or apply directly on Figure's site. We never take the application ourselves.
Is this posting real?
- This role has been open
- 15 days Figure's roles stay open a median of 45 days
- Reposted
- No
- Salary listed
- No 60% of Figure's roles list one
- Ghost-job risk at Figure
- high 81 stale, 2 reposted of 112 open
- Hiring momentum
- 152 roles opened in the last 90 days ↑ up vs. the prior 90 days
- Last confirmed on the employer's board
- 2026-09-17
Measured from postings appearing on and disappearing from Figure's own greenhouse board since 2026-08-03. Full hiring picture for Figure.
About this role
The IT Client Engineer at Figure will be responsible for managing the endpoint fleet across various environments, including the San Jose campus and manufacturing sites. This role involves implementing security measures, automating identity management, and developing tools to streamline IT processes, ensuring that devices are secure and compliant. The engineer will work closely with the Information Security team to enforce technical controls and improve operational efficiency through scripting and automation.
- benefits
- 1/5
- freshness
- 4/5
- career value
- 4/5
- role clarity
- 5/5
- pay transparency
- 0/5
Scored from the posting itself — how clearly the role is described, how much it says about pay and benefits, and how recently it was listed. Not a judgement of Figure as an employer.
What you need
- Hands-on experience managing macOS, Windows, and Linux (Ubuntu LTS) endpoint fleets in production
- Practical experience with zero-touch enrollment and modern endpoint tooling: FleetDM or comparable osquery-based management, Apple Business Manager, Windows Autopilot or Microsoft Intune
- Experience turning security benchmarks (CIS or similar) into enforced, validated configuration policy
- Strong scripting skills in Python, Bash, and/or PowerShell, with a track record of replacing manual processes with code
- Working knowledge of authentication fundamentals: SAML, OIDC, SCIM, and the tradeoffs between them
- Experience administering identity and SaaS platforms at scale: Okta, Google Workspace, Slack, Jira, including SCIM and API-driven provisioning
Nice to have
- Experience supporting devices or users at manufacturing sites, contract manufacturers, or other high-IP-risk environments
- Familiarity with export control, data residency, or IP protection frameworks in hardware and software R&D
- Experience with employee-built AI applications: assess authentication and permissions risk, and redirect requests to a Security consult
- Experience deploying or operating EDR agents at fleet scale (CrowdStrike Falcon or similar)
- Experience building integrations against SaaS APIs and identity providers
Worth weighing
- 5 days/week in-office collaboration required
- Role involves significant responsibility for security-sensitive programs
- Focus on automation and scripting may require strong coding skills
- The position may involve working in environments with connectivity challenges
Summarised from Figure's posting. Read the full original.
Listed by Figure on their greenhouse job board, last confirmed open on 2026-09-17. PitchMeAI is not the employer.
More roles at Figure
- Senior Gear Design EngineerSan Jose, CA
- State Estimation Engineer - Data Collection SystemsSan Jose, CA
- Warehouse Manager, Commercial OperationsSan Jose, CA
- Technical Program Manager, Security & PrivacySan Jose, CA
- Helix Data Creator (SP)São Paulo, SP, Brasil
- Senior People Operations SpecialistSan Jose, CA
- Prototype Development TechnicianSan Jose, CA
- NPI Buyer/PlannerSan Jose, CA