Staff Client Platform Engineer

Description

The company builds identity products, including infrastructure meant to secure AI systems and the people who use them.

The Technology, Data, and Insights (TDI) team works to scale the company's operations through automation, testing, and performance tuning. It supports every part of the business and aims for a smooth, secure experience for each employee.

As Staff Client Platform Engineer, you are the subject matter expert for the macOS and iOS fleet. Apple is your main focus, and you also help with Windows, Android, Linux, and VDI workflows when needed.

You will work on an automation-first team. You combine Jamf Pro with open-source tools and help connect platforms through shared tools such as FleetDM.

You are the company's first test user, working with Product and Engineering teams to check new capabilities, report real-world results, and shape the roadmap for tools used by millions of people worldwide.

This role reports to the Senior Manager of Client Platform Engineering.

Responsibilities

• Own the global macOS and iOS fleet in Jamf Pro, including enrollment, configuration profiles, and app deployment.
• Help manage and secure Windows (through Intune and Autopilot) and Linux endpoints as the program grows, keeping security consistent across all operating systems.
• Run Munki and Santa, and evaluate platforms such as FleetDM to improve visibility across the fleet.
• Make endpoints meet NIST, CIS, and STIG standards, and work with Security teams on fleet-wide vulnerability response.
• Manage devices as code using Terraform, Ansible, or the Jamf API, and build CI/CD pipelines for repeatable, automated deployments on any OS.
• Set architecture and technical direction for areas such as the Apple platform, endpoint security tooling, or devices as code, and document it in design papers.
• Give product teams feedback from daily use: test features in production and use operational data to guide the roadmap.
• Provide Tier 3 escalation support to global IT teams and take part in an on-call rotation.

Requirements

• At least 8 years in endpoint engineering, with a focus on Apple platforms at enterprise scale.
• A solid grasp of Windows and Linux, and the ability to apply engineering principles to any OS.
• Deep experience managing endpoints at scale through MDM, such as Jamf Pro.
• Experience with Microsoft Intune, FleetDM, or other cross-platform MDM or UEM tools is a significant plus.
• Proficiency in Bash, Python, Go, or Swift.
• PowerShell experience is a bonus.
• Experience with Git, GitHub Actions, Terraform, or similar CI/CD frameworks.
• Understanding of ADE/DEP, MDM and DDM protocols, and platform hardening such as BitLocker, FileVault, and LUKS.
• Familiarity with SAML and OIDC and how they work with endpoint authentication.
• Extra credit: hands-on experience with FleetDM or osquery for multi-OS visibility.
• Extra credit: experience with Autopkg pipelines or AWS Lambda for endpoint automation.
• Extra credit: background in federal compliance (FedRAMP).
• Extra credit: relevant certifications from Apple, the company, Microsoft, AWS, or Jamf.

Conditions

This is a hybrid role. You must live near a company office. In the San Francisco Bay Area, you are expected to work in the office at least 2 days per week.

Requisition ID: P2763.

The annual base salary range for candidates in the San Francisco Bay Area is $194,000 to $267,000 USD. Your actual salary depends on skills, qualifications, experience, and work location.

This role must be able to access federal environments or protected federal data. As a condition of employment, you must provide documents proving U.S. Person status upon hire, such as U.S. citizen, national, lawful permanent resident, refugee, or asylee status under 22 CFR 120.15.

Onboarding is in person and immersive. The company has offices in over 20 locations worldwide.

New York City applicants and employees can view a notice about the automated employment decision tools the company may use in hiring.

Benefits

• Equity where applicable, bonus, and benefits, including health, dental, and vision insurance, 401(k), a flexible spending account, and paid leave (PTO and parental leave), per the applicable plans and policies.