IT Systems & Workspace Engineer

We are looking for a hands-on IT Systems & Workspace Engineer to build and maintain the corporate IT environment for a globally distributed technology company with approximately 10–50 users.

You will own the layer between the user and company systems:

Identity Access Devices Virtual Workspaces

Our model:

Long-term and privileged users receive company-managed MacBooks;

Short-term contractors work through secure Virtual Workspaces;

Direct corporate work from unmanaged personal devices is prohibited;

A third-party provider handles hardware procurement, delivery and retrieval;

DevOps owns production infrastructure, Kubernetes and CI/CD.

What You’ll Own

Apple & Endpoint Management

Apple Business Manager

MDM (Kandji / Jamf / Mosyle / Intune)

Automated Mac enrollment and configuration

FileVault, updates, applications, compliance, remote lock/wipe

Device inventory and lifecycle

Identity & Access

Google Workspace administration

SSO / MFA

SAML / OIDC / SCIM

Groups and role-based access

Automated onboarding and offboarding

Virtual Workspaces

Design and implement secure environments for short-term contractors

Evaluate and operate solutions such as Amazon WorkSpaces, Coder, GitHub Codespaces, Google

Cloud Workstations or MacStadium

Create standardized business and developer workspace templates

Prevent corporate code/files from being stored on personal devices

Optimize security, latency and cloud costs

Automation & Operations

Automate routine onboarding/offboarding

Integrate with our hardware lifecycle provider

Maintain documentation and runbooks

Provide lightweight ongoing administration and troubleshooting

What We’re Looking For

4+ years in IT Systems / Endpoint / Workspace Engineering

Strong hands-on macOS administration

Real Apple Business Manager + MDM experience

Google Workspace administration

Strong SSO / MFA / SAML / OIDC / SCIM knowledge

Experience implementing VDI, cloud workspaces or cloud development environments

AWS/GCP/Azure familiarity

Ability to personally configure and automate systems - not just design architecture

Strong English

Experience with Kandji/Jamf, Coder, Amazon WorkSpaces, Google Cloud Workstations, MacStadium and Terraform is a strong plus.

Engagement

Phase 1 - Implementation

approximately 4–8 weeks

fixed-scope / fixed-price

indicative budget: 4,000 $

Expected outcome: ABM + MDM, identity/access, Virtual Workspaces, onboarding/offboarding automation and documentation are production-ready.

Phase 2 - Ongoing Support

approximately 6–8 hours/month

400–600 $ month retainer

larger projects quoted separately

This is not a DevOps or helpdesk role. DevOps owns production infrastructure; you own the corporate user environment.

To Apply

Please send:

Examples of similar environments you personally implemented;

MDM and Virtual Workspace platforms you have worked with;

Your proposed approach for our environment;

Fixed price for the initial implementation;

Contract · Remote · Initial Project + Ongoing Retainer