementation

approximately 4–8 weeks

fixed‑scope / fixed‑price

indicative budget: 4,000 $

Expected outcome: ABM + MDM, identity/access, Virtual Workspaces, onboarding/offboarding automation and documentation are production‑ready.

Phase 2 — Ongoing Support

approximately 6–8 hours/month

400–600 $ month retainer

larger projects quoted separately

This is not a DevOps or helpdesk role. DevOps owns production infrastructure; you own the corporate user environment.