IT Systems Engineer, Client Platform Engineer, macOS
$285k - $325k • Boston, MA; Remote-Friendly (Travel-Required) | San Francisco, CA | Seattle, WA | New York City, NY; Washington, DC
Posted 9h ago
Job Location
Boston, MA; Remote-Friendly (Travel-Required) | San Francisco, CA | Seattle, WA | New York City, NY; Washington, DC
Tech Stack
Remote Work Policy
On-site
Categories
Applied AI Engineer
About the job
The Endpoint team (Client Platform Engineering) treats Anthropic's device fleet as a platform we build and run. We manage every piece of device configuration as code, shipping policies, configuration profiles, queries, remediation scripts, and software through pull requests, CI, a staging environment, and a canary group before they reach the fleet. The fleet is mostly macOS, with a small number of Linux machines and a growing mobile footprint.
You will own this platform end-to-end, including the infrastructure underneath the MDM, the configuration on top of it, the patching and software pipelines, and the telemetry that provides insights into device status. You will also build automation to reduce manual operational work and collaborate with Security teams on hardening, compliance controls, and detection/response, ensuring these controls do not impede developer workflows. Your work will enable access decisions based on device trust.
We value individuals who meticulously verify compliance reports. This is a lean team with high autonomy, where you will help define the endpoint roadmap, make architectural decisions, and own the platform that every employee's work relies on. You will also contribute to meeting the security standards required by our Responsible Scaling Policy as models advance.
Responsibilities
- Own endpoint configuration as code, including authoring, reviewing, testing, and rolling out MDM policies, configuration profiles, and remediation scripts across macOS and mobile with canary stages and rollback.
- Operate the MDM platform as a production service, managing infrastructure as code, observability, upgrades, and incident response.
- Build patch management automation with rapid enforcement timelines and a focus on user experience.
- Design zero-touch provisioning to enable immediate productivity for new devices.
- Support a small number of Linux machines alongside the Mac fleet.
- Translate fleet telemetry into policy, dashboards, and early drift warnings, and use Claude to automate manual operational tasks.
- Partner with Corporate Security on endpoint hardening, binary authorization, and compliance controls.
- Participate in the team's rotation for incoming requests and escalations, serving as the deep escalation tier for endpoint issues beyond IT Operations' scope.
Requirements
- 8+ years of experience building secure IT systems in complex environments, including leading cross-team projects.
- Experience managing endpoint fleets of thousands of macOS devices through a modern MDM.
- Proficiency in treating endpoint configuration as code, utilizing version control and peer review over console-based management.
- Deep understanding of macOS internals, including launchd, configuration profiles, TCC, and system extensions.
- Experience writing Python and shell scripts.
- Ability to write design documents and runbooks for team review and support.
- Experience operating an MDM or device management platform as a service.
- Experience with open-source endpoint and device management tooling (e.g., Munki, osquery, AutoPkg).
- Experience building automated, progressive rollout systems gated on telemetry.
- Experience running infrastructure as code in a public cloud.
- Working knowledge of Linux administration (packaging, systems, config management).
- Experience using LLMs to automate operational work.
Benefits
- Annual compensation range: $285,000 - $325,000 USD
- Visa sponsorship available