As a Client Platform Engineer based in Valencia, you will treat the entire device lifecycle—from provisioning and compliance to patching and offboarding—as an end-to-end automated system. Reporting to the IT Client Platform Engineering Manager in Spain, you will collaborate closely with our team lead in the US, enjoying full autonomy to build quality, maintainable code and shape our global endpoint strategy.
🧠 How We Think (Our Engineering Culture)
Systems Thinking: We analyze the full workflow before automating to anticipate failures.
Declarative over Imperative: We define the desired end state and let modern tools converge the device toward it, instead of running messy, one-off scripts.
Idempotency & State: Our automation runs repeatedly and safely, managing the actual state of the device at all times.
Cattle, Not Pets: When a machine drifts from our baseline, we wipe and redeploy from a code-defined source of truth rather than hand-nursing it.
Automation-First & Self-Service: If we have to do it twice, we script it. We build low-friction paths so engineers can focus on the platform.
🎯 Key Responsibilities
Automate Everything: Implement provisioning, configuration, and patching workflows across the full device fleet (~90% macOS, ~10% Windows).
Code & Scripting: Write clean, reusable, and well-tested scripts (Python, Bash) to power our endpoint management platform.
MDM & Compliance: Enforce security baselines, track real-time fleet performance, and investigate compliance anomalies using modern MDM tooling.
API Integrations: Connect platforms like Okta, Iru, and FleetDM via APIs to streamline identity, access, and self-service IT workflows.
Infrastructure as Code: Build and maintain idempotent automation pipelines for deployment, fleet monitoring, and state enforcement.
🛠️ Our Stack
Device Management: Iru (formerly Kandji)
Observability (o11y): FleetDM
Identity & Access: Okta
IaC & Automation: Terraform, Ansible
Scripting: Python, Bash, PowerShell
Cloud & Version Control: AWS, GitLab
Qualifications
✨ What You’ll Bring (Qualifications)
Experience: 3+ years of experience in client platform engineering, endpoint engineering, or a highly technical IT infrastructure/SRE role.
OS Deep Dive: Deep knowledge of macOS system internals and preference management, plus solid hands-on experience securing Windows endpoints.
Tooling & Scripting: Proven track record with MDM platforms and solid programming skills in Python, Bash, or PowerShell.
DevOps Mindset: Comfortable working with Git/GitLab using code-review and branch-based workflows.
Nice-to-Haves: Exposure to Terraform, administering core SaaS apps (Okta, Google Workspace, Jira), or AWS cloud infrastructure familiarity.
What We Offer
Competitive compensation
Employee Stock Purchase Plan (ESPP)
Competitive time off
Work with brilliant people globally Learn more about their journeys by checking out #InsideFlywire on social media
Wellbeing Programs (Mental Health, Wellness, Yoga/Pilates/HIIT Classes) with Global FlyMates
Be a meaningful part in our success - every FlyMate makes an impact
Great Talent & Development Programs (Managers Taking Flight – for new or aspiring managers, OneFlywire Career Mobility)
Submit today and get started!
We are excited to get to know you! Throughout our process you can expect to meet with different FlyMates including the Hiring Manager, Peers on the team, the VP of the department, and a skills assessment. Your Talent Acquisition Partner will walk you through the steps and be your “go-to” person for any questions.
Flywire is an equal opportunity employer and follows a policy of administering all employment decisions and personnel actions without regard to race, color, religion, sex, pregnancy, gender identity, national origin, age, ancestry, physical or mental disability, sexual orientation, genetic disposition or carrier status, veteran status, or any other category protected under applicable national, federal, state or local law.
