The Role:
We’re seeking a skilled IT Endpoint Engineer to lead the provisioning, configuration, and security of user endpoints across macOS, Windows, and Linux devices. You’ll define and automate standards for OS hardening, zero-touch deployments, patching, telemetry, and compliance at scale. This hands-on role blends engineering and strategy to support a secure, seamless experience for our global, remote-first workforce.
Responsibilities:
- Endpoint Lifecycle Management
- Develop and maintain zero-touch deployment workflows (MDM)
- Define baseline configuration profiles, packages, and OS policies for fleet consistency
- Manage inventory, device health metrics, and enforce EOL/refresh cycles
- Security & Compliance
- Work closely with security to align endpoints with CIS/NIST benchmarks
- Implement and monitor full disk encryption, OS patch compliance, antivirus/EDR
- Remediate misconfigurations or non-compliant devices using policy-based enforcement and scripts
- Tooling & Automation
- Build scripts and policies to automate provisioning, updates, and configuration drift remediation
- Integrate endpoint telemetry with SIEM, EDR platforms
- Optimize workflows through tools such as PowerShell, Python, or Swift scripting
- Collaboration & Support
- Partner with IT and Security to define escalation workflows and handle complex endpoint escalations
- Contribute to internal IT documentation and runbooks
- Evaluate new tools and lead pilots for endpoint-related platforms
Bonus Skills and Qualifications:
- Experience with EDR/XDR tools
- Exposure to vulnerability management platforms or asset inventory integrations
- Working knowledge of Splunk, Jira, and Microsoft 365 Admin Center
- Previous experience working in a security-forward or regulated environment (SOC 2, FedRAMP, etc.)
