# Staff Corporate Security Engineer

**Company:** [GitLab](https://hotfix.jobs/companies/gitlab)
**Location:** Remote
**Role:** Security Engineering
**Salary:** $168k – $238k/yr
**Experience:** 7+ years
**Skills:** macOS, Jamf Pro, Fleetdm, Terraform, Infrastructure As Code, GitOps, Bash, Python, PowerShell, Go, Okta, Google Workspace, Ldap, iOS, Windows
**Posted:** 2026-08-24

> Leads corporate endpoint security architecture and automation, with emphasis on macOS, Terraform, GitOps, and scalable controls across device platforms. The role partners across security and IT, improves detection and auditability, and mentors engineers.

## Job Description

## Responsibilities
- Lead the security architecture of the endpoint fleet and related infrastructure, with a primary focus on macOS.
- Design and support automation for secure endpoint deployment, configuration, and lifecycle management using code-based workflows.
- Manage endpoint and SaaS security configuration through Terraform, version control, merge requests, continuous integration pipelines, and automated rollouts.
- Define and enforce security baselines across macOS, iOS, Windows, and Linux endpoints.
- Develop patching and software distribution approaches aligned with security, compliance, and operational requirements.
- Partner with Information Technology, Security Operations, and Detection and Response teams to improve endpoint telemetry, detections, and response models.
- Drive process improvements that reduce manual work and risk through automation, policy-driven controls, and auditable change management.
- Mentor engineers across Corporate Security and Information Technology and serve as a senior escalation point for complex endpoint security issues.

## Requirements
- Experience designing and delivering endpoint, systems, or corporate security solutions requiring scalable, durable controls.
- Deep knowledge of endpoint management platforms such as Jamf Pro or FleetDM, particularly for architecting and securing macOS environments.
- Strong hands-on ability with Terraform and infrastructure-as-code practices, including module design, state management, and pipeline-based deployment.
- Experience with GitOps workflows using Git repositories, merge requests, code review, and automated pipelines.
- Strong proficiency in scripting or programming for automation and security tooling, such as Bash, Python, PowerShell, or Go.
- Familiarity with cloud identity providers and directories, including Okta, Google Workspace, and LDAP.
- Clear communication, cross-functional collaboration, and independent work in an all-remote environment.
- Transferable experience from adjacent security, systems, or platform engineering backgrounds and a practical, security-focused problem-solving approach.

## Compensation and Benefits
- United States base salary: **$168,000–$238,000 USD**.
- Flexible paid time off.
- Team Member Resource Groups.
- Equity compensation and Employee Stock Purchase Plan.
- Growth and Development Fund.
- Parental leave.

## Similar jobs

- [Staff Security Researcher](https://hotfix.jobs/jobs/6b308cd8-be33-459a-b904-08e54567ad7b) - GitLab - Remote - $168k – $238k/yr
- [Staff Security Engineer, IAM](https://hotfix.jobs/jobs/f79f024d-e0b6-41b0-b434-9f047bfa2630) - GitLab - Remote - $168k – $238k/yr
- [Staff IAM Engineer](https://hotfix.jobs/jobs/7a722d47-b173-4ffc-9981-f10ed9f3ce9c) - Ironclad - San Francisco, CA - $170k – $190k/yr
- [Staff Vulnerability Management Engineer](https://hotfix.jobs/jobs/f6eb93ea-70d6-496f-a251-e679113fd047) - Chainguard - Remote - $170k – $231k/yr
- [Staff Identity Governance and Access Engineer](https://hotfix.jobs/jobs/8fe7fe60-ff7a-48f4-a805-f3f100e1814f) - Okta - Bellevue, WA - $161k – $221k/yr

**Apply:** https://hotfix.jobs/jobs/f89034fc-b54a-4d06-a7c4-971c896526ac
**Canonical:** https://hotfix.jobs/jobs/f89034fc-b54a-4d06-a7c4-971c896526ac