Staff Client Platform Engineer

What you'll do

• Manage the global macOS and iOS fleet using Jamf Pro for enrollment, configuration, and application deployment.
• Support the management and security of Windows and Linux endpoints to ensure a consistent security posture.
• Administer open-source tools like Munki and Santa and evaluate emerging platforms like FleetDM.
• Ensure all endpoints comply with NIST, CIS, and STIG standards while responding to security vulnerabilities.
• Apply Infrastructure as Code (IaC) principles using Terraform, Ansible, or Jamf APIs to automate device management.
• Build and maintain CI/CD pipelines to ensure repeatable and scalable deployments across all operating systems.
• Provide technical direction and architecture for endpoint security tooling and devices-as-code.
• Act as a primary feedback loop for internal product teams by testing new features and influencing the roadmap.

What we're looking for

• 8+ years of experience in endpoint engineering with a focus on Apple platforms at enterprise scale.
• Strong understanding of Windows and Linux operating systems and applying engineering principles to any OS.
• Deep expertise in managing endpoints at scale via MDM, such as Jamf Pro.
• Proficiency in scripting languages including Bash, Python, Go, or Swift.
• Experience with Git, GitHub Actions, Terraform, or similar CI/CD frameworks.
• Understanding of ADE/DEP, MDM/DDM protocols, and platform-specific hardening like BitLocker, FileVault, and LUKS.
• Familiarity with SAML and OIDC and how they integrate with endpoint authentication.
• U.S. Citizen, National, Lawful Permanent Resident, Refugee, or Asylee.