Endpoint Engineer IT
1 hour agoLeadSalary: 180K - 360KSan Francisco, California or New York, New YorkHybridFull TimeDevopsJobs by Thinking Machines Lab
Thinking Machines LabVisit Thinking Machines Lab website
Artificial-intelligence research and product company building customizable AI systems, including the Tinker training API and Inkling open-weight models.
Distributed
Funding history
About Thinking Machines Lab
Thinking Machines Lab develops AI products that let researchers and developers fine-tune and use models, while also releasing open-weight multimodal models.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will engineer and operate macOS endpoint configuration, MDM, provisioning, patching, software distribution, telemetry, compliance, and security systems. You will lead the MDM migration, automate operational workflows, troubleshoot complex endpoint issues, and guide endpoint architecture decisions.
Requirements
- 8+ years of experience building and operating secure IT or endpoint systems
- Experience managing large macOS fleets through a modern MDM platform
- Experience with scripted deployments, Git-based workflows, or GitOps
- Deep knowledge of macOS internals, enterprise deployment, security controls, and troubleshooting
- Experience with zero-touch Mac provisioning, patching, and software distribution
- Experience evaluating endpoint compliance through device health and security signals
- Experience delivering complex technical projects through production
- Technical communication and documentation skills
- Python
- shell scripting
- Git
- GitOps
- CI/CD
- Terraform
- infrastructure as code
- Zero Trust
- device trust
- endpoint security
Responsibilities
- Author, review, test, and progressively deploy macOS configuration profiles, security policies, queries, and remediation scripts
- Operate the MDM platform as a production service
- Lead the migration from Iru to Fleet
- Own Santa and Rudolph architecture and operations
- Integrate device-trust signals into Zero Trust access decisions
- Build continuous device posture evaluation and automated remediation systems
- Build automated macOS patching workflows
- Design zero-touch Apple device provisioning workflows
- Own application packaging, deployment, updating, and removal
- Turn endpoint telemetry into policies, dashboards, compliance reporting, and drift warnings
- Build automation tools and AI-assisted operational workflows
- Partner on endpoint security, vulnerability management, compliance, detection, and response
- Resolve complex macOS and endpoint-platform issues
- Define endpoint architecture and lead complex initiatives through production
Benefits
- Health, dental, and vision benefits
- Unlimited PTO
- Paid parental leave
- Relocation support
- Visa sponsorship
