We are looking for a hands-on IT Systems & Workspace Engineer to build and maintain the corporate IT environment for a globally distributed technology company with approximately 10–50 users.

You will own the layer between the user and company systems:

Identity → Access → Devices → Virtual Workspaces

Our model:

• Long-term and privileged users receive company-managed MacBooks;

• Short-term contractors work through secure Virtual Workspaces;

• Direct corporate work from unmanaged personal devices is prohibited;

• A third-party provider handles hardware procurement, delivery and retrieval;

• DevOps owns production infrastructure, Kubernetes and CI/CD.

What You’ll Own

• Apple & Endpoint Management

• Apple Business Manager

• MDM (Kandji / Jamf / Mosyle / Intune)

• Automated Mac enrollment and configuration

• FileVault, updates, applications, compliance, remote lock/wipe

• Device inventory and lifecycle

Identity & Access

• Google Workspace administration

• SSO / MFA

• SAML / OIDC / SCIM

• Groups and role-based access

• Automated onboarding and offboarding

Virtual Workspaces

• Design and implement secure environments for short-term contractors

• Evaluate and operate solutions such as Amazon WorkSpaces, Coder, GitHub Codespaces, Google

• Cloud Workstations or MacStadium

• Create standardized business and developer workspace templates

• Prevent corporate code/files from being stored on personal devices

• Optimize security, latency and cloud costs

Automation & Operations

• Automate routine onboarding/offboarding

• Integrate with our hardware lifecycle provider

• Maintain documentation and runbooks

• Provide lightweight ongoing administration and troubleshooting

What We’re Looking For

• 4+ years in IT Systems / Endpoint / Workspace Engineering

• Strong hands-on macOS administration

• Real Apple Business Manager + MDM experience

• Google Workspace administration

• Strong SSO / MFA / SAML / OIDC / SCIM knowledge

• Experience implementing VDI, cloud workspaces or cloud development environments

• AWS/GCP/Azure familiarity

• Ability to personally configure and automate systems — not just design architecture

• Strong English

Experience with Kandji/Jamf, Coder, Amazon WorkSpaces, Google Cloud Workstations, MacStadium and Terraform is a strong plus.

Engagement

Phase 1 — Implementation

approximately 4–8 weeks
fixed-scope / fixed-price
indicative budget: 4,000 $

Expected outcome: ABM + MDM, identity/access, Virtual Workspaces, onboarding/offboarding automation and documentation are production-ready.

Phase 2 — Ongoing Support

approximately 6–8 hours/month
400–600 $ month retainer
larger projects quoted separately

This is not a DevOps or helpdesk role. DevOps owns production infrastructure; you own the corporate user environment.

To Apply

Please send:

• Examples of similar environments you personally implemented;

• MDM and Virtual Workspace platforms you have worked with;

• Your proposed approach for our environment;

• Fixed price for the initial implementation;

Contract · Remote · Initial Project + Ongoing Retainer