Staff Client Platform Engineer (CPE) (Remote)

About the Company

In the coming decades, our world needs far more critical minerals including copper, lithium, and cobalt, to build electric infrastructure, vehicles, data centers, and electronics. The mining industry is making 10x fewer discoveries per dollar spent on exploration compared to 30 years ago because the easy-to-find, near surface deposits have largely been discovered.

KoBold is the leading scientific mineral exploration, mine development, and technology development company. Our goal is to turn mineral exploration into a repeatable science to discover the minerals the world needs—by integrating artificial intelligence, human intelligence, and new technology. Our multidisciplinary teams of data scientists, engineers, and geologists work together to build data systems, design new sensors, and establish industry-leading workflows to develop and test subsurface predictions on our exploration projects.

Our first discovery, Mingomba, is a high-grade copper deposit in Zambia, found after spending materially less than industry average. We are developing Mingomba with the same technical rigor that we apply to exploration. The Mingomba team brings together mine and processing engineers, geologists, data scientists, software engineers, and community, health & safety, construction, and operations specialists. By combining industry knowledge and cutting edge technology, we are developing Mingomba into a world class project that has safer and more predictable outcomes for ourselves, partners, and communities. It is expected to create thousands of good jobs for generations.

KoBold runs exploration programs in eight countries, all with the potential for another discovery.

KoBold is privately held; investors include institutional asset managers T. Rowe Price and Canada Pension Plan Investments; technology venture capitalists Andreessen Horowitz, Breakthrough Energy Ventures, BOND Capital, Durable Capital, StepStone, and Standard Investments; and strategic natural resources companies BHP and Mitsubishi.

About the Role

KoBold's ~280 geoscientists, data scientists, and engineers work remote-first across North America, Zambia, the DRC, Sweden, and field exploration sites around the world. As we scale, we are moving IT from reactive, break/fix support toward proactive, automated operations that work seamlessly across geographies — including field sites with limited connectivity.

As our Staff Client Platform Engineer, you are the senior-most hands-on engineer for KoBold's client platform: the endpoint fleet (macOS via Jamf, Windows via Intune), the identity layer (Okta, Google Workspace), and the SaaS application portfolio that connects to it. You will build zero-touch provisioning, treat configuration as code, instrument the fleet so we find problems before employees do, and automate the employee lifecycle so new hires are fully productive on day one — whether they sit in Denver or at a drill camp in Zambia.

This is a builder's role with technical leadership attached. You will set technical direction for endpoint and fleet tooling, mentor our global IT support staff, and raise the bar for what world-class IT operations looks like at a fast-moving exploration technology company — while spending most of your time engineering: writing Okta workflows, managing Jamf and Intune policy in Terraform, and scripting away repetitive work.

Responsibilities

Endpoint Platform & Fleet Automation

Design and implement zero-touch provisioning and automated reimaging workflows for macOS (Jamf) and Windows (Intune) endpoints

Apply DevOps principles to IT operations: configuration-as-code (e.g., managing Jamf and Intune policy via Terraform), version-controlled policies, and repeatable processes

Build endpoint monitoring, alerting, and fleet health dashboards to shift IT from reactive to proactive support

Drive device lifecycle management: EoL/EoS tracking, hardware refresh planning, and inventory management across Jamf, Intune, CrowdStrike, and related tooling

Create self-service application deployment and access workflows that reduce helpdesk volume and empower employees

Help build the IT roadmap with the Head of Infrastructure Engineering, setting technical direction for endpoint management and fleet automation across all KoBold offices and field sites in 10+ countries

Identity & Access Engineering

Own Okta administration: SSO integrations, SCIM provisioning, group management, access request workflows, and lifecycle automation

Manage Google Workspace administration, including license management, security settings, and break-glass super-admin governance

Build automation for minimal-touch employee onboarding and offboarding — new hires fully provisioned on day one, departures cleanly deprovisioned

Support AI tooling rollout (Claude Desktop, Claude Code, and related tools) across the endpoint fleet, including deployment, configuration, and employee enablement

SaaS Lifecycle & License Automation

Run the software procurement lifecycle — new purchases, renewals, expansions, and cancellations — and build the renewal pipeline tooling so user access is never disrupted by a lapsed license

Instrument license utilization across the SaaS portfolio: track usage, right-size seat counts, consolidate redundant tools, and support vendor pricing negotiations with data

Onboard new SaaS applications with proper Okta integration (SSO, SCIM) before launch, and manage decommissioning of deprecated tools

Partner with finance on software budget tracking, invoice approvals, and AFE submissions; give legal and finance proactive visibility into the renewal pipeline

Technical Leadership & Enablement

Provide technical mentorship and coaching to KoBold's global IT support staff; set the standard for automation-first problem solving

Develop and maintain IT documentation and training for new hires and ongoing employee enablement

Provide helpdesk backup on high-volume days, modeling the standard of responsiveness and quality you expect from the platform you build

Cross-Functional Collaboration

Collaborate with infrastructure engineering and security on observability, access controls, endpoint security posture, incident response, and connectivity standards for remote field sites

Partner across the company on specification, vendor selection, and change management for new software requests

Learn about mineral exploration by working closely with exploration teams, including time in the field at remote operations

Qualifications

7+ years in client platform engineering, IT engineering, or similar roles combining hands-on technical depth with operational ownership

Deep experience with MDM platforms, particularly Jamf (macOS) and Microsoft Intune (Windows): policy configuration, automated enrollment, compliance enforcement, and ideally infrastructure-as-code approaches (e.g., Terraform)

Strong experience with identity and access management (Okta strongly preferred): SSO integration, SCIM provisioning, access request workflows, and lifecycle automation

Hands-on experience building zero-touch provisioning, automated reimaging, and self-service deployment workflows at scale

Experience with endpoint monitoring and fleet management at scale, including remote/distributed environments

Strong scripting skills (Python, Bash, PowerShell, or similar) for building automation and tooling

Experience managing or building tooling for SaaS licensing and renewals: utilization tracking, right-sizing, renewal pipelines, and vendor coordination

Technical leadership experience: you have mentored engineers or support staff and led projects end-to-end without formal authority

Proven ability to take ownership: you build the roadmap, do the research, implement the solution, write the documentation, and communicate the rollout

Strong prioritization instincts — you can look at a long list of IT initiatives and distinguish