Endpoint Engineer, IT
$200k - $325k • San Francisco | New York
Posted 18h ago
About the job
Thinking Machines Lab is seeking an Endpoint Engineer to join their IT team. This role will focus on building secure infrastructure and efficient processes for an all-Mac environment, managing the endpoint fleet as a distributed platform with production-engineering practices. The team utilizes version-controlled workflows for endpoint configurations, security policies, scripts, and software deployments, incorporating testing, review, staged rollouts, and rollback capabilities. The Endpoint Engineer will collaborate closely with IT, Security, and Identity teams to ensure a secure and reliable employee computing experience.
Responsibilities
- Author, review, test, and deploy macOS configuration profiles, security policies, queries, and remediation scripts, integrating code review and rollback processes.
- Operate the MDM platform as a production service, focusing on configuration as code, observability, upgrades, reliability, and incident response.
- Lead the migration from one MDM platform to another, including evaluation, design, testing, and execution.
- Own the architecture and operation of Santa and its synchronization service, managing policies, rules, approvals, telemetry, and incident response.
- Partner with Security and Identity to integrate device trust into the Zero Trust architecture, using endpoint posture signals for access decisions.
- Build systems for continuous evaluation of device health and security posture, with automated remediation or access restriction.
- Develop and maintain automated macOS patching workflows for rapid enforcement and a positive employee experience.
- Design and improve zero-touch Mac provisioning workflows for secure and efficient machine setup.
- Manage application packaging, deployment, updating, and removal across the Mac fleet.
- Query live device state at scale to translate endpoint telemetry into actionable policies, dashboards, and compliance reports.
- Build tools and AI-assisted workflows to reduce repetitive operational work and enhance endpoint management scalability.
- Partner with Security on macOS hardening, vulnerability management, compliance controls, and device-based access policies.
- Serve as an escalation point for complex macOS and endpoint-platform issues.
- Contribute to defining the endpoint roadmap, evaluating technologies, making architecture decisions, and leading complex initiatives.
Requirements
- 8+ years of experience building and operating secure IT or endpoint systems in complex environments.
- Experience managing a large fleet of macOS devices through a modern MDM platform.
- Experience managing endpoint configuration through scripted deployments, Git-based workflows, or a full GitOps model.
- Deep knowledge of macOS internals, enterprise deployment, security controls, and troubleshooting.
- Experience designing and operating zero-touch Mac provisioning, patching, and software-distribution workflows.
- Experience using device health and security signals to evaluate endpoint compliance.
- Proven ability to deliver complex technical projects from conception through production.
- Strong problem-solving skills involving multiple teams and stakeholders.
- Ability to communicate technical concepts clearly to both technical and nontechnical audiences.
- A product-engineering mindset applied to IT systems, including testing, observability, reliability, and controlled change management.
- Consistent practice of creating clear technical documentation, architecture diagrams, runbooks, and operational procedures.