# Senior Security Engineer, Endpoint

**Company:** [Ramp](https://hotfix.jobs/companies/ramp)
**Location:** New York, NY
**Role:** Security Engineering
**Salary:** $172k – $236k/yr
**Experience:** 5+ years
**Skills:** Macos Security, MDM, Jamf Pro, Fleetdm, Terraform, GitOps, Iac, Google Workspace, Chrome Browser Cloud Management, Endpoint Security, Patch Management, Telemetry Analysis
**Posted:** 2026-07-08

> Architect endpoint security posture for macOS, Windows, and mobile fleets at Ramp. Build MDM policies as code with Terraform/GitOps, automate patching and software distribution, mine telemetry for detections, and shape security for an agentic AI future. Requires deep macOS/MDM experience and strong IaC skills.

## Job Description

## What You’ll Do
- Write and ship MDM policy as code — configuration profiles, remediation scripts, and enforcement rules across macOS, Windows, and mobile — with staged rollouts and rollback from day one
- Build patch automation that closes exposure windows fast without making employees' lives worse
- Manage software distribution across the fleet
- Mine fleet telemetry for signal — build dashboards, drift alerts, and AI-assisted automation that cuts toil before it compounds
- Own managed browser and extension policy: enforce what's allowed, block what isn't, and keep the control plane auditable as the surface grows
- Be the last line of defense on endpoint escalations that IT Operations can't crack

## What You Need
- Deep macOS security experience — Jamf Pro, FleetDM, or equivalent MDM at scale
- Strong IaC fundamentals and a GitOps delivery model — Terraform modules, remote state, and CI pipelines shipped through MRs and code review, not tickets and manual steps
- Solid working knowledge of Google Workspace in a managed enterprise environment, including Chrome Browser Cloud Management and extension policy enforcement
- A point of view on how agentic AI changes the corporate security surface

## Nice-to-Haves
- Have shipped real work with open source endpoint and device management tooling
- Have built automated, progressive rollout systems based on fleet telemetry
- Have managed a mixed fleet — macOS, Windows, and mobile — with real depth on at least one platform
- Have put AI to work on real operational problems, not just prototyped

## Benefits
- Flexible PTO
- Unlimited AI token usage
- Centralized home-office equipment ordering
- Health and wellness stipend
- Budget for intra-office travel
- Weekly coffee stipend
- 100% medical, dental & vision insurance coverage (US)
- 401(k) with employer match
- Fertility HRA (up to $10,000 per year)
- Parental leave: up to 16 weeks at 100% pay
- Pet insurance
- In-office perks: lunch, snacks, drinks
- Relocation support to NYC or SF

## Similar roles

- [Senior Security Architect, Applied Field Engineering (AFE)](https://hotfix.jobs/jobs/2b949a31-bfc8-4d2b-aa6d-f0896ee0d04b) - Snowflake - Menlo Park, CA - $172k – $226k/yr
- [Senior Security Architect, Applied Field Engineering (AFE)](https://hotfix.jobs/jobs/e0bb51d6-509a-4b41-85b5-59ffafabf6e2) - Snowflake - New York, NY - $172k – $226k/yr
- [Senior Manager, Technology Risk](https://hotfix.jobs/jobs/55fd3e50-6546-4e60-8000-757f20c0ff01) - Upstart - Remote - $172k – $238k/yr
- [GRC Automation & Assurance Lead](https://hotfix.jobs/jobs/8413b7c3-5dc3-4909-81d6-821934e12890) - Rokt - New York, NY - $174k – $215k/yr
- [Sr. Threat Researcher](https://hotfix.jobs/jobs/12a7f854-0643-4ecc-ac5c-02cac18108b5) - Illumio - Sunnyvale, CA - $170k – $196k/yr

**Apply:** https://hotfix.jobs/jobs/c02e6a58-776e-461e-8bd3-ec1166ec40c8
**Canonical:** https://hotfix.jobs/jobs/c02e6a58-776e-461e-8bd3-ec1166ec40c8