Staff Client Engineer

IonQ; Seattle (WA); On-site; USD 127,000 - 166,000; Full time

Benefits offered by this job

Medical, dental, vision plans

401(k) with match

Unlimited PTO & holidays

Job summary

IonQ is seeking a Staff Client Systems Engineer in Seattle to own and optimize our global endpoint ecosystem across Mac, Windows, and Ubuntu Linux. You will design Gold OS Images and scale zero-touch provisioning, serving as the bridge between IT and HR with Workday-Okta workflows.

You will lead imaging and UEM tooling (Jamf, Intune, Kandji), automate onboarding/offboarding, and mentor junior staff. 6+ years in client systems engineering and strong IAM experience are required.

Qualifications

• 6+ years in Client Systems Engineering or IT Infrastructure Automation.
• Proven Workday-driven identity provisioning within Okta.
• Enterprise imaging for Mac, Windows, and Linux.
• Experience with modern provisioning (Autopilot, ABM).
• Experience with configuration management tools (Ansible, Chef, Puppet).
• Automation and form-building for service catalogs and workflows.

Responsibilities

• Design, build, and maintain enterprise-grade OS images for macOS, Windows, and Ubuntu.
• Architect zero-touch provisioning workflows and software deployment.
• Own UEM/MDM platforms (Jamf, Intune, Kandji) for provisioning and security.
• Manage Workday ⇄ Okta lifecycle automation and workflows.
• Provide escalation support for IAM and provisioning failures; mentor staff.

Skills

Workday-Okta

Multi-OS imaging

Zero-touch provisioning

Ansible/Chef/Puppet

Scripting: Bash/PowerShell

Tools

Jamf

Intune

Kandji

Jira Service Management

Okta Workflows

Job description

About IonQ: IonQ, Inc. [NYSE: IONQ] is the world's leading quantum platform and merchant supplier - delivering integrated quantum solutions across computing, networking, sensing, and security. IonQ's newest generation of quantum computers, the IonQ Tempo, is the latest in a line of cutting-edge systems that have been helping customers and partners including Amazon Web Services, and AstraZeneca achieve 20x performance results and accelerate innovation in drug discovery, materials science, financial modeling, logistics, cybersecurity, and defense. In 2025, the company achieved 99.99% two-qubit gate fidelity, setting a world record in quantum computing performance.

Headquartered in College Park, Maryland, IonQ has operations in California, Colorado, Massachusetts, Tennessee, Washington, Italy, South Korea, Sweden, Switzerland, Canada, and the United Kingdom. Our quantum computing services are available through all major cloud providers, while we also meet the needs of networking and sensing customers across land, sea, air, and space. IonQ is making quantum platforms more accessible and impactful than ever before.

Location:

Seattle, WA (preferred); open to College Park, MD or Remote

Travel:

10% domestic or international

Job ID:

1714

The Role:

We are seeking a high-caliber Staff Client Systems Engineer to own, integrate, and optimize our global endpoint ecosystem and employee lifecycle automation. In this role, you will be the principal designer of our core operating system configurations and "Gold Images" across a diverse enterprise environment (Mac, Windows, and Ubuntu Linux). Beyond endpoint management, you will serve as the strategic technical bridge between IT and HR. You will architect, implement, and troubleshoot advanced onboarding, offboarding, and transfer workflows—specifically engineering the automated enterprise identity pipeline between Workday and Okta. This role is critical to scaling our global infrastructure, eliminating manual IT overhead, and ensuring a secure, flawless day‑one experience for our workforce.

Responsibilities

Enterprise Endpoint Architecture & Imaging

• Design, build, and maintain enterprise-grade "Gold OS Images" and deployment configurations for macOS, Windows 10/11, and Ubuntu Linux.
• Architect zero touch provisioning workflows leveraging Autopilot and ADE.
• Partner closely with the IT Provisioning Team to optimize hardware staging workflows, ensuring images deploy flawlessly and efficiently to end‑user machines.
• Own and optimize modern Unified Endpoint Management (UEM) and MDM platforms (e.g., Jamf, Intune, Kandji) for zero‑touch provisioning, automated patching, and security compliance enforcement.

HR & IT Lifecycle Automation (Workday ⇄ Okta)

• Architect and manage the end‑to‑end automated lifecycle pipeline using Workday and Okta Lifecycle Management.
• Design and implement intelligent, automated intake forms and workflows (via Jira Service Management, or Okta Workflows) for hiring managers to submit new-hire technical profiles.
• Build automated solutions for employee transfers, role changes, and terminations to ensure instant down‑stream SaaS provisioning, precise access revocation, and tight security governance.

Tier‑3 Escalation & Mentorship

• Act as the ultimate technical escalation point for complex identity, access management (IAM), and automated provisioning failures.
• Proactively troubleshoot and resolve deep architectural mismatches between Workday data attributes and Okta downstream applications.
• Establish and maintain robust troubleshooting runbooks and technical documentation, empowering Helpdesk and Systems Administrators to independently resolve lifecycle and imaging issues.
• Provide continuous technical mentorship to junior administrators, helpdesk technicians, and contractor teams to elevate the organization's overall technical capability and operational self‑sufficiency.

Requirements

• Experience: 6+ years of experience in Client Systems Engineering, Endpoint Architecture, or IT Infrastructure Automation.
• Workday & Okta Integration: Proven track record of configuring and maintaining Workday-driven identity provisioning within Okta. Must understand Workday attribute mapping, lifecycle states, and troubleshooting Okta expression language/workflows.
• Multi-OS Mastery: Expert-level knowledge of configuring, securing, and imaging Windows, macOS, and Ubuntu Linux at enterprise scale.
• Modern Provisioning: Deep familiarity with modern, zero‑touch deployment frameworks such as Windows Autopilot and Apple Business Manager (ABM).
• Experience with Configuration Management tools: Ansible, Chef, Puppet.
• Automation & Form Building: Hands‑on experience building dynamic service catalogs, custom forms, and conditional routing workflows for business stakeholders.
• Scripting Capabilities: Proficiency in scripting languages (e.g., Bash, PowerShell, Python) to automate API integrations, custom packaging, and OS configurations.
• Experience in engaging with multiple hardware vendors and VARs.

Preferred Qualifications

• Advanced certifications: Okta Certified Consultant/Developer, Jamf Certified Admin, or Workday Extend/Integration certification.
• Experience with API integration tools (Postman, Workato, or Okta Workflows).

The approximate base salary range for this position is $126,887- $166,127. The total compensation package includes base, bonus, equity, and a range of benefit options found on our career site. Compensation will vary based on individual factors such as education, qualifications, and experience of the final candidate(s), specific office location, and calibration against relevant market data and internal team equity. Posted base salary figures are subject to change as new market data becomes available.

Our benefits include comprehensive medical, dental, and vision plans, matching 401(k), unlimited PTO and paid holidays, parental/adoption leave, legal insurance, and a home technology stipend. Details of participation in these benefit plans will be provided when a candidate receives an offer of employment.

At IonQ, we believe in fair treatment, access, opportunity, and advancement for all while striving to identify and eliminate barriers. We empower employees to thrive by fostering a culture of autonomy, productivity, and respect. We are dedicated to creating an environment where individuals can feel welcomed, respected, supported, and valued.

We are committed to equity and justice. We welcome different voices and viewpoints and do not discriminate on the basis of race, religion, ancestry, physical and/or mental disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, transgender status, age, sexual orientation, military or veteran status, or any other basis protected by law. We are proud to be an Equal Employment Opportunity employer.

US Technical Jobs.

The position you are applying for will require access to technology that is subject to U.S. export control and government contract restrictions. Employment with IonQ is contingent on either verifying "U.S. Person" (e.g., U.S. citizen, U.S. national, U.S. permanent resident, or lawfully admitted into the U.S. as a refugee or granted asylum) status for export controls and government contracts work, obtaining any necessary license, and/or confirming the availability of a license exception under U.S. export controls. Please note that in the absence of confirming you are a U.S. Person for export control and government contracts work purposes, IonQ may choose not to apply for a license or decline to use a license exception (if available) for you to access export‑controlled technology that may require authorization, and similarly, you may not qualify for government contracts work that requires U.S. Persons, and IonQ may decline to proceed with your application on those bases alone. Accordingly, we will have some additional questions regarding your immigration status that will be used for export control and compliance purposes, and the answers will be reviewed by compliance personnel to ensure compliance with federal law.

US Non-Technical Jobs.

Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum. Accordingly, we will have some additional questions regarding your immigration status that will be used for export control and compliance purposes, and the answers will be reviewed by compliance personnel to ensure compliance with federal law.