Endpoint Security Engineer, Zero-Touch & Compliance

Crusoe; San Francisco (CA); On-site; USD 170,000 - 205,000; Full time

Benefits offered by this job

Competitive compensation

Equity packages

Paid time off

Healthcare benefits

HSA contributions

Parental leave

Retirement plan

Tuition reimbursement

Wellness programs

Commuter benefits

Cell phone stipend

Travel benefits

Job summary

Crusoe is seeking a Security Engineer to join our Security Engineering team in San Francisco, Sunnyvale, or Denver. You’ll build secure-by-default endpoints, shape security posture, and drive architectural initiatives for macOS, Windows, iOS, and Android devices.

You’ll integrate with CIS SOC 2, EDR, and SIEM tools, own device trust policies, and automate protections with Bash, Python, or PowerShell. A strong, hands-on security mindset is essential.

Qualifications

• Experience with OSQuery and CrowdStrike for endpoint visibility and threat detection.

Responsibilities

• Administer and optimize Jamf and Microsoft Intune environments across macOS, Windows, iOS, and Android.
• Build automated enrollment workflows including ABM and Windows Autopilot for zero-touch provisioning at scale.
• Own patch management with SLAs for OS and app updates across platforms.
• Define and enforce device compliance baselines aligned with CIS Benchmarks and SOC 2.
• Collaborate on device trust policies, CA enforcement, and certificate-based Wi-Fi/VPN authentication.
• Develop scripts to reduce workload and build self-service tooling for end users.
• Maintain MDM runbooks, device policy docs, and enrollment workflows across platforms.
• Serve as MDM escalation point and mentor junior IT staff.

Skills

OSQuery

CrowdStrike

Okta

Entra ID

Jamf/Kandji

Microsoft Intune

Autopilot

SCEP/PKCS

Certificate infrastructure

Bash

Python

PowerShell

Documentation

Bachelor’s degree

Education

Bachelor’s degree in IT, Computer Science, or equivalent

Tools

Jamf

Kandji

Microsoft Intune

Apple Business Manager

Windows Autopilot

Job description

Crusoe is seeking a Security Engineer to join our Security Engineering team in San Francisco, Sunnyvale, or Denver. You’ll build secure-by-default endpoints, shape security posture, and drive architectural initiatives for macOS, Windows, iOS, and Android devices.

You’ll integrate with CIS SOC 2, EDR, and SIEM tools, own device trust policies, and automate protections with Bash, Python, or PowerShell. A strong, hands-on security mindset is essential.