Endpoint Engineer

BayOne Solutions; Sunnyvale (CA); Hybrid; USD 140,000 - 170,000; Full time

Job summary

BayOne Solutions in Sunnyvale, CA is seeking a Senior Endpoint Engineer specializing in JAMF Pro, Apple device management, and Linux endpoint administration to own enterprise device fleets and ensure secure, compliant configurations.

You will automate with Bash, manage patching and security baselines, and drive deployment testing, OS upgrades, and rollbacks. Collaboration with Security, Engineering, and IT Operations is essential.

Qualifications

• 5+ years enterprise endpoint management experience with strong JAMF Pro expertise.
• Hands-on experience managing macOS, iOS/iPadOS, and Linux fleets at scale.
• Strong Bash scripting, patch management, security hardening, and compliance reporting skills.
• Experience with JAMF Self Service, smart groups, extension attributes, and policy scoping.
• Knowledge of PKI, certificates, LDAP/SSO, and identity platforms such as Okta.
• Experience with formal change management and ITSM tools like ServiceNow or Jira.
• Proven ability to lead deployment testing and production rollouts.

Responsibilities

• Own JAMF Pro administration including enrollment, smart groups, policies, and configuration profiles.
• Manage Apple device lifecycle via JAMF Pro and Apple Business Manager (ABM).
• Administer Linux endpoint fleets including enrollment, patching, software distribution, and compliance.
• Develop Bash scripts to automate endpoint management, reporting, and remediation.
• Enforce security baselines and CIS SOC 2 controls.
• Lead deployment testing, staged rollouts, OS upgrades, and rollback planning.
• Manage RFCs/CAB and maintain Endpoint documentation.

Skills

JAMF Pro

Apple device mgmt

Linux endpoint management

Bash scripting

Patch management

Security hardening

Compliance reporting

Change management

ITSM tools (ServiceNow/Jira)

Tools

Apple Business Manager

JAMF Self Service

ServiceNow

Jira

Job description

Endpoint Engineer — JAMF & Linux Administration

Location: Sunnyvale, CA | Hybrid – 2 to 3 days onsite

Role Summary

Seeking a Senior Endpoint Engineer with strong expertise in JAMF Pro, Apple device management, and Linux endpoint administration to own and secure enterprise device fleets. The role focuses on endpoint compliance, automation, patch management, security hardening, and deployment reliability.

Key Responsibilities

• Own JAMF Pro administration, including enrollment, smart groups, policies, configuration profiles, and self-service.
• Manage the complete Apple device lifecycle (macOS, iOS/iPadOS) using JAMF Pro and Apple Business Manager (ABM).
• Administer Linux endpoint fleets, including enrollment, patching, software distribution, configuration, and compliance.
• Develop Bash/shell scripts to automate endpoint management, reporting, and remediation.
• Enforce security baselines and compliance standards, including CIS benchmarks and SOC 2 requirements.
• Lead deployment testing, staged rollouts, OS upgrades, and rollback planning.
• Manage change control through RFCs/CAB, maintain documentation, and troubleshoot complex endpoint issues.
• Collaborate with Security, Engineering, and IT Operations teams.

Required Qualifications

• 5+ years of enterprise endpoint management experience, with strong JAMF Pro expertise.
• Hands-on experience managing macOS, iOS/iPadOS, and Linux desktop/laptop fleets at scale.
• Strong skills in Bash scripting, patch management, security hardening, and compliance reporting.
• Experience with JAMF Self Service, smart groups, extension attributes, and policy scoping.
• Knowledge of PKI, certificates, LDAP/SSO, and identity platforms such as Okta.
• Experience with formal change management and ITSM tools such as ServiceNow or Jira.
• Proven ability to lead deployment testing and production rollouts.

Preferred Qualifications

• JAMF certifications (JCA, JCT, Jamf 300/400).
• Familiarity with Intune, CrowdStrike/SentinelOne, Docker, AWS, or GCP.
• Experience in a technology, manufacturing, or high-growth enterprise environment.