The opportunity
You'll be the architect of our endpoint security posture across the full fleet — macOS, Windows, and BYOD mobile devices. You'll build secure-by-default controls with Terraform and GitOps, harden endpoints at scale, and automate the full device lifecycle so nothing depends on a…
What you'll do
Write and ship MDM policy as code: configuration profiles, remediation scripts, and enforcement rules across macOS, Windows, and mobile — with staged rollouts and rollback from day one
Build patch automation that closes exposure windows fast without making employees' lives worse
Manage software distribution across the fleet
Mine fleet telemetry for signal: build dashboards, drift alerts, and AI-assisted automation that cuts toil before it compounds
Own managed browser and extension policy: enforce what's allowed, block what isn't, and keep the control plane auditable as the surface grows
Be the last line of defense on endpoint escalations that IT Operations can't crack