Staff Client Platform Engineer (CPE)

About the Company

In the coming decades, our world needs far more critical minerals including copper, lithium, and cobalt, to build electric infrastructure, vehicles, data centers, and electronics. The mining industry is making 10x fewer discoveries per dollar spent on exploration compared to 30 years ago because the easy-to-find, near surface deposits have largely been discovered.

KoBold is the leading scientific mineral exploration, mine development, and technology development company. Our goal is to turn mineral exploration into a repeatable science to discover the minerals the world needs—by integrating artificial intelligence, human intelligence, and new technology. Our multidisciplinary teams of data scientists, engineers, and geologists work together to build data systems, design new sensors, and establish industry-leading workflows to develop and test subsurface predictions on our exploration projects.

Our first discovery, Mingomba, is a high-grade copper deposit in Zambia, found after spending materially less than industry average. We are developing Mingomba with the same technical rigor that we apply to exploration. The Mingomba team brings together mine and processing engineers, geologists, data scientists, software engineers, and community, health & safety, construction, and operations specialists. By combining industry knowledge and cutting edge technology, we are developing Mingomba into a world class project that has safer and more predictable outcomes for ourselves, partners, and communities. It is expected to create thousands of good jobs for generations.

KoBold runs exploration programs in eight countries, all with the potential for another discovery.

KoBold is privately held; investors include institutional asset managers T. Rowe Price and Canada Pension Plan Investments; technology venture capitalists Andreessen Horowitz, Breakthrough Energy Ventures, BOND Capital, Durable Capital, StepStone, and Standard Investments; and strategic natural resources companies BHP and Mitsubishi.

About the Role

KoBold's ~280 geoscientists, data scientists, and engineers work remote-first across North America, Zambia, the DRC, Sweden, and field exploration sites around the world. As we scale, we are moving IT from reactive, break/fix support toward proactive, automated operations that work seamlessly across geographies — including field sites with limited connectivity.

As our Staff Client Platform Engineer, you are the senior-most hands-on engineer for KoBold's client platform: the endpoint fleet (macOS via Jamf, Windows via Intune), the identity layer (Okta, Google Workspace), and the SaaS application portfolio that connects to it. You will build zero-touch provisioning, treat configuration as code, instrument the fleet so we find problems before employees do, and automate the employee lifecycle so new hires are fully productive on day one — whether they sit in Denver or at a drill camp in Zambia.

This is a builder's role with technical leadership attached. You will set technical direction for endpoint and fleet tooling, mentor our global IT support staff, and raise the bar for what world-class IT operations looks like at a fast-moving exploration technology company — while spending most of your time engineering: writing Okta workflows, managing Jamf and Intune policy in Terraform, and scripting away repetitive work.

Responsibilities

Endpoint Platform & Fleet Automation

• Design and implement zero-touch provisioning and automated reimaging workflows for macOS (Jamf) and Windows (Intune) endpoints

• Apply DevOps principles to IT operations: configuration-as-code (e.g., managing Jamf and Intune policy via Terraform), version-controlled policies, and repeatable processes

• Build endpoint monitoring, alerting, and fleet health dashboards to shift IT from reactive to proactive support

• Drive device lifecycle management: EoL/EoS tracking, hardware refresh planning, and inventory management across Jamf, Intune, CrowdStrike, and related tooling

• Create self-service application deployment and access workflows that reduce helpdesk volume and empower employees

• Help build the IT roadmap with the Head of Infrastructure Engineering, setting technical direction for endpoint management and fleet automation across all KoBold offices and field sites in 10+ countries

Identity & Access Engineering

• Own Okta administration: SSO integrations, SCIM provisioning, group management, access request workflows, and lifecycle automation

• Manage Google Workspace administration, including license management, security settings, and break-glass super-admin governance

• Build automation for minimal-touch employee onboarding and offboarding — new hires fully provisioned on day one, departures cleanly deprovisioned

• Support AI tooling rollout (Claude Desktop, Claude Code, and related tools) across the endpoint fleet, including deployment, configuration, and employee enablement

SaaS Lifecycle & License Automation

• Run the software procurement lifecycle — new purchases, renewals, expansions, and cancellations — and build the renewal pipeline tooling so user access is never disrupted by a lapsed license

• Instrument license utilization across the SaaS portfolio: track usage, right-size seat counts, consolidate redundant tools, and support vendor pricing negotiations with data

• Onboard new SaaS applications with proper Okta integration (SSO, SCIM) before launch, and manage decommissioning of deprecated tools

• Partner with finance on software budget tracking, invoice approvals, and AFE submissions; give legal and finance proactive visibility into the renewal pipeline

Technical Leadership & Enablement

• Provide technical mentorship and coaching to KoBold's global IT support staff; set the standard for automation-first problem solving

• Develop and maintain IT documentation and training for new hires and ongoing employee enablement

• Provide helpdesk backup on high-volume days, modeling the standard of responsiveness and quality you expect from the platform you build

Cross-Functional Collaboration

• Collaborate with infrastructure engineering and security on observability, access controls, endpoint security posture, incident response, and connectivity standards for remote field sites

• Partner across the company on specification, vendor selection, and change management for new software requests

• Learn about mineral exploration by working closely with exploration teams, including time in the field at remote operations

Qualifications

• 7+ years in client platform engineering, IT engineering, or similar roles combining hands-on technical depth with operational ownership

• Deep experience with MDM platforms, particularly Jamf (macOS) and Microsoft Intune (Windows): policy configuration, automated enrollment, compliance enforcement, and ideally infrastructure-as-code approaches (e.g., Terraform)

• Strong experience with identity and access management (Okta strongly preferred): SSO integration, SCIM provisioning, access request workflows, and lifecycle automation

• Hands-on experience building zero-touch provisioning, automated reimaging, and self-service deployment workflows at scale

• Experience with endpoint monitoring and fleet management at scale, including remote/distributed environments

• Strong scripting skills (Python, Bash, PowerShell, or similar) for building automation and tooling

• Experience managing or building tooling for SaaS licensing and renewals: utilization tracking, right-sizing, renewal pipelines, and vendor coordination

• Technical leadership experience: you have mentored engineers or support staff and led projects end-to-end without formal authority

• Proven ability to take ownership: you build the roadmap, do the research, implement the solution, write the documentation, and communicate the rollout

• Strong prioritization instincts — you can look at a long list of IT initiatives and distinguish what actually matters from nice-to-haves, and explain why

• Excellent communication and collaboration skills — comfortable working across disciplines with engineers, scientists, legal, finance, and leadership in a remote-first environment

• Intellectually curious; eager to learn about the substance of mineral exploration and exploration technology

• Comfort with ambiguity and a dynamic work environment; eagerness to take on an evolving range of responsibilities at a fast-growing company

• Experience supporting global teams across multiple time zones is a strong plus

• Familiarity with Google Workspace administration, CrowdStrike, Datadog, or the MacAdmins open-source ecosystem (osquery, Santa, Nudge, AutoPkg) is a plus

What to Expect

Joining KoBold means getting the opportunity for hands-on exposure to our exploration projects around the world. All employees are expected to travel to project sites, with a minimum of one week per year. Field-facing and technical roles spend significantly more time in the field.

KoBold Metals is an equal opportunity workplace and an affirmative action employer. We are committed to equal employment opportunity for people of any race, color, ancestry, religion, sex, gender identity, sexual orientation, marital status, national origin, age, citizenship, disability, or veteran status.

This position is full-time, exempt.

The US base salary range for this full-time exempt position is $150,000 – $180,000 USD, plus equity and benefits including 401k matching.

Location: KoBold is a remote-first workplace. We are open to candidates currently residing anywhere in the United States or Canada. CST or EST time zone preferred. All candidates must be legally authorized to work in the United States or Canada.