Client Platform Engineer, Windows and VDI (Federal)

The Business Technology Team

The Business Technology (BT) team at Okta is the internal IT organization responsible for the technology infrastructure, applications, and services that empower Okta employees globally. We partner across the business to deliver solutions that drive productivity, collaboration, and innovation. Effective financial management and operational discipline are critical to our success in enabling Okta's rapid growth and ensuring we operate efficiently.

The Client Platform Engineer, Windows and VDI Opportunity

Reporting to the Lenny Vaknine, we’re looking for a modern Windows & VDI engineer who brings not just endpoint expertise, but also an SRE mindset. This role blends Windows management with infrastructure as code, automation, and cloud-native engineering. You’ll help us securely manage Windows endpoints and VDI environments across commercial and federal (GovCloud) contexts — while also building the glue code, pipelines, and CI/CD workflows that make the platform scalable, reliable, and future-proof. We are a passionate team of engineers who thrive on solving hard problems with automation, building maintainable infrastructure, and continuously improving employee experience.

What you’ll be doing 

• Manage and secure Windows devices across our global fleet:
  • Physical Windows PCs
  • Windows 365 Cloud PCs
  • Amazon WorkSpaces
• Design, build, and maintain VDI images and pipelines — delivering compliant environments that meet federal standards.
• Partner with Security and Compliance to implement and automate frameworks (CIS Benchmarks, DISA STIGs).
• Automate device and identity management with Microsoft Intune, Entra ID, and Okta downstream integrations.
• Use Infrastructure as Code (Terraform, GitHub Actions, Microsoft Graph API, AWS Lambda) to build and maintain scalable client platforms.
• Deploy and patch applications using modern package management (Patch My PC, Chocolatey, Winget, PSADT).
• Continuously improve endpoint hygiene, patching pipelines, and CVE response.
• Build CI/CD workflows and automation that provision, de-provision, and integrate devices with enterprise systems.
• Act as a senior escalation point for Windows + VDI, while helping raise the bar with automation-first solutions.

What you’ll bring to the role

• A modern approach to endpoint management: automation-first, code-driven, and cloud-oriented.
• Experience managing Windows + VDI environments (Windows 365, AWS WorkSpaces, RDS, Citrix, etc.) in regulated industries.
• Strong knowledge of identity platforms (Active Directory, Entra ID, Okta, SAML, SCIM, OAuth).
• Proven ability to build pipelines and automation with Terraform, GitHub Actions, CI/CD workflows, and cloud services.
• Hands-on scripting with PowerShell, Python, or Go for automation and remediation.
• Experience with device provisioning and lifecycle management (Intune, Autopilot).
• Familiarity with AWS, AWS GovCloud, Azure, and automation tooling (AWS CLI, AWS Lambda, Microsoft Graph).
• Strong documentation practices and a collaborative mindset.
• Problem-solver who thrives on connecting systems together with automation and glue code.

And extra credit if you have experience in any of the following! 

• Experience with Jamf Pro, AutoPkg, or Munki (cross-platform endpoint management).
• Proficiency in Go, Swift, or other compiled languages for deeper automation.
• Certifications (Okta, Microsoft Endpoint, AWS, Terraform, etc.).
• Experience working in federal environments.

This position requires the ability to access federal environments and/or have access to protected federal data. As a condition of employment for this position, the successful candidate must be able to submit documentation establishing U.S. Person status (e.g. a U.S. Citizen, National, Lawful Permanent Resident, Refugee, or Asylee. 22 CFR 120.15) upon hire.

#LI-BF1
#LI-Onsite