Client Platform Engineer, Windows And VDI

Client Platform Engineer, Windows And VDI

Okta is The World's Identity Company. We free everyone to safely use any technology, anywhere, on any device or app. Our flexible and neutral products, Okta Platform and Auth0 Platform, provide secure access, authentication, and automation, placing identity at the core of business security and growth. At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box - we're looking for lifelong learners and people who can make us better with their unique experiences. Join our team! We're building a world where Identity belongs to you.

The Business Technology (BT) team at Okta is the internal IT organization responsible for the technology infrastructure, applications, and services that empower Okta employees globally. We partner across the business to deliver solutions that drive productivity, collaboration, and innovation. Effective financial management and operational discipline are critical to our success in enabling Okta's rapid growth and ensuring we operate efficiently.

Opportunity

Reporting to the Lenny Vaknine, we're looking for a modern Windows & VDI engineer who brings not just endpoint expertise, but also an SRE mindset. This role blends Windows management with infrastructure as code, automation, and cloud-native engineering. You'll help us securely manage Windows endpoints and VDI environments across commercial and federal (GovCloud) contexts - while also building the glue code, pipelines, and CI/CD workflows that make the platform scalable, reliable, and future-proof.

We are a passionate team of engineers who thrive on solving hard problems with automation, building maintainable infrastructure, and continuously improving employee experience.

What You'll Be Doing

• Manage and secure Windows devices across our global fleet: Physical Windows PCs, Windows 365 Cloud PCs, Amazon WorkSpaces
• Design, build, and maintain VDI images and pipelines - delivering compliant environments that meet federal standards
• Partner with Security and Compliance to implement and automate frameworks (CIS Benchmarks, DISA STIGs)
• Automate device and identity management with Microsoft Intune, Entra ID, and Okta downstream integrations
• Use Infrastructure as Code (Terraform, GitHub Actions, Microsoft Graph API, AWS Lambda) to build and maintain scalable client platforms
• Deploy and patch applications using modern package management (Patch My PC, Chocolatey, Winget, PSADT)
• Continuously improve endpoint hygiene, patching pipelines, and CVE response
• Build CI/CD workflows and automation that provision, de-provision, and integrate devices with enterprise systems
• Act as a senior escalation point for Windows + VDI, while helping raise the bar with automation-first solutions

What You'll Bring To The Role

A modern approach to endpoint management: automation-first, code-driven, and cloud-oriented. Experience managing Windows + VDI environments (Windows 365, AWS WorkSpaces, RDS, Citrix, etc.) in regulated industries. Strong knowledge of identity platforms (Active Directory, Entra ID, Okta, SAML, SCIM, OAuth). Proven ability to build pipelines and automation with Terraform, GitHub Actions, CI/CD workflows, and cloud services. Hands-on scripting with PowerShell, Python, or Go for automation and remediation. Experience with device provisioning and lifecycle management (Intune, Autopilot). Familiarity with AWS, AWS GovCloud, Azure, and automation tooling (AWS CLI, AWS Lambda, Microsoft Graph). Strong documentation practices and a collaborative mindset. Problem-solver who thrives on connecting systems together with automation and glue code. And extra credit if you have experience in any of the following! Experience with Jamf Pro, AutoPkg, or Munki (cross-platform endpoint)