[Remote] Staff Client Platform Engineer (CPE) (Remote)

Job description

ResponsibilitiesHelp build IT roadmap, setting technical direction for endpoint management, fleet automation, and IT operations across all KoBold offices and field sites in 10+ countriesDesign and implement zero-touch provisioning and automated reimaging workflows for macOS (Jamf) and Windows (Intune) endpointsBuild endpoint monitoring, alerting, and fleet health dashboards to shift IT from reactive to proactive supportDrive device lifecycle management including EoL/EoS tracking, hardware refresh planning, and inventory management across Jamf, Intune, CrowdStrike, and related toolingCreate self-service application deployment and access workflows to reduce helpdesk volume and empower employeesApply DevOps principles to IT operations: configuration-as-code (e.g. managing Intune policies via Terraform), infrastructure automation, version-controlled policies, and repeatable processesOwn internet reliability and network performance at all global remote KoBold sitesManage the full software procurement lifecycle: new purchases, renewals, expansions, and cancellations, ensuring user access is never disrupted by lapsed licenses or last-minute renewalsOwn and drive execution of the annual software budget, including process improvements year-over-year and proactive renewal pipeline visibility for legal and financeOptimize license utilization across the SaaS portfolio—track usage, right-size seat counts, consolidate redundant tools, and negotiate pricing with vendorsCoordinate with legal on contract review, working within the existing procurement process to move quickly on low-risk purchases while ensuring appropriate review for larger spendOnboard new SaaS applications with proper Okta integration (SSO, SCIM) before launch, and manage decommissioning of deprecated toolsOwn Okta administration including SSO integrations, SCIM provisioning, group management, access request workflows, and lifecycle automationManage Google Workspace administration, including license management, security settings, and break-glass super-admin governanceBuild automation for minimal-touch employee onboarding and offboarding—ensuring new hires are fully provisioned on day one and departing employees are cleanly deprovisionedSupport AI tooling rollout (Claude Desktop, Claude Code, and related tools) across the endpoint fleet, including deployment, configuration, and employee trainingSupervise and mentor IT support staff, providing technical coaching, priority-setting, performance management, and career developmentDevelop and maintain IT training programs for new hires and ongoing employee enablement, including documentation, video walkthroughs, and live onboarding sessionsProvide helpdesk backup on high-volume days, modeling the standard of responsiveness and quality you expect from the teamLearn about mineral exploration by working closely with exploration teams, including time in the field in remote operationsCollaborate with infrastructure engineering and security teams on cross-cutting initiatives including observability, access controls, endpoint security posture, and incident responsePartner across the company to contribute to specification, vendor selection, and change management on new software requestsPartner with finance on budget tracking, invoice approvals, and AFE submissions for software spendWork with legal to streamline the contract review pipeline, maintain lead times on renewals, and advocate for tiered review processes that match risk to effortCoordinate digitization efforts across the globe, ensuring consistent standards and tooling for converting physical records to digital archives at field and office sitesSkills

5+ years of experience in IT engineering, IT management, or a similar role combining hands-on technical depth with operational ownershipStrong experience with MDM platforms, particularly Jamf (macOS) and Microsoft Intune (Windows), including policy configuration, automated enrollment, compliance enforcement, and ideally infrastructure-as-code approaches (e.g. Terraform)Experience with identity and access management platforms (Okta strongly preferred), including SSO integration, SCIM provisioning, access request workflows, and lifecycle automationExperience managing software procurement and renewals: specification and change management, vendor negotiation, lic