Client Platform Engineer, Windows and VDI (Federal)

The Business Technology Team

The Business Technology (BT) team at Okta is the internal IT organization responsible for the technology infrastructure, applications, and services that empower Okta employees globally. We partner across the business to deliver solutions that drive productivity, collaboration, and innovation. Effective financial management and operational discipline are critical to our success in enabling Okta's rapid growth and ensuring we operate efficiently.

The Client Platform Engineer, Windows and VDI Opportunity

Reporting to the Lenny Vaknine, we're looking for a modern Windows & VDI engineer who brings not just endpoint expertise, but also an SRE mindset. This role blends Windows management with infrastructure as code, automation, and cloud-native engineering. You'll help us securely manage Windows endpoints and VDI environments across commercial and federal (GovCloud) contexts - while also building the glue code, pipelines, and CI/CD workflows that make the platform scalable, reliable, and future-proof. We are a passionate team of engineers who thrive on solving hard problems with automation, building maintainable infrastructure, and continuously improving employee experience.

What you'll be doing

• Manage and secureWindows devicesacross our global fleet:
  
  
  
  • Physical Windows PCs
  • Windows 365 Cloud PCs
  • Amazon WorkSpaces
  
  
  
  
• Design, build, and maintain VDI images and pipelines- delivering compliant environments that meet federal standards.
• Partner with Security and Compliance toimplement and automate frameworks (CIS Benchmarks, DISA STIGs).
• Automate device and identity managementwith Microsoft Intune, Entra ID, and Okta downstream integrations.
• UseInfrastructure as Code(Terraform, GitHub Actions, Microsoft Graph API, AWS Lambda) to build and maintain scalable client platforms.
• Deploy and patch applications usingmodern package management(Patch My PC, Chocolatey, Winget, PSADT).
• Continuously improveendpoint hygiene, patching pipelines, and CVE response.
• Build CI/CD workflows and automation thatprovision, de-provision, and integrate devices with enterprise systems.
• Act as asenior escalation pointfor Windows + VDI, while helping raise the bar with automation-first solutions.

What you'll bring to the role

• A modern approach to endpoint management: automation-first, code-driven, and cloud-oriented.
• Experience managingWindows + VDI environments(Windows 365, AWS WorkSpaces, RDS, Citrix, etc.) in regulated industries.
• Strong knowledge ofidentity platforms(Active Directory, Entra ID, Okta, SAML, SCIM, OAuth).
• Proven ability to buildpipelines and automationwith Terraform, GitHub Actions, CI/CD workflows, and cloud services.
• Hands-on scripting withPowerShell, Python, or Gofor automation and remediation.
• Experience withdevice provisioning and lifecyclemanagement (Intune, Autopilot).
• Familiarity withAWS, AWS GovCloud, Azure, and automation tooling (AWS CLI, AWS Lambda, Microsoft Graph).
• Strong documentation practices and a collaborative mindset.
• Problem-solver who thrives on connecting systems together with automation and glue code.

And extra credit if you have experience in any of the following!

• Experience withJamf Pro, AutoPkg, or Munki(cross-platform endpoint management).
• Proficiency in Go, Swift, or other compiled languages for deeper automation.
• Certifications (Okta, Microsoft Endpoint, AWS, Terraform, etc.).
• Experience working in federal environments.

This position requires the ability to access federal environments and/or have access to protected federal data. As a condition of employment for this position, the successful candidate must be able to submit documentation establishing U.S. Person status (e.g. a U.S. Citizen, National, Lawful Permanent Resident, Refugee, or Asylee. 22 CFR 120.15) upon hire.

#LI-BF1
#LI-Onsite