IT Systems & Workspace Engineer

We are looking for a hands-on IT Systems & Workspace Engineer to build and maintain the corporate IT environment for a globally distributed technology company with approximately 10–50 users.

You will own the layer between the user and company systems:

Identity Access Devices Virtual Workspaces

Our model:

• Long-term and privileged users receive company-managed MacBooks;
• Short-term contractors work through secure Virtual Workspaces;
• Direct corporate work from unmanaged personal devices is prohibited;
• A third-party provider handles hardware procurement, delivery and retrieval;
• DevOps owns production infrastructure, Kubernetes and CI/CD.

What You’ll Own

• Apple & Endpoint Management
• Apple Business Manager
• MDM (Kandji / Jamf / Mosyle / Intune)
• Automated Mac enrollment and configuration
• FileVault, updates, applications, compliance, remote lock/wipe
• Device inventory and lifecycle

Identity & Access

• Google Workspace administration
• SSO / MFA
• SAML / OIDC / SCIM
• Groups and role-based access
• Automated onboarding and offboarding

Virtual Workspaces

• Design and implement secure environments for short-term contractors
• Evaluate and operate solutions such as Amazon WorkSpaces, Coder, GitHub Codespaces, Google
• Cloud Workstations or MacStadium
• Create standardized business and developer workspace templates
• Prevent corporate code/files from being stored on personal devices
• Optimize security, latency and cloud costs

Automation & Operations

• Automate routine onboarding/offboarding
• Integrate with our hardware lifecycle provider
• Maintain documentation and runbooks
• Provide lightweight ongoing administration and troubleshooting

What We’re Looking For

• 4+ years in IT Systems / Endpoint / Workspace Engineering
• Strong hands-on macOS administration
• Real Apple Business Manager + MDM experience
• Google Workspace administration
• Strong SSO / MFA / SAML / OIDC / SCIM knowledge
• Experience implementing VDI, cloud workspaces or cloud development environments
• AWS/GCP/Azure familiarity
• Ability to personally configure and automate systems — not just design architecture
• Strong English

Experience with Kandji/Jamf, Coder, Amazon WorkSpaces, Google Cloud Workstations, MacStadium and Terraform is a strong plus.

Engagement

Phase 1 — Implementation

approximately 4–8 weeks
fixed-scope / fixed-price
indicative budget: 4,000 $

Expected outcome: ABM + MDM, identity/access, Virtual Workspaces, onboarding/offboarding automation and documentation are production-ready.

Phase 2 — Ongoing Support

approximately 6–8 hours/month
400–600 $ month retainer
larger projects quoted separately

This is not a DevOps or helpdesk role. DevOps owns production infrastructure; you own the corporate user environment.

To Apply

Please send:

• Examples of similar environments you personally implemented;
• MDM and Virtual Workspace platforms you have worked with;
• Your proposed approach for our environment;
• Fixed price for the initial implementation;

Contract · Remote · Initial Project + Ongoing Retainer