Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 53 days agoWe saw it 4 min after it went up

IT Client Engineer

Figure AI104 open roles

Where
San Jose, CA
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIT Client EngineerFigure AI · San Jose, CA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Figure AI's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Figure AI postings stay open a median of 52 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: posted 53 days ago

Figure AI median: 52 days open

The posting

Figure is an AI robotics company developing autonomous general-purpose humanoid robots. The goal of the company is to ship humanoid robots with human level intelligence. Its robots are engineered to perform a variety of tasks in the home and commercial markets. Figure is headquartered in San Jose, CA.

We are looking for a Client Engineer to own Figure's endpoint fleet everywhere it operates: our San Jose campus, our factories, our contract manufacturing partners, and connectivity-challenged field sites. Figure's most valuable asset is the design and software behind our humanoid, and this role is the technical owner of the controls that keep that IP on the devices, in the environments, and in the hands we intend. You will work closely with our Information Security team to define how devices are issued, hardened, monitored, and recovered; what data is allowed to land on them; and how quickly we can detect and cut off exposure when something goes wrong, whether the device sits on the corporate network or offline on a factory floor.

You are also the technical lead for client-side infrastructure company-wide. You will run endpoint management across macOS, Windows 11 Pro, and Ubuntu LTS, own SSO integration and identity lifecycle automation on Okta, and replace manual IT work with code. The ideal candidate is an engineer first and a systems administrator second: someone who responds to a repeated ticket by writing the script that eliminates it, documents the result, and is comfortable owning a security-sensitive program with real business consequences.

Responsibilities:

Endpoint Engineering

  • Own zero-touch enrollment end to end: Apple Business Manager for macOS, Windows Autopilot for Windows, and PXE provisioning for Ubuntu workstations.
  • Translate CIS Benchmarks into deployable configuration profiles across all platforms: deterministically applied settings accompanied with osquery validations to validate posture.
  • Operate FleetDM as the cross-platform management agent across macOS, Windows, and Ubuntu LTS.
  • Maintain standard, reproducible workstation builds with measured and enforced patch compliance.
  • Build hardened device configurations for factories, contract manufacturers, and low-connectivity sites: loaner and clean-device programs, encryption enforcement and escrow, conditional access, and remote wipe and recovery.
  • Deploy and maintain CrowdStrike Falcon coverage across the fleet in partnership with Security, closing gaps on unmanaged or drifted devices.
  • Translate data handling and IP protection requirements from Security, Legal, and Engineering leadership into enforceable technical controls.

Identity and SSO Engineering

  • Own SSO integration of applications into Okta (SAML and OIDC), including internal tools with no vendor documentation.
  • Design application authentication and RBAC from first principles, in coordination with Security.
  • Automate the identity lifecycle end to end: provisioning, entitlement, and deprovisioning driven by Okta Workflows and integrated with Google Workspace, Slack, and Jira.

SaaS Operations and Automation

  • Build tooling in Python, Bash, or PowerShell to eliminate manual work across onboarding, offboarding, provisioning, reporting, and audit.
  • Run license and access audits, surface inactive accounts and orphaned entitlements, and drive cost recovery with Procurement.
  • Formalize change management for endpoint and SaaS changes and participate in the Change Advisory Board.
  • Document standards, runbooks, and automation so the broader IT team can operate and extend what you build.
  • Act as escalation point for complex client-side issues and mentor Operations Specialists.

Requirements:

  • Hands-on experience managing macOS, Windows, and Linux (Ubuntu LTS) endpoint fleets in production.
  • Practical experience with zero-touch enrollment and modern endpoint tooling: FleetDM or comparable osquery-based management, Apple Business Manager, Windows Autopilot or Microsoft Intune.
  • Experience turning security benchmarks (CIS or similar) into enforced, validated configuration policy.
  • Strong scripting skills in Python, Bash, and/or PowerShell, with a track record of replacing manual processes with code.
  • Working knowledge of authentication fundamentals: SAML, OIDC, SCIM, and the tradeoffs between them.
  • Experience administering identity and SaaS platforms at scale: Okta, Google Workspace, Slack, Jira, including SCIM and API-driven provisioning.
  • Sound judgment on security and risk tradeoffs, and the ability to explain technical controls to non-technical stakeholders.
  • Detail-oriented and process-driven, particularly in documenting standards and policy.
  • Great communication, collaboration, and interpersonal skills.

Bonus Qualifications:

  • Experience supporting devices or users at manufacturing sites, contract manufacturers, or other high-IP-risk environments.
  • Familiarity with export control, data residency, or IP protection frameworks in hardware and software R&D.
  • Experience with employee-built AI applications: assess authentication and permissions risk, and redirect requests to a Security consult.
  • Experience deploying or operating EDR agents at fleet scale (CrowdStrike Falcon or similar).
  • Experience building integrations against SaaS APIs and identity providers.
  • Experience supporting engineering workloads on Linux, including workstation and build-host management.
  • Experience standing up IT capability at new sites, or supporting international growth remotely from a central location.

The US base salary range for this full-time position is $150,000 to $200,000 per year.

The pay offered for this position may vary based on several individual factors, including job-related knowledge, skills, and experience. The total compensation package may also include additional components/benefits depending on the specific role. This information will be shared if an employment offer is extended.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Figure AI's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Figure AI's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Figure AI's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.