IT Engineer II, Client Platform Engineer; CPE

IT Engineer II, Client Platform Engineer (CPE)

Passion, excitement & global collaboration are all core to what it means to be a Fly Mate. At Flywire, we're on a mission to deliver the world's most important and complex payments. We use our Flywire Advantage - the combination of our next-gen payments platform, proprietary payment network and vertical specific software, to help our clients get paid, and help their customers pay with ease - no matter where they are in the world.

Flywire is a global payments enablement and software company, founded a decade ago to solve high-stakes, high-value payments in education, using modern technology. Today, we've digitized payments for more than 3,300+ global clients across education, healthcare, travel & B2B, covering more than 240 countries and territories and supporting over 140 currencies. And, we're just getting started!

With over 1000+ global Fly Mates, representing more than 40 nationalities, and in 14 offices world-wide, we're looking for Fly Mates to join the next stage of our journey as we continue to grow.

At Flywire, we don't do traditional, old-school IT support. We approach endpoint management much closer to Platform and Site Reliability Engineering (SRE). We manage a global fleet of devices the way a cloud team manages infrastructure: as code.

As a Client Platform Engineer based in Valencia, you will treat the entire device lifecycle—from provisioning and compliance to patching and offboarding—as an end-to-end automated system. Reporting to the IT Client Platform Engineering Manager in Spain, you will collaborate closely with our team lead in the US, enjoying full autonomy to build quality, maintainable code and shape our endpoint strategy.

How We Think (Our Engineering Culture)

• Systems Thinking:
  We analyze the full workflow before automating to anticipate failures.
• Declarative over Imperative:
  We define the desired end state and let modern tools converge the device toward it, instead of running messy, one-off scripts.
• Idempotency & State:
  Our automation runs repeatedly and safely, managing the actual state of the device at all times.
• Cattle, Not Pets:
  When a machine drifts from our baseline, we wipe and redeploy from a code-defined source of truth rather than hand-nursing it.
• Automation-First & Self-Service:
  If we have to do it twice, we script it. We build low-friction paths so engineers can focus on the platform.

Key Responsibilities

• Automate Everything:
  Implement provisioning, configuration, and patching workflows across the full device fleet (~90% macOS, ~10% Windows).
• Code & Scripting:
  Write clean, reusable, and well-tested scripts to power our endpoint management platform.
• MDM & Compliance:
  Enforce security baselines, track real-time fleet performance, and investigate compliance anomalies using modern MDM tools.
• API Integrations:
  Connect platforms like Okta, Kandji/Iru, FleetDM, and Workspace ONE via APIs to streamline identity, access, and self-service IT workflows.
• Infrastructure as Code:
  Build and maintain idempotent automation pipelines for deployment and monitoring.

Our Stack

• Device Management:
  Kandji/Iru, FleetDM, Workspace ONE
• Identity & Access:
  Okta
• IaC & Automation:
  Terraform, Ansible
• Scripting:
  Python, Bash, Power Shell
• Cloud & Version Control: AWS, Git Lab

What You'll Bring (Qualifications)

• Experience:
  
  3+ years of experience in client platform, endpoint engineering, or a highly technical IT infrastructure role.
• OS Deep Dive:
  Deep knowledge of macOS system internals and preference management, plus solid hands-on experience securing Windows endpoints.
• Tooling & Scripting:
  Proven experience with MDM platforms and solid programming skills in Python, Bash, or Power Shell.
• Dev Ops Mindset:
  Comfortable working with Git/Git Lab using code-review and branch-based workflows.
• Nice-to-Haves:
  Exposure to Terraform, administering SaaS apps (Okta, Google Workspace, Jira), or AWS familiarity.

We

Offer:

• Employee Stock Purchase Plan (ESPP)
• Work with brilliant people that will keep you on your toes, learn more about their journeys by checking out #Inside Flywire on social media
• Dynamic & Global Team (we have been…