Client Platform Engineer, Windows and VDI (Federal)

Get to know Okta

Okta is The World’s Identity Company. We free everyone to safely use any technology, anywhere, on any device or app. Our flexible and neutral products, Okta Platform and Auth0 Platform, provide secure access, authentication, and automation, placing identity at the core of business security and growth.

At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box - we’re looking for lifelong learners and people who can make us better with their unique experiences.

Join our team! We’re building a world where Identity belongs to you.

The Business Technology Team

The Business Technology (BT) team at Okta is the internal IT organization responsible for the technology infrastructure, applications, and services that empower Okta employees globally. We partner across the business to deliver solutions that drive productivity, collaboration, and innovation. Effective financial management and operational discipline are critical to our success in enabling Okta's rapid growth and ensuring we operate efficiently.

The Client Platform Engineer, Windows and VDI Opportunity

Reporting to the Lenny Vaknine, we’re looking for a modern Windows & VDI engineer who brings not just endpoint expertise, but also an SRE mindset. This role blends Windows management with infrastructure as code, automation, and cloud-native engineering. You’ll help us securely manage Windows endpoints and VDI environments across commercial and federal (GovCloud) contexts — while also building the glue code, pipelines, and CI/CD workflows that make the platform scalable, reliable, and future-proof. We are a passionate team of engineers who thrive on solving hard problems with automation, building maintainable infrastructure, and continuously improving employee experience.

What you’ll be doing 

• Manage and secure Windows devices across our global fleet:
  • Physical Windows PCs
  • Windows 365 Cloud PCs
  • Amazon WorkSpaces
• Design, build, and maintain VDI images and pipelines — delivering compliant environments that meet federal standards.
• Partner with Security and Compliance to implement and automate frameworks (CIS Benchmarks, DISA STIGs).
• Automate device and identity management with Microsoft Intune, Entra ID, and Okta downstream integrations.
• Use Infrastructure as Code (Terraform, GitHub Actions, Microsoft Graph API, AWS Lambda) to build and maintain scalable client platforms.
• Deploy and patch applications using modern package management (Patch My PC, Chocolatey, Winget, PSADT).
• Continuously improve endpoint hygiene, patching pipelines, and CVE response.
• Build CI/CD workflows and automation that provision, de-provision, and integrate devices with enterprise systems.
• Act as a senior escalation point for Windows + VDI, while helping raise the bar with automation-first solutions.

What you’ll bring to the role

• A modern approach to endpoint management: automation-first, code-driven, and cloud-oriented.
• Experience managing Windows + VDI environments (Windows 365, AWS WorkSpaces, RDS, Citrix, etc.) in regulated industries.
• Strong knowledge of identity platforms (Active Directory, Entra ID, Okta, SAML, SCIM, OAuth).
• Proven ability to build pipelines and automation with Terraform, GitHub Actions, CI/CD workflows, and cloud services.
• Hands-on scripting with PowerShell, Python, or Go for automation and remediation.
• Experience with device provisioning and lifecycle management (Intune, Autopilot).
• Familiarity with AWS, AWS GovCloud, Azure, and automation tooling (AWS CLI, AWS Lambda, Microsoft Graph).
• Strong documentation practices and a collaborative mindset.
• Problem-solver who thrives on connecting systems together with automation and glue code.

And extra credit if you have experience in any of the following! 

• Experience with Jamf Pro, AutoPkg, or Munki (cross-platform endpoint management).
• Proficiency in Go, Swift, or other compiled languages for deeper automation.
• Certifications (Okta, Microsoft Endpoint, AWS, Terraform, etc.).
• Experience working in federal environments.

This position requires the ability to access federal environments and/or have access to protected federal data. As a condition of employment for this position, the successful candidate must be able to submit documentation establishing U.S. Person status (e.g. a U.S. Citizen, National, Lawful Permanent Resident, Refugee, or Asylee. 22 CFR 120.15) upon hire.

#LI-BF1
#LI-Onsite

Below is the annual base salary range for candidates located in California, Colorado, New York and Washington. Your actual base salary will depend on factors such as your skills, qualifications, experience, and work location. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program please visit: .

The annual base salary range for this position for candidates located in California (excluding San Francisco Bay Area), Colorado, New York, and Washington is between: $151,000—$227,000 USD

What you can look forward to as a Full-Time Okta employee!

• Amazing Benefits
• Making Social Impact
• Developing Talent and Fostering Connection + Community at Okta

Okta cultivates a dynamic work environment, providing the best tools, technology and benefits to empower our employees to work productively in a setting that best and uniquely suits their needs. Each organization is unique in the degree of flexibility and mobility in which they work so that all employees are enabled to be their most creative and successful versions of themselves, regardless of where they live. Find your place at Okta today! .

Some roles may require travel to one of our office locations for in-person onboarding.

Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws.

If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation.

Okta is committed to complying with applicable data privacy and security laws and regulations. For more information, please see our Privacy Policy at .