Description
CoreWeave is seeking a Systems Engineer to lead the expansion of its cloud-based VDI (Virtual Desktop Infrastructure) platform. The engineer will own the design, implementation, and maintenance of the platform, including cloud infrastructure, OS lifecycle, security, and cost governance.
Responsibilities:
- Design and deliver the end-to-end VDI platform architecture, covering cloud infrastructure, access controls, OS lifecycle, security posture, and network topology.
- Integrate cloud infrastructure into CoreWeave's Teleport cluster, including IAM node joining, RBAC role definitions, and access policies.
- Configure Okta SAML/OIDC SSO with MFA enforcement, session policy, and access review workflows.
- Build and maintain the audit logging pipeline, legal hold and forensic snapshot-on-demand workflows, and compliance-aligned session activity retention policies.
- Implement cost governance, including instance tagging, cost center chargeback attribution, and self-service portals for instance lifecycle management.
- Own the Ubuntu LTS and Windows 11 base image pipelines, including code-defined builds, automated regression testing, and versioned release promotion.
- Write and maintain Chef cookbooks for post-provision configuration, including user setup, mounts, and toolchain.
- Lead end-to-end integration testing and platform security review prior to launch.
- Sustain steady-state operations, including monthly patch releases, config management updates, and incident response.
Requirements:
- Demonstrated experience operating and automating cloud infrastructure on AWS, Azure, or GCP.
- Proficiency with Linux system administration (Ubuntu preferred) and Windows 11 endpoint management.
- Hands-on experience with infrastructure-as-code and configuration management tooling (Terraform, Ansible, Chef, Packer, or equivalent).
- Experience integrating enterprise identity and access management solutions (Teleport, Okta, or comparable SSO/PAM/ZTNA tooling).
- Experience building and operating OS image pipelines.
- Familiarity with endpoint and network security agent deployment (CrowdStrike, Netskope, or similar).
- Strong scripting and automation skills (Python, Bash, or equivalent).
Preferred Qualifications:
- Experience with Windows 11 image management, MDM/Intune enrollment, and patch management tooling.
- Familiarity with PCoIP/HP Anyware or other streaming display protocols in a VDI context.
- Experience with cost attribution, tagging strategy, and chargeback reporting in multi-tenant cloud environments.
- Exposure to BlastShield or other zero-trust network access (ZTNA) solutions.
What We Offer:
- Base salary range: $207,000 to $275,000.
- Comprehensive benefits program, including medical, dental, and vision insurance, 100% paid for by CoreWeave.
- Company-paid Life Insurance, voluntary supplemental life insurance, short and long-term disability insurance, Flexible Spending Account, Health Savings Account, tuition reimbursement, and employee stock purchase program.
- Mental wellness benefits, family-forming support, paid parental leave, flexible childcare support, 401(k) with a generous employer match, and flexible PTO.
This listing is enriched and indexed by YubHub. To apply, use the employer's original posting:
https://job-boards.greenhouse.io/coreweave/jobs/4695230006