Senior Endpoint Security Engineer
Crusoe is an AI infrastructure company that designs, builds, and operates AI data centers and a cloud platform. It provides managed AI services, GPU compute, model fine-tuning and inference, and infrastructure operations for organizations building and deploying AI workloads.
Maintainer signals as of 8/14/2026
Funding history
Projects
About Crusoe
Crusoe, the AI factory company, provides Crusoe Cloud and Crusoe Intelligence Foundry for AI development and production. Its offerings include managed inference, serverless fine-tuning, high-performance NVIDIA and AMD compute, accelerated storage, RDMA networking, managed Kubernetes and Slurm, and operations tooling. The company also designs, builds, and operates modular AI data-center infrastructure using an energy-first approach, serving customers that need scalable training, inference, and AI platform infrastructure.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will implement security defaults and endpoint visibility across a global fleet of macOS, Windows, iOS, and Android devices. You will administer Jamf and Microsoft Intune, manage enrollment and patching, enforce compliance baselines, integrate endpoint telemetry with security tools, develop automation, maintain documentation and asset records, provide MDM escalation support, and partner with People Operations on device provisioning and deprovisioning.
Requirements
- Experience with OSQuery and CrowdStrike for endpoint visibility and threat detection
- Understanding of Okta Device Trust/FastPass and Entra ID Conditional Access
- 3–6 years of experience with Jamf/Kandji and Microsoft Intune
- Proficiency in Bash, Python, or PowerShell
- Understanding of SCEP and PKCS certificate infrastructure
- Experience with Absolute for Windows persistence
- Strong documentation and communication skills
- Bachelor’s degree in IT, Computer Science, or equivalent practical experience
Responsibilities
- Administer and improve Jamf and Microsoft Intune environments
- Maintain configuration profiles, compliance policies, application packages, and OS update enforcement
- Build automated enrollment workflows using Apple Business Manager and Windows Autopilot
- Own the patch management program and update SLAs
- Define and enforce device compliance baselines aligned with CIS Benchmarks and SOC 2
- Integrate MDM telemetry with EDR and SIEM tooling
- Implement device trust, Conditional Access, certificate authentication, and network access controls
- Build scripts, automation, and self-service endpoint tooling
- Maintain MDM runbooks, policy documentation, and asset records
- Serve as the MDM escalation point in the IT on-call rotation
- Partner with People Operations on device provisioning and deprovisioning
- Mentor junior IT team members
Benefits
- Competitive compensation and equity packages
- Restricted Stock Units
- Paid time off
- Paid holidays
- Leave of absence programs
- Comprehensive health, dental and vision insurance
- Employer contributions to HSA account
- Paid parental leave
- Paid life insurance
- Short-term and long-term disability insurance
- Professional development and tuition reimbursement
- Mental health and wellness support
- Commuter benefits for parking and transit
- Cell phone stipend
- 401(k) retirement plan with company match up to 4% of salary
- Volunteer time off
- Global travel insurance and emergency assistance
- Daily meals allowance
- Additional location-specific perks and programs
