Client Platform Engineer- Remote – LATAM or EST

$80K – $100K

Description

Implement and operate the company’s client platform with a focus on macOS. Administer Google Workspace, manage a 100–200 device macOS fleet with Kandji and zero-touch enrollment via Apple Business Manager (ABM), and enforce security baselines defined in partnership with Security. Execute procurement for US and international employees, drive automation in Bash, handle access requests, and deliver predictable onboarding/off boarding.

What you’ll do

Endpoint management and automation

• Implement and maintain macOS configuration baselines in Kandji (blueprints, profiles, scripts) derived from security-defined standards.

• Run ABM-based zero-touch enrollment; ensure devices are supervised, compliant, and land in correct configurations on first boot.
• Package and deploy software and OS updates; use ringed deployments (test > pilot > production) with rollback plans.
• Automate repetitive tasks in Bash (inventory reconciliation, compliance checks, reporting). Python is a plus.
• Monitor device health: patch levels, EDR coverage, and compliance drift; execute remediations within defined SLAs.

Security and compliance

• Implement FileVault, Firewall, Gatekeeper, password/SSO policies, and PPPC/TCC controls per Security’s baselines.
• Operate and monitor CrowdStrike on macOS (agent deployment, policy assignment, health checks) and coordinate incident handoffs.
• Maintain exceptions and remediation timelines; produce compliance reports and dashboards.

Google Workspace administration

• Manage users, groups, org units, and policies with least-privilege patterns.
• Execute lifecycle standards for account creation, deprovisioning, and data retention.
• Manage device trust policies for browsers and endpoints as applicable.

Employee lifecycle and access

• Deliver predictable onboarding/offboarding: accounts, licenses, device provisioning/returns, and secure wipes.
• Handle access requests with auditable workflows and defined SLAs; maintain accurate entitlements.

Procurement and asset lifecycle (US and international)

• Execute purchasing against standard kits and budget guidelines; maintain buffer stock based on hiring plans.
• Coordinate international logistics (customs/imports, power/keyboard variants, regional warranty).
• Track assets end-to-end: tagging, inventory accuracy, RMAs, and secure end-of-life disposal.

Reliability, documentation, and support

• Author and maintain SOPs, runbooks, and user guides; keep them version-controlled.
• Act as Tier-1 escalation for endpoint issues; drive root cause analysis and preventative fixes.
• Track and report KPIs: deployment success, compliance, MTTR, ticket types/volumes, and device health.

How you’ll work

• Treat configuration as code (profiles, scripts, blueprints) with change control and reviews.
• Use ringed deployments with automated validation and fast rollback.
• Standardize device configurations to minimize drift; manage exceptions explicitly.
• Automate first; eliminate manual steps in provisioning, access, and reporting.
• Partner tightly with Security: co-own baselines, telemetry, and incident response interfaces.

Tools you’ll use

• Google Workspace Admin
• Kandji (MDM)
• Apple Business Manager (ABM) for Automated Device Enrollment
• CrowdStrike (EDR)
• Bash/shell; Python a plus
• Version control and ticketing systems

Minimum qualifications

• 3 – 5 years in client platforms, IT engineering, or similar role managing primarily macOS fleets at 100–200 device scale.
• Hands-on Google Workspace administration (users, groups, org units, policies).
• Proven Kandji administration with ABM zero-touch enrollment.
• Experience operating CrowdStrike EDR on macOS.
• Fluency in Bash/shell and Git-based workflows.
• Strong understanding of macOS management primitives: configuration profiles, PPPC/TCC, FileVault, launchd, software packaging, and update channels.
• Experience delivering onboarding/offboarding, access management, and asset lifecycle with clear SLAs.
• Exposure to US and international procurement and logistics.

Compensation & Package

Health Stipend
Office Stipend
Laptop
Unlimited Leave
Options

Keypoint;

3 – 5 years in client platforms, IT engineering, or similar role managing macOS fleets at 100–200 device scale.

Prior experience working with mobile device management using Kandji or Jamf

Hands-on Google Workspace administration (users, groups, org units, policies).

Experience operating CrowdStrike EDR on macOS

Experience delivering onboarding/offboarding, access management, and asset lifecycle with clear SLAs.

Location

Remote – LATAM or EST

About Conduit enables businesses to simply and cheaply move money between Latin America, Africa, China and the US at scale.

Company Size 11-50

https://conduitpay.com/

Lỗi: Không tìm thấy biểu mẫu liên hệ.