Systems Engineer (VDI Platform)

Join CoreWeave, a leading cloud provider specializing in GPU-accelerated workloads. As a Systems Engineer for our Next Gen VDI platform, you will design and build a cloud-based VDI offering, manage the OS lifecycle, and ensure a secure and reliable environment for our employees. This hands-on engineering role requires expertise in cloud infrastructure, OS management, and security protocols.

• Design and deliver the end-to-end VDI platform architecture, covering cloud infrastructure, access controls, OS lifecycle, security posture, and network topology.
• Integrate cloud infrastructure into CoreWeave’s Teleport cluster, configure Okta SAML/OIDC SSO with MFA enforcement, and build and maintain the audit logging pipeline.
• Own the Ubuntu LTS and Windows 11 base image pipelines, write and maintain Chef cookbooks for post-provision configuration, and lead end-to-end integration testing.
• Experience with observability and logging pipelines—log forwarding, schema definition, retention policy, and SIEM integration
• Strong scripting and automation skills (Python, Bash, or equivalent); comfort building internal tooling and self-service workflows
• Proficiency with Linux system administration (Ubuntu preferred) and Windows 11 endpoint management, including shell/PowerShell scripting, service configuration, package management, and log analysis
• Familiarity with endpoint and network security agent deployment (CrowdStrike, Netskope, or similar), including bake-in to base images and policy configuration
• Demonstrated experience operating and automating cloud infrastructure on AWS, Azure, or GCP—compute, networking, storage, IAM, and cost tooling
• Hands-on experience with infrastructure-as-code and configuration management tooling (Terraform, Ansible, Chef, Packer, or equivalent) in a production environment
• Experience building and operating OS image pipelines: code-driven builds, automated regression testing, versioned release promotion, staged rollout, and rollback
• Experience integrating enterprise identity and access management solutions—Teleport, Okta, or comparable SSO/PAM/ZTNA tooling—including RBAC design and access policy definition
• Experience with Windows 11 image management, MDM/Intune enrollment, and patch management tooling
• Familiarity with PCoIP/HP Anyware or other streaming display protocols in a VDI context
• Experience with cost attribution, tagging strategy, and chargeback reporting in multi-tenant cloud environments
• Exposure to BlastShield or other zero-trust network access (ZTNA) solutions
• Experience with legal hold, forensic imaging, or compliance workflows in a cloud environment