Staff IT Engineer
Leads the technical strategy and hands-on transformation of enterprise device infrastructure toward GitOps, DevOps, and responsible AI-enabled operations. Requires 7+ years of endpoint-management experience, strong automation skills, and deep endpoint security expertise.
About the job
Responsibilities
- Own the technical direction and roadmap for Device Infrastructure Services supporting approximately 2,000 endpoints.
- Lead the transition from legacy device management to a DevOps/GitOps operating model using configuration as code, version control, code review, and CI/CD pipelines.
- Lead responsible adoption of agentic AI for device operations, including guardrails for autonomous actions and human checkpoints.
- Serve as the final escalation point for severe endpoint incidents, diagnosing macOS and Windows devices at the machine level.
- Build device health metrics and remediation standards for security, performance, and employee experience.
- Partner with IT, Security, and product teams to build custom solutions and deliver initiatives.
- Assess and pilot tooling such as MDM platforms and patch management systems; lead build-versus-buy decisions.
- Advise product teams on enterprise device deployment and lead Customer Zero initiatives.
- Support safe deployment of major operating system updates across the organization.
- Coach and mentor engineers while leading technical change.
Requirements
- 7+ years of IT and enterprise endpoint management experience, including 2+ years at a senior or staff individual-contributor level.
- Experience building and managing endpoints using GitOps practices.
- Broad enterprise endpoint-management knowledge and deep operating-system-level expertise.
- Practical experience using AI tools to accelerate IT operations, with sound judgment regarding risks.
- Ability to define and execute technical roadmaps while balancing long-term strategy and near-term delivery.
- Strong scripting and infrastructure-as-code skills, including Bash, Python, and Terraform.
- Experience writing production-quality automation and reviewing code.
- Deep knowledge of endpoint security fundamentals, including encryption, patch and vulnerability management, EDR, least-privilege enforcement, and compliance frameworks such as SOC 2 or ISO 27001.
- Ability to lead through change, collaborate effectively, and mentor engineers.
Compensation and Benefits
- United States: $143,000–$207,000 USD annual base salary, plus benefits, paid time off, equity, and applicable incentive programs.
- Canada: $122,000–$177,000 CAD annual base salary, plus benefits, paid time off, equity, and applicable incentive programs.
Skills
Endpoint Management, GitOps, Bash, Python, Terraform, macOS, Windows, Ai Operations, Infrastructure As Code, CI/CD, Encryption, Vulnerability Management, Edr, Least Privilege, SOC 2
Similar jobs
IT Support jobsLeads enterprise IT automation, integrations, identity management, and business-systems deployment in a regulated healthcare environment. Requires 10+ years in IT engineering, applications development, or DevOps, with strong cloud, programming, Infrastructure as Code, API, and compliance expertise.
Own Crusoe Manufacturing’s engineering systems domain, including PLM, CAD integration, BOM governance, engineering change management, and PLM-to-ERP data flows. The role requires 8+ years in enterprise systems or PLM and 4+ years administering or implementing a PLM platform.
Administer and architect enterprise SaaS platforms, lead AI enablement and automation initiatives, optimize licensing and security, and support identity lifecycle workflows. Requires 5+ years of IT systems experience and hands-on expertise with Okta, Jira, Confluence, Google Workspace, and Slack.
Supports and improves Workday and related HR systems across functional areas, leading configuration, integrations, audits, testing, and user training. Requires at least five years of business systems analysis experience, hands-on Workday configuration, and strong HRIS knowledge.
Build and scale Brigit's internal IT Operations function, overseeing IAM (Okta), security tooling, compliance audits (SOC, PCI), MSP management, and documentation while mentoring one IT Support Specialist.