or apply directly on Figure's site. We never take the application ourselves.
Is this posting real?
- This role has been open
- 51 days Figure's roles stay open a median of 81 days
- Reposted
- No
- Salary listed
- No 60% of Figure's roles list one
- Ghost-job risk at Figure
- high 112 stale, 2 reposted of 112 open
- Hiring momentum
- 152 roles opened in the last 90 days ↑ up vs. the prior 90 days
- Last confirmed on the employer's board
- 2026-10-23
Measured from postings appearing on and disappearing from Figure's own greenhouse board since 2026-08-03. Full hiring picture for Figure.
About this role
The IT Client Engineer at Figure will be responsible for managing the endpoint fleet across various environments, including the San Jose campus and manufacturing sites. This role involves implementing security measures, automating identity management, and developing tools to streamline IT processes, ensuring that devices are secure and compliant. The engineer will work closely with the Information Security team to enforce technical controls and improve operational efficiency through scripting and automation.
- benefits
- 1/5
- freshness
- 4/5
- career value
- 4/5
- role clarity
- 5/5
- pay transparency
- 0/5
Scored from the posting itself — how clearly the role is described, how much it says about pay and benefits, and how recently it was listed. Not a judgement of Figure as an employer.
What you need
- Hands-on experience managing macOS, Windows, and Linux (Ubuntu LTS) endpoint fleets in production
- Practical experience with zero-touch enrollment and modern endpoint tooling: FleetDM or comparable osquery-based management, Apple Business Manager, Windows Autopilot or Microsoft Intune
- Experience turning security benchmarks (CIS or similar) into enforced, validated configuration policy
- Strong scripting skills in Python, Bash, and/or PowerShell, with a track record of replacing manual processes with code
- Working knowledge of authentication fundamentals: SAML, OIDC, SCIM, and the tradeoffs between them
- Experience administering identity and SaaS platforms at scale: Okta, Google Workspace, Slack, Jira, including SCIM and API-driven provisioning
Nice to have
- Experience supporting devices or users at manufacturing sites, contract manufacturers, or other high-IP-risk environments
- Familiarity with export control, data residency, or IP protection frameworks in hardware and software R&D
- Experience with employee-built AI applications: assess authentication and permissions risk, and redirect requests to a Security consult
- Experience deploying or operating EDR agents at fleet scale (CrowdStrike Falcon or similar)
- Experience building integrations against SaaS APIs and identity providers
Worth weighing
- 5 days/week in-office collaboration required
- Role involves significant responsibility for security-sensitive programs
- Focus on automation and scripting may require strong coding skills
- The position may involve working in environments with connectivity challenges
Summarised from Figure's posting. Read the full original.
Listed by Figure on their greenhouse job board, last confirmed open on 2026-10-23. PitchMeAI is not the employer.
More roles at Figure
- Systems Integration Engineer - Actuation SystemsSan Jose, CA
- Systems Integration Engineer - Hand SubsystemSan Jose, CA
- Hardware Test Intern [Fall 2026]San Jose, CA
- Data Quality AnalystSan Jose, CA
- Electrical Engineer, Actuator SystemsSan Jose, CA
- Humanoid Robot Operator (Morning Shift)San Jose, CA
- Technical RecruiterSan Jose, CA
- Helix AI Engineer, Localization and MappingSan Jose, CA