Staff Corporate Security Engineer

What you'll do

• Lead the security architecture for the endpoint fleet with a primary focus on macOS.
• Design and support automated workflows for secure endpoint deployment and lifecycle management.
• Manage security configurations using Terraform, version control, and continuous integration pipelines.
• Define and enforce security baselines across macOS, iOS, Windows, and Linux endpoints.
• Develop patching and software distribution strategies that meet security and compliance requirements.
• Partner with security operations teams to improve endpoint telemetry and response models.
• Drive process improvements to replace manual tasks with automated, policy-driven controls.
• Mentor engineers and serve as a senior escalation point for complex endpoint security issues.

What we're looking for

• Experience designing and delivering endpoint, systems, or corporate security solutions in environments requiring scalable, durable controls.
• Deep knowledge of endpoint management platforms like Jamf Pro or FleetDM, specifically for architecting and securing macOS environments.
• Strong hands-on ability with Terraform and Infrastructure-as-Code practices, including module design, state management, and pipeline-based deployment.
• Experience working with GitOps workflows using Git repositories, merge requests, code review, and automated pipelines.
• Strong proficiency in scripting or programming for automation and security tooling using bash, Python, PowerShell, or Go.
• Familiarity with cloud identity providers and directories such as Okta, Google Workspace, and LDAP.
• Ability to communicate clearly and work independently in an all-remote environment.
• Openness to bringing transferable experience from adjacent security, systems, or platform engineering backgrounds (preferred).