PitchMeAI Jobs
Figure

IT Client Engineer

Figure · San Jose, CA

Posted 15 days ago

or apply directly on Figure's site. We never take the application ourselves.

Is this posting real?

This role has been open
15 days
Figure's roles stay open a median of 45 days
Reposted
No
Salary listed
No
60% of Figure's roles list one
Ghost-job risk at Figure
high
81 stale, 2 reposted of 112 open
Hiring momentum
152 roles opened in the last 90 days
↑ up vs. the prior 90 days
Last confirmed on the employer's board
2026-09-17

Measured from postings appearing on and disappearing from Figure's own greenhouse board since 2026-08-03. Full hiring picture for Figure.

About this role

The IT Client Engineer at Figure will be responsible for managing the endpoint fleet across various environments, including the San Jose campus and manufacturing sites. This role involves implementing security measures, automating identity management, and developing tools to streamline IT processes, ensuring that devices are secure and compliant. The engineer will work closely with the Information Security team to enforce technical controls and improve operational efficiency through scripting and automation.

Our read on this posting2.8out of 5
benefits
1/5
freshness
4/5
career value
4/5
role clarity
5/5
pay transparency
0/5

Scored from the posting itself — how clearly the role is described, how much it says about pay and benefits, and how recently it was listed. Not a judgement of Figure as an employer.

What you need

  • Hands-on experience managing macOS, Windows, and Linux (Ubuntu LTS) endpoint fleets in production
  • Practical experience with zero-touch enrollment and modern endpoint tooling: FleetDM or comparable osquery-based management, Apple Business Manager, Windows Autopilot or Microsoft Intune
  • Experience turning security benchmarks (CIS or similar) into enforced, validated configuration policy
  • Strong scripting skills in Python, Bash, and/or PowerShell, with a track record of replacing manual processes with code
  • Working knowledge of authentication fundamentals: SAML, OIDC, SCIM, and the tradeoffs between them
  • Experience administering identity and SaaS platforms at scale: Okta, Google Workspace, Slack, Jira, including SCIM and API-driven provisioning

Nice to have

  • Experience supporting devices or users at manufacturing sites, contract manufacturers, or other high-IP-risk environments
  • Familiarity with export control, data residency, or IP protection frameworks in hardware and software R&D
  • Experience with employee-built AI applications: assess authentication and permissions risk, and redirect requests to a Security consult
  • Experience deploying or operating EDR agents at fleet scale (CrowdStrike Falcon or similar)
  • Experience building integrations against SaaS APIs and identity providers

Worth weighing

  • 5 days/week in-office collaboration required
  • Role involves significant responsibility for security-sensitive programs
  • Focus on automation and scripting may require strong coding skills
  • The position may involve working in environments with connectivity challenges

Summarised from Figure's posting. Read the full original.

Listed by Figure on their greenhouse job board, last confirmed open on 2026-09-17. PitchMeAI is not the employer.

More roles at Figure

All 112 open roles at Figure →