Lead Endpoint & Identity Engineer

Figureai; San Jose (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Figure, an AI robotics company based in San Jose, CA, is seeking a Client Engineer to own endpoint and identity systems across our fleet. You will lead zero-touch enrollment, fleet management across macOS, Windows, and Ubuntu, and work with security to enforce device controls.

You will automate onboarding, offboarding, provisioning, and audits with Python, Bash, or PowerShell, design RBAC and SSO workflows in Okta, and integrate with Google Workspace, Slack, and Jira.

Qualifications

• Hands-on experience managing macOS, Windows, and Linux (Ubuntu LTS) endpoint fleets in production.
• Practical experience with zero-touch enrollment and modern endpoint tooling.
• Experience turning security benchmarks into enforced, validated configuration policy.
• Strong scripting skills in Python, Bash, and/or PowerShell, with a track record of replacing manual processes with code.
• Working knowledge of authentication fundamentals: SAML, OIDC, SCIM.
• Experience administering identity and SaaS platforms at scale: Okta, Google Workspace, Slack, Jira, including SCIM and API provisioning.
• Security-minded with ability to explain technical controls to non-technical stakeholders.
• Detail-oriented and process-driven, with documentation of standards and policy.
• Great communication, collaboration, and interpersonal skills.

Responsibilities

• Own zero-touch enrollment end to end: Apple Business Manager, Windows Autopilot, Ubuntu PXE provisioning.
• Translate CIS Benchmarks into deployable configuration profiles with validations.
• Operate FleetDM as cross-platform management agent across macOS, Windows, Ubuntu LTS.
• Maintain standard workstation builds with patch compliance.
• Build hardened device configurations for factories, contract manufacturers, and low-connectivity sites.
• Deploy CrowdStrike Falcon coverage and coordinate with Security.
• Translate data handling/IP protection requirements into enforceable controls across devices.

Skills

Endpoint fleet management

Zero-touch enrollment

Scripting (Python/Bash/PowerShell)

SSO integration

RBAC design

Authentication protocols

SaaS administration

Security mindset

Documentation & runbooks

Communication

Tools

FleetDM/osquery

Apple Business Manager

Windows Autopilot

Microsoft Intune

Okta

Google Workspace

Slack

Jira

Job description

Figure, an AI robotics company based in San Jose, CA, is seeking a Client Engineer to own endpoint and identity systems across our fleet. You will lead zero-touch enrollment, fleet management across macOS, Windows, and Ubuntu, and work with security to enforce device controls.

You will automate onboarding, offboarding, provisioning, and audits with Python, Bash, or PowerShell, design RBAC and SSO workflows in Okta, and integrate with Google Workspace, Slack, and Jira.