Endpoint Platform Engineer — MDM, Automation & Security

EngineersOfAI; Town of Boston, Northern (NY, KY); Hybrid; USD 150,000 - 230,000; Full time

Job summary

Anthropic seeks an experienced Endpoint Platform Engineer to own the device fleet as a platform. You’ll manage the MDM infrastructure, configuration as code, and patching pipelines for thousands of devices across macOS and Linux.

You’ll collaborate with Security and infrastructure teams to enable secure access decisions, automations, and telemetry-driven policy. This role emphasizes autonomy and proactive risk mitigation.

Qualifications

• 8+ years building secure IT systems in complex environments.
• Managed endpoint fleets of thousands of macOS devices through a modern MDM.
• Endpoint configuration as code that is version controlled and peer reviewed.
• Deep knowledge of macOS internals such as launchd, configuration profiles, TCC, and system extensions.
• Proficient in scripting with Python and shell.
• Ability to write design docs and runbooks for operations teams.

Responsibilities

• Own endpoint configuration as code and roll out MDM policies across macOS and mobile with canary stages.
• Operate the MDM platform itself as a production service with IaC, observability, upgrades, and incident response.
• Build patch management automation with rapid enforcement timelines while preserving user experience.
• Design zero-touch provisioning to turn a sealed box into a productive machine on day one.
• Support Linux machines alongside the Mac fleet.
• Turn fleet telemetry into policy, dashboards, and early drift warnings.
• Collaborate with Corporate Security on endpoint hardening and compliance controls.
• Take shifts on the rotation for incoming requests and serve as escalation for endpoint issues.

Skills

Python

Shell scripting

MDM

Endpoint security

macOS internals

Tools

Munki

osquery

AutoPkg

Job description

Anthropic seeks an experienced Endpoint Platform Engineer to own the device fleet as a platform. You’ll manage the MDM infrastructure, configuration as code, and patching pipelines for thousands of devices across macOS and Linux.

You’ll collaborate with Security and infrastructure teams to enable secure access decisions, automations, and telemetry-driven policy. This role emphasizes autonomy and proactive risk mitigation.