Senior Systems Engineer, Client Engineering

Responsibilities

• Own the endpoint platform across macOS, Windows, and mobile devices using Jamf Pro, Microsoft Intune, and Autopilot.
• Set configuration standards, patching cadence, and compliance baselines in partnership with Security.
• Engineer the full device lifecycle, including zero-touch provisioning with Apple Business Manager and Autopilot, automated onboarding and offboarding, hardware refreshes, DLP, forensics, recovery, and retirement.
• Build automation and self-service tooling using Python and scripts against Jamf, Intune, and Okta APIs.
• Partner with Security on endpoint policies, EDR coverage, device trust, Okta FastPass, disk encryption, key escrow, and browser management.
• Serve as the final escalation point for complex endpoint issues and eliminate recurring problem classes.
• Support a global, in-person-heavy organization across US, EMEA, and APAC offices through documentation and team training.

Requirements

• At least 5 years of endpoint, client, or IT systems engineering experience.
• Direct ownership of a macOS MDM environment managing 1,000 or more devices.
• Deep hands-on Jamf experience and Windows management experience with Intune, Autopilot, and Entra.
• Strong scripting and automation skills in Python, Bash, or Swift, including building tooling against vendor APIs.
• Working fluency with an identity provider, preferably Okta, including SSO, MFA, device trust, and endpoint-policy integration.
• Strong communication and stakeholder-management skills, particularly with nontechnical teams.
• Ability to work effectively in a fast-paced, high-growth, global environment.

Nice-to-haves

• Experience running production endpoint security tooling such as CrowdStrike or equivalent EDR.
• Experience with managed Chrome Enterprise and DLP.
• Endpoint experience within a SOC 2 or ISO 27001 compliance program.

Compensation

• $153,000–$210,500 USD annually.