Endpoint & Identity Engineer — AI Robotics Fleet

Figure AI; San Jose (CA); Presencial; USD 150.000 - 200.000; Jornada completa

Descripción de la vacante

Figure is seeking a Client Engineer to own the endpoint fleet across its San Jose campus, factories, and partner sites. You will lead zero-touch enrollment, OS provisioning, and security-hardening while collaborating with Security, Legal, and Engineering to enforce technical controls on devices.

You will own SSO integration with Okta and automate identity lifecycle using Workflows, integrating with Google Workspace, Slack, and Jira.

Formación

• Hands-on experience managing macOS, Windows, and Linux (Ubuntu LTS) endpoint fleets in production.
• Experience with zero-touch enrollment and modern endpoint tooling: FleetDM, Apple Business Manager, Windows Autopilot or Intune.
• Ability to translate CIS Benchmarks into enforced, validated configuration policy.
• Strong scripting skills in Python, Bash, and/or PowerShell, with a track record of code-driven automation.
• Familiarity with SAML, OIDC, SCIM and provisioning APIs for identity platforms.
• Experience administering Okta, Google Workspace, Slack, Jira at scale.
• Ability to communicate security controls to non-technical stakeholders.
• Detail-oriented and process-driven with good documentation skills.
• Excellent collaboration and interpersonal skills.

Responsabilidades

• Own zero-touch enrollment end to end across Apple Business Manager, Windows Autopilot, and Ubuntu PXE provisioning.
• Translate CIS Benchmarks into deployable configuration profiles with osquery validations.
• Operate FleetDM as the cross-platform management agent across macOS, Windows, and Ubuntu LTS.
• Maintain standard workstation builds with patch compliance and audited configurations.
• Develop hardened device configurations for factories and low-connectivity sites with encryption and remote wipe.
• Deploy CrowdStrike Falcon and coordinate with Security to close gaps on unmanaged devices.
• Design and implement SSO integration using Okta (SAML and OIDC) across internal tools.

Conocimientos

Security-minded engineering

Automation mindset

Cross-functional collaboration

Herramientas

FleetDM

osquery

Apple Business Manager

Windows Autopilot

Microsoft Intune

Okta

SAML

OIDC

SCIM

Python

Bash

PowerShell

Google Workspace

Slack

Jira

Descripción del empleo

Figure is seeking a Client Engineer to own the endpoint fleet across its San Jose campus, factories, and partner sites. You will lead zero-touch enrollment, OS provisioning, and security-hardening while collaborating with Security, Legal, and Engineering to enforce technical controls on devices.

You will own SSO integration with Okta and automate identity lifecycle using Workflows, integrating with Google Workspace, Slack, and Jira.