# Systems Engineer, VDI Platform

**Company**: CoreWeave
**Location**: Livingston, NJ / New York, NY / Sunnyvale, CA / San Francisco, CA / Bellevue, WA
**Experience**: senior
**Job type**: full-time
**Salary**: $207,000 to $275,000
**Category**: IT
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/coreweave/jobs/4695230006?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_3552ee6c-050

## Description

CoreWeave is seeking a Systems Engineer to lead the expansion of its cloud-based VDI (Virtual Desktop Infrastructure) platform. The engineer will own the design, implementation, and maintenance of the platform, including cloud infrastructure, OS lifecycle, security, and cost governance.

**Responsibilities:**

- Design and deliver the end-to-end VDI platform architecture, covering cloud infrastructure, access controls, OS lifecycle, security posture, and network topology.

- Integrate cloud infrastructure into CoreWeave's Teleport cluster, including IAM node joining, RBAC role definitions, and access policies.

- Configure Okta SAML/OIDC SSO with MFA enforcement, session policy, and access review workflows.

- Build and maintain the audit logging pipeline, legal hold and forensic snapshot-on-demand workflows, and compliance-aligned session activity retention policies.

- Implement cost governance, including instance tagging, cost center chargeback attribution, and self-service portals for instance lifecycle management.

- Own the Ubuntu LTS and Windows 11 base image pipelines, including code-defined builds, automated regression testing, and versioned release promotion.

- Write and maintain Chef cookbooks for post-provision configuration, including user setup, mounts, and toolchain.

- Lead end-to-end integration testing and platform security review prior to launch.

- Sustain steady-state operations, including monthly patch releases, config management updates, and incident response.

**Requirements:**

- Demonstrated experience operating and automating cloud infrastructure on AWS, Azure, or GCP.

- Proficiency with Linux system administration (Ubuntu preferred) and Windows 11 endpoint management.

- Hands-on experience with infrastructure-as-code and configuration management tooling (Terraform, Ansible, Chef, Packer, or equivalent).

- Experience integrating enterprise identity and access management solutions (Teleport, Okta, or comparable SSO/PAM/ZTNA tooling).

- Experience building and operating OS image pipelines.

- Familiarity with endpoint and network security agent deployment (CrowdStrike, Netskope, or similar).

- Strong scripting and automation skills (Python, Bash, or equivalent).

**Preferred Qualifications:**

- Experience with Windows 11 image management, MDM/Intune enrollment, and patch management tooling.

- Familiarity with PCoIP/HP Anyware or other streaming display protocols in a VDI context.

- Experience with cost attribution, tagging strategy, and chargeback reporting in multi-tenant cloud environments.

- Exposure to BlastShield or other zero-trust network access (ZTNA) solutions.

**What We Offer:**

- Base salary range: $207,000 to $275,000.

- Comprehensive benefits program, including medical, dental, and vision insurance, 100% paid for by CoreWeave.

- Company-paid Life Insurance, voluntary supplemental life insurance, short and long-term disability insurance, Flexible Spending Account, Health Savings Account, tuition reimbursement, and employee stock purchase program.

- Mental wellness benefits, family-forming support, paid parental leave, flexible childcare support, 401(k) with a generous employer match, and flexible PTO.

## Skills

### Required
- cloud infrastructure
- Linux system administration
- Windows 11 endpoint management
- infrastructure-as-code
- configuration management
- enterprise identity and access management
- OS image pipelines
- endpoint and network security
- scripting and automation

### Nice to have
- Windows 11 image management
- MDM/Intune enrollment
- PCoIP/HP Anyware
- cost attribution
- tagging strategy
- chargeback reporting
- BlastShield
- zero-trust network access

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/coreweave/jobs/4695230006?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)