Senior Endpoint Security Engineer
You will implement security defaults and endpoint visibility across a global fleet of macOS, Windows, iOS, and Android devices. You will administer Jamf and Microsoft Intune, manage enrollment and patching, enforce compliance baselines, integrate endpoint telemetry with security tools, develop automation, maintain documentation and asset records, provide MDM escalation support, and partner with People Operations on device provisioning and deprovisioning.
Responsibilities
- Administer and improve Jamf and Microsoft Intune environments
- Maintain configuration profiles, compliance policies, application packages, and OS update enforcement
- Build automated enrollment workflows using Apple Business Manager and Windows Autopilot
- Own the patch management program and update SLAs
- Define and enforce device compliance baselines aligned with CIS Benchmarks and SOC 2
- Integrate MDM telemetry with EDR and SIEM tooling
- Implement device trust, Conditional Access, certificate authentication, and network access controls
- Build scripts, automation, and self-service endpoint tooling
- Maintain MDM runbooks, policy documentation, and asset records
- Serve as the MDM escalation point in the IT on-call rotation
- Partner with People Operations on device provisioning and deprovisioning
- Mentor junior IT team members
Requirements
- Experience with OSQuery and CrowdStrike for endpoint visibility and threat detection
- Understanding of Okta Device Trust/FastPass and Entra ID Conditional Access
- 3–6 years of experience with Jamf/Kandji and Microsoft Intune
- Proficiency in Bash, Python, or PowerShell
- Understanding of SCEP and PKCS certificate infrastructure
- Experience with Absolute for Windows persistence
- Strong documentation and communication skills
- Bachelor’s degree in IT, Computer Science, or equivalent practical experience
Benefits
- Competitive compensation and equity packages
- Restricted Stock Units
- Paid time off
- Paid holidays
- Leave of absence programs
- Comprehensive health, dental and vision insurance
- Employer contributions to HSA account
- Paid parental leave
- Paid life insurance
- Short-term and long-term disability insurance
- Professional development and tuition reimbursement
- Mental health and wellness support
- Commuter benefits for parking and transit
- Cell phone stipend
- 401(k) retirement plan with company match up to 4% of salary
- Volunteer time off
- Global travel insurance and emergency assistance
- Daily meals allowance
- Additional location-specific perks and programs