Staff Client Platform Engineer (CPE) (Remote)

About the Company

The mining industry has steadily become worse at finding new ore deposits, requiring >10X more capital to make discoveries compared to 30 years ago. The easy-to-find, near-surface deposits have largely been found, and the industry has chronically under-invested in new exploration technology, relying on the manual techniques of yesteryear – even as demand accelerates for copper, lithium, and other metals to build electric vehicles, renewable energy, and data centers.

 

KoBold builds AI models for mineral exploration and deploys those models—alongside our novel sensors—to guide decisions on KoBold-owned-and-operated exploration programs. In the six years since founding, KoBold has become by far both the largest independent mineral exploration company and the largest exploration technology developer. Our data scientists and software engineers, who come from leading technology companies, jointly lead exploration programs with our renowned exploration geologists.

 

KoBold has proven its first discovery with materially less capital than the industry average and found one of the best copper deposits ever discovered: the copper is far more concentrated than the global average of copper mines, and this asset alone is expected to generate meaningful revenue for decades. KoBold has a portfolio of more than 60 other projects, each of which has the potential for another high-quality discovery.

 

KoBold is privately held; investors include institutional asset managers T. Rowe Price and Canada Pension Plan Investments; technology venture capitalists Andreessen Horowitz, Breakthrough Energy Ventures, BOND Capital, Durable Capital, StepStone, and Standard Investments; and natural resources companies Equinor, BHP, and Mitsubishi.

About the Role

KoBold's ~280 geoscientists, data scientists, and engineers work remote-first across North America, Zambia, the DRC, Sweden, and field exploration sites around the world. As we scale, we are moving IT from reactive, break/fix support toward proactive, automated operations that work seamlessly across geographies — including field sites with limited connectivity.

 

As our Staff Client Platform Engineer, you are the senior-most hands-on engineer for KoBold's client platform: the endpoint fleet (macOS via Jamf, Windows via Intune), the identity layer (Okta, Google Workspace), and the SaaS application portfolio that connects to it. You will build zero-touch provisioning, treat configuration as code, instrument the fleet so we find problems before employees do, and automate the employee lifecycle so new hires are fully productive on day one — whether they sit in Denver or at a drill camp in Zambia.

 

This is a builder's role with technical leadership attached. You will set technical direction for endpoint and fleet tooling, mentor our global IT support staff, and raise the bar for what world-class IT operations looks like at a fast-moving exploration technology company — while spending most of your time engineering: writing Okta workflows, managing Jamf and Intune policy in Terraform, and scripting away repetitive work.

Responsibilities

Endpoint Platform & Fleet Automation

 

• Design and implement zero-touch provisioning and automated reimaging workflows for macOS (Jamf) and Windows (Intune) endpoints
• Apply DevOps principles to IT operations: configuration-as-code (e.g., managing Jamf and Intune policy via Terraform), version-controlled policies, and repeatable processes
• Build endpoint monitoring, alerting, and fleet health dashboards to shift IT from reactive to proactive support
• Drive device lifecycle management: EoL/EoS tracking, hardware refresh planning, and inventory management across Jamf, Intune, CrowdStrike, and related tooling
• Create self-service application deployment and access workflows that reduce helpdesk volume and empower employees
• Help build the IT roadmap with the Head of Infrastructure Engineering, setting technical direction for endpoint management and fleet automation across all KoBold offices and field sites in 10+ countries

 

Identity & Access Engineering

 

• Own Okta administration: SSO integrations, SCIM provisioning, group management, access request workflows, and lifecycle automation
• Manage Google Workspace administration, including license management, security settings, and break-glass super-admin governance
• Build automation for minimal-touch employee onboarding and offboarding — new hires fully provisioned on day one, departures cleanly deprovisioned
• Support AI tooling rollout (Claude Desktop, Claude Code, and related tools) across the endpoint fleet, including deployment, configuration, and employee enablement

 

SaaS Lifecycle & License Automation

 

• Run the software procurement lifecycle — new purchases, renewals, expansions, and cancellations — and build the renewal pipeline tooling so user access is never disrupted by a lapsed license
• Instrument license utilization across the SaaS portfolio: track usage, right-size seat counts, consolidate redundant tools, and support vendor pricing negotiations with data
• Onboard new SaaS applications with proper Okta integration (SSO, SCIM) before launch, and manage decommissioning of deprecated tools
• Partner with finance on software budget tracking, invoice approvals, and AFE submissions; give legal and finance proactive visibility into the renewal pipeline

 

Technical Leadership & Enablement

 

• Provide technical mentorship and coaching to KoBold's global IT support staff; set the standard for automation-first problem solving
• Develop and maintain IT documentation and training for new hires and ongoing employee enablement
• Provide helpdesk backup on high-volume days, modeling the standard of responsiveness and quality you expect from the platform you build

 

Cross-Functional Collaboration

 

• Collaborate with infrastructure engineering and security on observability, access controls, endpoint security posture, incident response, and connectivity standards for remote field sites
• Partner across the company on specification, vendor selection, and change management for new software requests
• Learn about mineral exploration by working closely with exploration teams, including time in the field at remote operations

Qualifications

• 7+ years in client platform engineering, IT engineering, or similar roles combining hands-on technical depth with operational ownership
• Deep experience with MDM platforms, particularly Jamf (macOS) and Microsoft Intune (Windows): policy configuration, automated enrollment, compliance enforcement, and ideally infrastructure-as-code approaches (e.g., Terraform)
• Strong experience with identity and access management (Okta strongly preferred): SSO integration, SCIM provisioning, access request workflows, and lifecycle automation
• Hands-on experience building zero-touch provisioning, automated reimaging, and self-service deployment workflows at scale
• Experience with endpoint monitoring and fleet management at scale, including remote/distributed environments
• Strong scripting skills (Python, Bash, PowerShell, or similar) for building automation and tooling
• Experience managing or building tooling for SaaS licensing and renewals: utilization tracking, right-sizing, renewal pipelines, and vendor coordination
• Technical leadership experience: you have mentored engineers or support staff and led projects end-to-end without formal authority
• Proven ability to take ownership: you build the roadmap, do the research, implement the solution, write the documentation, and communicate the rollout
• Strong prioritization instincts — you can look at a long list of IT initiatives and distinguish what actually matters from nice-to-haves, and explain why
• Excellent communication and collaboration skills — comfortable working across disciplines with engineers, scientists, legal, finance, and leadership in a remote-first environment
• Intellectually curious; eager to learn about the substance of mineral exploration and exploration technology
• Comfort with ambiguity and a dynamic work environment; eagerness to take on an evolving range of responsibilities at a fast-growing company
• Experience supporting global teams across multiple time zones is a strong plus
• Familiarity with Google Workspace administration, CrowdStrike, Datadog, or the MacAdmins open-source ecosystem (osquery, Santa, Nudge, AutoPkg) is a plus

What to Expect

Joining KoBold means getting the opportunity for hands-on exposure to our exploration projects around the world. All employees are expected to travel to project sites, with a minimum of one week per year. Field-facing and technical roles spend significantly more time in the field.

 

KoBold Metals is an equal opportunity workplace and an affirmative action employer. We are committed to equal employment opportunity for people of any race, color, ancestry, religion, sex, gender identity, sexual orientation, marital status, national origin, age, citizenship, disability, or veteran status.

 

This position is full-time, exempt.

 

The US base salary range for this full-time exempt position is $150,000 – $180,000 USD, plus equity and benefits including 401k matching.

 

Location: KoBold is a remote-first workplace. We are open to candidates currently residing anywhere in the United States or Canada. CST or EST time zone preferred. All candidates must be legally authorized to work in the United States or Canada.