Endpoint Security Architect — macOS/Windows, IaC

Segment (Twilio); New York (NY); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Flexible PTO

Health insurance

401(k) with employer match

Relocation support to NYC or SF

Job summary

RampRamp is seeking a security-focused architect to lead endpoint protection across macOS, Windows, and BYOD devices. You will implement secure-by-default controls with Terraform and GitOps, automate device lifecycles, and collaborate with IT, SecOps, and engineering to elevate telemetry and detections.

You will mentor engineers and shape scalable, auditable security postures for an evolving AI-infused landscape.

Qualifications

• Experience with macOS security management at scale using MDM tools.
• Strong IaC and GitOps knowledge applied to policy and automation.
• Enterprise Google Workspace administration and policy enforcement.
• Ability to align security with emerging AI-enabled workflows.

Responsibilities

• Write and ship MDM policy as code across macOS, Windows, and mobile.
• Build patch automation to reduce exposure windows without impacting users.
• Manage software distribution across the fleet.
• Analyze fleet telemetry to build dashboards and AI-assisted automation.
• Own browser and extension policy; ensure auditable control surface.
• Serve as last line of defense on endpoint escalations.

Skills

MDM at scale

IaC fundamentals

GitOps

Google Workspace admin

AI perspective on security

Tools

Jamf Pro

FleetDM

Terraform

Job description

RampRamp is seeking a security-focused architect to lead endpoint protection across macOS, Windows, and BYOD devices. You will implement secure-by-default controls with Terraform and GitOps, automate device lifecycles, and collaborate with IT, SecOps, and engineering to elevate telemetry and detections.

You will mentor engineers and shape scalable, auditable security postures for an evolving AI-infused landscape.