IT Security Engineer

Capital Markets Gateway; Argentina; Presencial; ARS 54.406.000 - 81.611.000; Jornada completa

Descripción de la vacante

A financial technology firm in Argentina is looking for an experienced IT Security Engineer to manage endpoint security, patching, and compliance across diverse operating systems. The ideal candidate should have over 5 years of enterprise experience with macOS and Windows, proficiency in Intune, and strong scripting skills in PowerShell and Bash. This remote role offers a 2-year contract, flexible hours, and ongoing training opportunities.

Servicios

15 business days of vacation

Tech courses and conferences

Top-of-the-line MacBook

Flexible working hours

Formación

• 5+ years of managing macOS and Windows in an enterprise environment.
• Deep experience with at least one MDM: Intune, Jamf, or Kandji.
• Fluent English (C1 or C2) required.

Responsabilidades

• Administer and secure endpoints (macOS, Windows, mobile).
• Lead automated patch management for OS and applications.
• Document policies, scripts, and runbooks to ensure compliance.

Conocimientos

Endpoint security management

Scripting in PowerShell

Scripting in Bash/Zsh

Patch management expertise

Collaboration skills

Herramientas

Microsoft Intune

Kandji

Microsoft Defender for Endpoint

Descripción del empleo

The Company

Capital Markets Gateway LLC (CMG) is a capital markets-focused fintech transforming global equity capital markets (ECM) through data, technology, and connectivity. As the preferred source for ECM analytics and the first network connecting the buy-side and sell-side for ECM workflows, we are committed to reshaping how capital markets operate. Founded in 2017 by a team of ECM practitioners, CMG has completed three successful fundraising rounds and is backed by a group of the world’s most prestigious financial institutions. The CMG platform is currently relied upon by nearly 150 buy-side firms representing $40 trillion in AUM and 22 global investment banks. For more information, please visit www.cmgx.io.

The Role

We’re seeking an experienced and automation-driven IT Security Engineer to lead endpoint security, patching, and compliance across a globally distributed fleet of macOS, Windows, and mobile devices. In this hands-on role, you’ll architect and maintain secure-by-default baselines using modern MDM tooling (Intune, Kandji), enforce identity-first access via Entra ID, and drive proactive detection and remediation using scripting, telemetry, and Microsoft’s security stack.

Responsibilities

• Administer and secure endpoints (macOS, Windows, mobile) via Intune, Kandji; enable zero-touch enrollment (Autopilot/ADE).
• Serve as an escalation for endpoint issues impacting security, patching, and configuration.
• Implement identity workflows (SSO, SCIM, RBAC, group lifecycle, access reviews) in Microsoft Entra ID.
• Lead automated patch management for OS and third-party apps; define rings, deferrals, SLAs, and rollout/rollback playbooks.
• Author automation in PowerShell (Windows) and Bash/Zsh (macOS) for remediation, compliance, and telemetry.
• Integrate with the Microsoft security stack (Defender for Endpoint, Microsoft 365 Defender, Purview); tune policies, respond to alerts, and improve posture.
• Co-define baselines with Security (CIS/NIST hardening, device compliance) and enforce via MDM.
• Monitor device health in Endpoint Manager; investigate anomalies and drive root cause.
• Support secure networking controls (firewall/proxy) as needed for endpoint updates and access.
• Document policies, scripts, runbooks, and patch procedures; keep them current.

What We’re Looking For

• English level - C1 or C2
• 5+ years managing macOS and Windows in an enterprise environment.
• Deep, hands-on experience with at least one MDM: Intune, Jamf, Kandji.
• Strong scripting: PowerShell (Windows) and Bash/Zsh (macOS).
• Expert in patch management (OS + third-party), deployment rings, and compliance reporting.
• Working knowledge of Microsoft 365 security: Defender for Endpoint, Microsoft 365 Defender, O365 threat policies (Anti-phish, Anti-spam, Safe Links, Safe Attachments)
• Exchange Online security/compliance settings.
• Familiar with Conditional Access, device compliance, and certificate/secure storage (BitLocker/FileVault).
• Excellent cross-functional collaboration and written/verbal communication; ability to simplify complex problems.
• Comfortable with CLI tooling and automation for policy deployment and monitoring.

Nice to Have

• Experience with compliance automation (CIS Benchmarks, custom compliance policies).
• Exposure to modern auth/device trust (Entra ID, device-based Conditional Access).
• Familiarity with EDR platforms (e.g., Defender).
• Experience supporting a globally distributed user/device base.
• Python for light tooling; Git-based workflows for scripts/profiles.

Our Tech Stack

• Microsoft Intune / Endpoint Manager
• Kandji
• Microsoft Defender for Endpoint / Microsoft 365 Defender
• PowerShell, Bash (Python optional)
• Azure AD / Entra ID
• Security endpoint tools (firewall/proxy)
• Exchange Online & M365 Security & Compliance Center

Our Values

• We innovate with purpose
• We focus on outcomes vs. output
• We believe diverse and inclusive teams fuel innovation
• We are humble yet candid
• We do right by the customer

What We Offer

• 2 year+ contract
• 15 business days of vacation
• Tech courses and conferences
• Top-of-the-line MacBook
• Fully remote working environment
• Flexible working hours

CMG embraces our ongoing commitment to building a culture reflecting the people, perspectives, and passions it represents. We will accept nothing less than equity, inclusion, and belonging for all. With the only constant in life being change, we will always listen, learn, and improve for the betterment of our teams, customers, and communities. CMG is proud to be an Equal Opportunity Employer.