IT Endpoint Engineer

Description

The company builds AI systems for the Department of War's highest-stakes missions, with 125 deployments across every branch and combatant command, spanning its core platform and 5 products.

Within 3 months of major combat operations starting with Iran, the team fielded a new product supporting 24/7 operations for 9,000+ users.

Engineers, the product team, and the CTO deploy to the field, including visits to units in Ukraine, and embed with operational units on great power competition with China, combat operations with Iran, and counter-narcotics work.

This is an engineering-led IT role that owns the health and ongoing development of the corporate endpoint environment across macOS, Windows, and iOS.

Responsibilities

• Take ownership of the endpoint environment across macOS, Windows, and iOS, including its ongoing development.
• Own patching and vulnerability management so remediations land within SLAs.
• Plan and deliver technical projects from start to finish, weighing dependencies, risk, and effect on users.
• Work with Security and IT to turn security and compliance requirements into endpoint controls and rollout plans.
• Write scripts and automation for macOS and Windows that deploy configurations, fix problems, and cut manual work.
• Build recurring health checks and monitoring that catch configuration drift, missing controls, unhealthy devices, and coverage gaps.
• Investigate root causes of complex endpoint failures and feed recurring issues back into tooling and architecture.
• Keep up with user-facing IT problems alongside the wider team so endpoint priorities match what people actually face.

Requirements

• 5+ years in endpoint engineering, systems administration, IT infrastructure, or a similar technical role.
• Deep knowledge of macOS and Windows administration, scripting, and troubleshooting for a distributed or remote user base.
• Hands-on work with enterprise MDM platforms such as Microsoft Intune, covering configuration profiles, app deployment, compliance policies, and device lifecycle.
• Track record managing enterprise patching and vulnerability remediation within required timelines.
• Strong scripting and automation in PowerShell, Bash, Python, or similar languages to solve endpoint problems.
• Ability to investigate hard problems independently using logs, telemetry, command-line tools, scripts, and other diagnostics.
• Experience leading projects from planning through testing and rollout, spotting dependencies, risks, and user impact.
• Experience turning technical, security, or compliance requirements into working solutions and choosing the right deployment path.
• Comfort working autonomously, making sound technical calls, and balancing competing priorities.

Conditions

Remote-friendly setup with WeWork access available.

Candidates from all backgrounds are encouraged to apply, even without a perfect match.

Benefits

• Base salary range of $85,000-$125,000 plus equity, with pay within the range set by experience, relevant education, and/or training.
• Health, dental, and vision insurance.
• Unlimited PTO, shared downtime during the federal holiday calendar, and company-wide time off at year end.
• 401(k) match.
• Lifestyle and wellbeing stipends.
• Salary top-up during military reserve duty.
• Fully paid parental leave.
• Child and pet care reimbursement during travel.