Staff Client Engineer

Entangled Future; Bothell (WA); On-site; USD 140,000 - 190,000; Full time

Job summary

IonQ in Bothell, Washington is seeking a Staff Client Systems Engineer to own and optimize our enterprise endpoint ecosystem across macOS, Windows, and Linux. You will architect automated onboarding/offboarding workflows between Workday and Okta, and design gold OS images for rapid deployment in a large-scale environment.

Lead efforts in endpoint configuration management (Ansible, Chef, Puppet), zero-touch provisioning, and integration with JSS/Jamf, Intune, and ABM platforms to secure and

Qualifications

• 6+ years of experience in Client Systems Engineering, Endpoint Architecture, or IT automation.
• Advanced scripting in Python, PowerShell, and Bash with production-quality code.
• Experience with Configuration Management tools: Ansible, Chef, Puppet.
• Experience integrating Workday with Okta and managing REST APIs.
• Hands-on with UEM/MDM platforms (Jamf, Intune, Kandji).
• Knowledge of zero-touch provisioning (Autopilot, ABM).

Responsibilities

• Own onboarding, offboarding, and transfer workflows between Workday and Okta.
• Design, build, and maintain enterprise gold OS images for macOS, Windows, and Linux.
• Develop and maintain automation scripts and configs; reinforce CI/CD and logging.
• Collaborate with IT and HR to scale enterprise endpoint operations and secure day-one experiences.

Skills

Scripting (Python/PowerShell/Bash)

API integrations

Workday & Okta integration

Multi-OS admin (Windows/macOS/Linux)

Tools

Ansible

Chef

Puppet

Jamf

Intune

Kandji

Autopilot

Job description

Staff Client Engineer at IonQ, Bothell, Washington, United States. A lead-level full time position in the Corporate - IT team, listed under software engineering.

The Role

We are seeking a Staff Client Systems Engineer to own, integrate, and optimize our employee lifecycle automation with Okta, and the global endpoint ecosystem. You will be the principal designer of our core operating system configurations and "Gold Images" across a diverse enterprise environment (Mac, Windows, and Ubuntu Linux).

You will serve as the strategic technical bridge between IT and HR. You will architect, implement, and troubleshoot advanced onboarding, offboarding, and transfer workflows—specifically engineering the automated enterprise identity pipeline between Workday and Okta. You will also leverage modern configuration management frameworks to automate endpoint deployment and policy compliance across all operating systems. This role is critical to scaling our global infrastructure, eliminating manual IT overhead, and ensuring a secure, flawless day-one experience for our workforce.

Automation & Scripting

• Write and maintain production-grade Python, PowerShell, and Bash tools for OS configuration, packaging, compliance remediation, and lifecycle tasks.
• Build API integrations across Okta, Workday, UEM/MDM platforms, and Jira Service Management, with solid auth, error handling, and retry logic.
• Manage scripts and configs as code: Git, code review, CI/CD, and logging/alerting.

Enterprise Endpoint Architecture & Imaging

• Design, build, and maintain enterprise-grade "Gold OS Images" and deployment configurations for macOS, Windows 10/11, and Ubuntu Linux.
• Architect zero touch provisioning workflows leveraging Autopilot and Apple Device Enrollment.
• Partner closely with the IT Provisioning Team to optimize hardware staging workflows, ensuring images deploy flawlessly and efficiently to end-user machines.
• Own and optimize modern Unified Endpoint Management (UEM) and MDM platforms (e.g., Jamf, Intune, Kandji) for zero-touch provisioning, automated patching, and security compliance enforcement.

Requirements

• Experience: 6+ years of experience in Client Systems Engineering, Endpoint Architecture, or IT Infrastructure Automation.
• Advanced scripting proficiency: demonstrated, hands-on experience writing production-quality code in Python, PowerShell, and Bash. You should be able to point to tools, integrations, or automation frameworks you have built and maintained, not just one-off scripts
• Experience with Configuration Management tools: Ansible, Chef, Puppet
• Automation & Form Building: Hands-on experience building dynamic service catalogs, custom forms, and conditional routing workflows for business stakeholders.
• API integration expertise: strong experience consuming and building against REST APIs (Okta, Workday, Jamf, Intune Graph API, Jira, etc.), including OAuth/token-based authentication, JSON/XML handling, and webhooks.
• Workday & Okta Integration: Proven track record of configuring and maintaining Workday-driven identity provisioning within Okta. Must understand Workday attribute mapping, lifecycle states, and troubleshooting Okta expression language/workflows.
• Multi-OS Mastery: Expert-level knowledge of configuring, securing, and imaging Windows, macOS, and Ubuntu Linux at enterprise scale.
• Modern Provisioning: Deep familiarity with modern, zero-touch deployment frameworks such as Windows Autopilot and Apple Business Manager (ABM).
• Experience in engaging with multiple hardware vendors and VARs

Nice to Have

• Advanced certifications: Okta Certified Consultant/Developer, Jamf Certified Admin, or Workday Extend/Integration certification.
• Experience with API integration tools (Postman, Workato, or Okta Workflows).