Staff Client Platform Engineer (CPE) (Remote)

About the Company In the coming decades, demand for critical minerals such as copper, lithium, and cobalt will continue to grow. These minerals are needed to build electric infrastructure, vehicles, data centers, and electronics. However, the mining industry is making 10x fewer discoveries per dollar spent on exploration compared to 30 years ago because the easy-to-find, near surface deposits have largely been discovered. KoBold was founded to be the first AI native mineral exploration, mine development, and technology development company. Our goal is to turn mineral exploration into a repeatable science to discover the minerals the world needs—by integrating artificial intelligence, human intelligence, and new technology. Our multidisciplinary teams of data scientists, engineers, and geologists work together to build data systems, design new sensors, and establish industry-leading workflows to develop and test subsurface predictions on our exploration projects. Our first discovery, Mingomba, is a high-grade copper deposit in Zambia, found after spending materially less than industry average. We are developing Mingomba with the same technical rigor that we apply to exploration. The Mingomba team brings together mine and processing engineers, geologists, data scientists, software engineers, and community, health & safety, construction, and operations specialists. By combining industry knowledge and cutting edge technology, we are developing Mingomba into a world class project that has safer and more predictable outcomes for ourselves, partners, and communities. It is expected to create thousands of good jobs for generations. KoBold runs exploration programs in eight countries, all with the potential for another discovery. KoBold is privately held; investors include institutional asset managers T. Rowe Price and Canada Pension Plan Investments; technology venture capitalists Andreessen Horowitz, Breakthrough Energy Ventures, BOND Capital, Durable Capital, StepStone, and Standard Investments; and strategic natural resources companies BHP and Mitsubishi. About the Role KoBold's ~280 geoscientists, data scientists, and engineers work remote-first across North America, Zambia, the DRC, Sweden, and field exploration sites around the world. As we scale, we are moving IT from reactive, break/fix support toward proactive, automated operations that work seamlessly across geographies — including field sites with limited connectivity. As our Staff Client Platform Engineer, you are the senior-most hands-on engineer for KoBold's client platform: the endpoint fleet (macOS via Jamf, Windows via Intune), the identity layer (Okta, Google Workspace), and the SaaS application portfolio that connects to it. You will build zero-touch provisioning, treat configuration as code, instrument the fleet so we find problems before employees do, and automate the employee lifecycle so new hires are fully productive on day one — whether they sit in Denver or at a drill camp in Zambia. This is a builder's role with technical leadership attached. You will set technical direction for endpoint and fleet tooling, mentor our global IT support staff, and raise the bar for what world-class IT operations looks like at a fast-moving exploration technology company — while spending most of your time engineering: writing Okta workflows, managing Jamf and Intune policy in Terraform, and scripting away repetitive work. Responsibilities Endpoint Platform & Fleet Automation Design and implement zero-touch provisioning and automated reimaging workflows for macOS (Jamf) and Windows (Intune) endpoints Apply DevOps principles to IT operations: configuration-as-code (e.g., managing Jamf and Intune policy via Terraform), version-controlled policies, and repeatable processes Build endpoint monitoring, alerting, and fleet health dashboards to shift IT from reactive to proactive support Drive device lifecycle management: EoL/EoS tracking, hardware refresh planning, and inventory management across Jamf, Intune, CrowdStrike, and related tooling Create self-service application deployment and access workflows that reduce helpdesk volume and empower employees Help build the IT roadmap with the Head of Infrastructure Engineering, setting technical direction for endpoint management and fleet automation across all KoBold offices and field sites in 10+ countries Identity & Access Engineering Own Okta administration: SSO integrations, SCIM provisioning, group management, access request workflows, and lifecycle automation Manage Google Workspace administration, including license management, security settings, and break-glass super-admin governance Build automation for minimal-touch employee onboarding and offboarding — new hires fully provisioned on day one, departures cleanly deprovisioned Support AI tooling rollout (Claude Desktop, Claude Code, and related tools) across the endpoint fleet, including deployment, configuration, and employee enablement SaaS Lifecycle & License Automation Run the software procurement lifecycle — new purchases, renewals, expansions, and cancellations — and build the renewal pipeline tooling so user access is never disrupted by a lapsed license Instrument license utilization across the SaaS portfolio: track usage, right-size seat counts, consolidate redundant tools, and support vendor pricing negotiations with data Onboard new SaaS applications with proper Okta integration (SSO, SCIM) before launch, and manage decommissioning of deprecated tools Partner with finance on software budget tracking, invoice approvals, and AFE submissions; give legal and finance proactive visibility into the renewal pipeline Technical Leadership & Enablement Provide technical mentorship and coaching to KoBold's global IT support staff; set the standard for automation-first problem solving Develop and maintain IT documentation and training for new hires and ongoing employee enablement Provide helpdesk backup on high-volume days, modeling the standard of responsiveness and quality you expect from the platform you build Cross-Functional Collaboration Collaborate with infrastructure engineering and security on observability, access controls, endpoint security posture, incident response, and connectivity standards for remote field sites Partner across the company on specification, vendor selection, and change management for new software requests Learn about mineral exploration by working closely with exploration teams, including time in the field at remote operations Qualifications 7+ years in client platform engineering, IT engineering, or similar roles combining hands-on technical depth with operational ownership Deep experience with MDM platforms, particularly Jamf (macOS) and Microsoft Intune (Windows): policy configuration, automated enrollment, compliance enforcement, and ideally infrastructure-as-code approaches (e.g., Terraform) Strong experience with identity and access management (Okta strongly preferred): SSO integration, SCIM provisioning, access request workflows, and lifecycle automation Hands-on experience building zero-touch provisioning, automated reimaging, and self-service deployment workflows at scale Experience with endpoint monitoring and fleet management at scale, including remote/distributed environments Strong scripting skills (Python, Bash, PowerShell, or similar) for building automation and tooling Experience managing or building tooling for SaaS licensing and renewals: utilization tracking, right-sizing, renewal pipelines, and vendor coordination Technical leadership experience: you have mentored engineers or support staff and led projects end-to-end without formal authority Proven ability to take ownership: you build the roadmap, do the research, implement the solution, write the documentation, and communicate the rollout Strong prioritization instincts — you can look at a long list of IT initiatives and disti…