Endpoint Engineer, IT

Basic Qualifications

• 8+ years of experience building and operating secure IT or endpoint systems in complex environments.
• Experience managing a large fleet of macOS devices through a modern MDM platform.
• Experience managing endpoint configuration through scripted deployments, Git-based workflows, or a full GitOps model.
• Deep knowledge of macOS internals, enterprise deployment, security controls, and troubleshooting.
• Experience designing and operating zero-touch Mac provisioning, patching, and software-distribution workflows.
• Experience using device health and security signals to evaluate endpoint compliance.
• Experience successfully delivering complex technical projects from conception through production.
• Strong ability to solve ambiguous problems involving multiple teams and stakeholders.
• Ability to communicate technical concepts clearly to technical and nontechnical audiences.
• A product-engineering mindset toward IT systems, including testing, observability, reliability, and controlled change management.
• A consistent practice of creating clear technical documentation, architecture diagrams, runbooks, and operational procedures.
• Ability to work from either our New York or San Francisco office.

Preferred Qualifications

• Fleet: Experience deploying, operating, or contributing to Fleet, including its MDM, osquery, GitOps, software-management, and vulnerability-management capabilities.
• MDM Migration: Experience leading a production MDM migration, particularly in an environment using Apple Business Manager and Automated Device Enrollment.
• Iru: Experience managing macOS devices with Iru, formerly Kandji.
• Santa and Rudolph: Experience operating Santa at scale, including rule management, binary authorization, event telemetry, and a Rudolph synchronization service.
• Zero Trust: Experience designing device-trust and continuous-posture-evaluation systems that integrate with identity providers, conditional access, or other Zero Trust controls.
• MDM as a Service: Experience operating an MDM or device-management platform as a production service rather than only administering a SaaS console.
• Progressive Delivery: Experience building automated endpoint rollout systems with staging, canary groups, rollback capabilities, and promotion decisions based on telemetry.
• Open-Source Tooling: Experience deploying, operating, or contributing to open-source macOS endpoint-management or security tools.
• Infrastructure as Code: Experience managing endpoint or cloud infrastructure through Terraform or another infrastructure-as-code framework.
• Cloud Infrastructure: Experience operating AWS services such as Lambda, API Gateway, DynamoDB, containers, managed databases, and monitoring systems.
• Endpoint Development: Proficiency in Swift or Go for building macOS endpoint tools, agents, or supporting services.
• AI-Assisted Operations: Experience using LLMs to automate operational work or a strong interest in applying them to endpoint engineering.

Technical Skills

• Python and shell scripting.
• macOS internals, including launchd, configuration profiles, Transparency, Consent, and Control (TCC), system extensions, Endpoint Security, FileVault, Secure Token, and bootstrap tokens.
• Apple Business Manager, Automated Device Enrollment, and Apple’s MDM and Declarative Device Management frameworks.
• Modern Apple MDM platforms, particularly Iru, Fleet, Jamf, or equivalent.
• Santa binary authorization and Rudolph synchronization infrastructure.
• Fleet-scale querying and osquery.
• Git, pull-request workflows, GitOps, and CI/CD for endpoint configuration.
• Terraform and infrastructure as code.
• Public-cloud fundamentals, including serverless infrastructure, containers, managed databases, and monitoring.
• Device lifecycle automation, including zero-touch enrollment, patching, software distribution, and secure deprovisioning.
• Endpoint security, Zero Trust, device trust, continuous posture evaluation, compliance, and automated remediation.

Logistics