Senior Endpoint Engineer (JAMF 400 Certified)

Genesys; Hyderabad; On-site; INR 3,000,000 - 4,200,000; Full time

Job summary

Genesys is seeking a Senior Endpoint Engineer with deep JAMF expertise to design, deploy and maintain enterprise-scale endpoint solutions for 10,000+ devices worldwide. You will drive automation, AI-powered workflows, and security alignment across IT End User Services.

This role requires collaboration with Security, Identity and Infrastructure teams to ensure secure, compliant and scalable endpoint environments.

Qualifications

• Bachelor's degree or equivalent experience.
• 5+ years IT experience, 3+ years in endpoint engineering/EUC.
• Experience managing large-scale endpoint environments (10,000+ devices).
• Proficiency in scripting (Bash, Python, AppleScript, PowerShell).
• JAMF 400 Certification or equivalent expertise.
• Strong knowledge of Apple ecosystem (ABM/DEP, VPP, MDM).
• Experience with encryption and Zero Trust controls.
• Excellent communication and collaboration skills.

Responsibilities

• Engineer and optimize cross-platform endpoint environments (Windows, macOS, Ubuntu, iOS, Android).
• Manage MDM platforms including JAMF Pro, Intune, Autopilot, Entra ID, and AD.
• Lead OS/3rd- party patching and compliance.
• Embed AI and automation to improve ops efficiency.
• Support audits, incident response, and vulnerability remediation.
• Architect and administer JAMF Pro across 3,000+ macOS endpoints.
• Develop scripts to automate provisioning, deployment, patching and reporting.
• Collaborate with Security to enforce encryption and CIS benchmarks.
• Define AI automation roadmap and governance for endpoint operations.

Skills

JAMF Pro

macOS

Windows

Ubuntu

iOS

Android

Scripting Bash

Python

PowerShell

ABM/DEP

MDM

Okta

Zero Trust

AI automation

Education

Bachelor's degree in CS or related

Tools

JAMF Pro

Microsoft Intune

Autopilot

Entra ID

Active Directory

ABM/DEP

VPP

Job description

Be the one building AI-powered experiences where they matter most.

At Genesys, we help organizations create better customer experiences through AI-powered experience orchestration. Our platform connects people, systems, data and AI to help organizations deliver more personalized service, improve operational efficiency and build stronger customer relationships.

Help build, support and operate technology used by more than 8,000 organizations in over 100 countries - moving AI from possibility to production in real-world enterprise environments every day.

Senior Endpoint Engineer — JAMF

Endpoint Management | IT End User Services

Role Overview

We are seeking a highly skilled Senior Endpoint & JAMF Engineer to join our global Endpoint Management / End User Services team. This role combines broad expertise in managing cross-platform endpoints (macOS, Windows, Ubuntu, iOS, Android) with deep specialization in JAMF and Apple macOS device management.

You will design, deploy, and maintain enterprise-scale endpoint solutions, ensuring optimal performance, security, and user experience across 10,000+ devices worldwide. As a trusted subject matter expert, you will drive automation, AI-powered workflows, compliance, and integration initiatives, collaborating with Security, Identity, and Infrastructure teams to deliver secure, scalable, and user-centric endpoint environments at global scale.

Key Responsibilities

Endpoint Engineering & Management

• Engineer, configure, and optimize endpoint environments across Windows, macOS, Ubuntu, iOS, and Android platforms.
• Manage enterprise MDM platforms including JAMF Pro, Microsoft Intune, Autopilot, Entra ID, and Active Directory.
• Lead endpoint patching strategies for OS and third-party applications, minimizing downtime while ensuring compliance.
• Champion ITIL-aligned process improvement, embedding AI and agentic automation to drive continuous operational efficiency.
• Serve as a subject matter expert during audits, incident response, and vulnerability remediation exercises.

JAMF & Apple Ecosystem

• Architect, deploy, and administer JAMF Pro across a complex enterprise environment of 3,000+ macOS endpoints.
• Build automated workflows for device provisioning, application deployment, patch management, and compliance reporting.
• Develop and maintain scripts in Bash, Python, AppleScript, and PowerShell to extend and automate JAMF functionality.
• Manage JAMF configuration profiles, policies, smart groups, and operational dashboards.
• Partner with Security to enforce FileVault encryption, CIS benchmark hardening, and Zero Trust policy controls.
• Maintain Apple Business Manager (ABM/DEP), VPP licensing, APNs certificates, and MDM enrollment pipelines.

AI, Agents & Endpoint Automation

• Design and deploy AI-assisted endpoint automation pipelines to reduce manual operational overhead and accelerate response times.
• Build and maintain autonomous agents (LangChain, AutoGen, or custom LLM integrations) to handle routine endpoint tasks including compliance checks, self-healing workflows, and incident triage.
• Integrate LLM APIs into endpoint tooling for natural-language policy authoring, log analysis, and intelligent alert summarization.
• Develop event-driven automation using JAMF Pro webhooks, Microsoft Power Automate, or custom Python/API pipelines to trigger remediation workflows without manual intervention.
• Evaluate and adopt AIOps platforms to predict device health issues, proactively surface compliance drift, and optimize patch scheduling.
• Define an AI automation roadmap for endpoint operations, establishing governance, testing, and rollback standards for agentic workflows.
• Continuously assess emerging AI tooling and agent frameworks for applicability to endpoint management use cases.

Security & Compliance

• Integrate endpoint tooling with SIEM and SOAR platforms for proactive threat monitoring and automated incident response.
• Design and enforce Conditional Access policies, identity frameworks, and data loss prevention controls.
• Ensure endpoint posture meets regulatory requirements including GDPR, HIPAA, and PCI-DSS.
• Participate in Zero Trust architecture reviews, risk assessments, and compliance audits.
• Implement and validate encryption standards across platforms (BitLocker for Windows, FileVault for macOS).

Collaboration & Leadership

• Mentor junior engineers through knowledge sharing, code reviews, and coaching, including upskilling the team on AI-assisted and agentic operations.
• Serve as the escalation point for complex endpoint and macOS issues across global teams.
• Partner with Security, Networking, and Identity teams to integrate MDM platforms with tools such as Okta and AWS VDI.
• Produce and maintain technical documentation, architecture decision records, and end-user guides.
• Strong communication skills for both technical and non-technical audiences; able to clearly convey complex concepts to stakeholders at all levels.

EXPECTED OUTCOMES

• Maintain endpoint compliance of 95%+ across all managed platforms.
• Reduce provisioning and onboarding time through streamlined automation and self-service workflows.
• Deliver measurable improvements in endpoint security posture and end-user satisfaction scores.
• Reduce manual endpoint management tasks through scripting, automation, and agentic AI workflows.
• Align endpoint strategies with organizational goals and evolving industry best practices.

Required Qualifications & Experience

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent professional experience.
• 5+ years of IT experience with at least 3 years in endpoint engineering or EUC roles.
• Demonstrated expertise managing large-scale endpoint environments (10,000+ devices).
• JAMF 400 Certification (JAMF Certified Expert) or equivalent expert-level hands-on experience.
• Proficiency in scripting: Bash, Python, AppleScript, and PowerShell.
• Deep knowledge of the Apple ecosystem: ABM/DEP, VPP, MDM protocol, APNs.
• Strong understanding of endpoint compliance, encryption (BitLocker, FileVault), and Zero Trust frameworks.
• Experience with vulnerability remediation, patch lifecycle management, and endpoint security tooling.
• Excellent written and verbal communication and cross-team collaboration skills.
• Available to work until 1:00 PM EST.

Preferred Qualifications

• Experience working in regulated industries such as finance, healthcare, or government.
• Hands-on experience with AWS VDI image creation and deployment pipelines.
• Familiarity with modern identity and access management frameworks (Zero Trust, Conditional Access, Okta).
• Practical experience building AI agents or LLM-integrated workflows (LangChain, AutoGen, Claude, OpenAI API, or similar).
• Understanding of prompt engineering, retrieval-augmented generation (RAG), or fine-tuning for IT operations use cases.

Working at Genesys

• AI at enterprise scale - Build, support and operate AI-powered technology used by more than 8,000 organizations worldwide. 150+ new AI features were released in the last fiscal year
• A flexible-first culture - Join a global team of nearly 7,000 employees with flexible ways of working designed to help people do their best work
• Growth in the AI era - Build future-ready skills through mentorship, learning programs, leadership development and education support
• Time to recharge and give back - Benefits include paid volunteer time, August Free Fridays, well-being resources and regionally tailored programs for employees and their families
• Recognized globally - Genesys is Great Place to Work® certified in 17 countries and 94% of employees are proud to tell others they work at Genesys

Learn more about our culture, AI innovation and sustainability commitments through our Careers site and Sustainability Report.

About Genesys

Genesys® empowers more than 8,000 organizations worldwide to create the best customer and employee experiences. With agentic AI at its core, Genesys Cloud™ is the AI-Powered Experience Orchestration platform that connects people, systems, data and AI across the enterprise. As a result, organizations can drive customer loyalty, growth and retention while increasing operational efficiency and teamwork across human and AI workforces. To learn more, visit www.genesys.com.

Reasonable Accommodations

If you require a reasonable accommodation to complete any part of the application process, or are limited in your ability to access or use this online application and need an alternative method for applying, you or someone you know may contact us at [e-mail].

You can expect a response within 24-48 hours. To help us provide the best support, click the email link above to open a pre-filled message and complete the requested information before sending. If you have any questions, please include them in your email.

Genesys is an equal opportunity employer committed to fairness in the workplace. We evaluate qualified applicants without regard to race, color, age, religion, sex, sexual orientation, gender identity or expression, marital status, domestic partner status, national origin, genetics, disability, military and veteran status, and other protected characteristics.