Endpoint Systems Engineer — Mac/Windows Automation

Ibotta, Inc.; Denver, Northern (CO, KY); Hybrid; USD 100,000 - 110,000; Full time

Benefits offered by this job

Benefits package

Employee Stock Purchase Program

401k match

Denver office perks

Job summary

Ibotta, located in Denver, CO, seeks an IT Systems Engineer focused on endpoint and device management. You will own day-to-day build, automation, and security posture for Mac and Windows fleets via Jamf Pro and Microsoft Intune, provisioning, patching, compliance, and identity-integrated device access.

This hybrid role requires 3 in-office days (Tue–Thu) and candidates must reside in the United States. Relocation bonus offered if you are not based in Denver.

Qualifications

• 4+ years in endpoint engineering, systems administration, or IT operations.
• Bachelor's degree in CS/IT/IS preferred; equivalent experience accepted.
• Hands-on with Jamf Pro and Microsoft Intune on macOS and Windows.
• Scripting proficiency in at least one language; others welcome.
• Knowledge of IdP, device compliance, and conditional access.
• Experience with patch management across a distributed fleet.
• Experience provisioning devices at scale (zero-touch, Autopilot, ABM/DEP).
• Kanban/Agile; ticket-driven work with documentation.
• Strong written and verbal communication.
• Ability to meet deadlines and adapt to priorities.

Responsibilities

• Administer Jamf Pro and Microsoft Intune enrollment and config profiles.
• Implement zero-touch provisioning and authentication workflows.
• Maintain security baselines and CIS/SCUBA compliance.
• Drive Windows patch automation to parity with macOS.
• Develop scripts for patch deployment, packaging, and lifecycle automation.
• Maintain infrastructure/automation code in Git with PR reviews.
• Package, deploy, and version third-party apps across fleet.
• Own fleet lifecycle: provisioning, refreshes, recovery, offboarding.
• Serve as Tier 3 for endpoint incidents; perform root-cause analysis.
• Create knowledge base, runbooks, and training for desktop support.

Skills

Jamf Pro

Microsoft Intune

PowerShell

Bash

Python

Swift

Zero-touch provisioning

Automation

Git

Jira

Education

Bachelor's degree or equivalent

Tools

Apple Business Manager

Platform SSO

Windows Autopilot

Okta

Entra ID

Job description

Ibotta, located in Denver, CO, seeks an IT Systems Engineer focused on endpoint and device management. You will own day-to-day build, automation, and security posture for Mac and Windows fleets via Jamf Pro and Microsoft Intune, provisioning, patching, compliance, and identity-integrated device access.

This hybrid role requires 3 in-office days (Tue–Thu) and candidates must reside in the United States. Relocation bonus offered if you are not based in Denver.