Lead Integration Engineer

Capital One National Association; Richmond (VA); On-site; USD 150,000 - 171,000; Full time

Job summary

Capital One seeks a Lead Integration Engineer to join the Mac Engineering team, focusing on macOS vulnerability management and observability. You will patch, test, and automate deployment of software, review vulnerability reports, and drive improvements with partners and telemetry.

Ideal candidates bring extensive JAMF Pro experience, scripting skills (Shell/Python/AppleScript), and a strong background in vulnerability management and agile collaboration within a growing platform.

Qualifications

• High School Diploma, GED, or equivalent certification.
• At least 2 years of experience managing macOS devices with JAMF Pro.
• At least 2 years of experience with Vulnerability Management and patching.
• At least 2 years of experience developing Shell, AppleScript, or Python scripts.

Responsibilities

• Package, test, and schedule patches for business software on release.
• Review reports and investigate devices with active vulnerabilities.
• Engage with vulnerability management partners to debug false-positives.
• Escalate vulnerabilities that need exceptions due to user impact.
• Assist with packaging requests for new software and updates.
• Suggest improvements to vulnerability management posture and metrics.
• Review automation processes and ensure client software updates.
• Test and validate new software and agents for deployment.
• Improve vulnerability observability with telemetry from Mac endpoints.

Skills

Shell scripting

Python scripting

AppleScript

Vulnerability management

Patching

Testing & validation

Automation

Education

Bachelor's Degree

Tools

JAMF Pro

Composer

Apple's package utility

Suspicious Package

Job description

Lead Integration Engineer

Capital One is looking for a Lead Integration Engineer to join our growing Mac Engineering team. The platform has grown to support over 40,000 endpoints in recent years, as one of the quickest growing platforms at Capital One. The engineering role will be focused on macOS vulnerability management, ensuring our fleet remains secure and “vuln-free”. The engineer will have opportunities to identify and implement solutions for improving our vulnerability management processes and observability, maintaining existing processes and assisting other members of our engineering team with software testing/validation.

Responsibilities

• Package, test, and schedule out routine patches for business software when vulnerability patch fixes are released
• Review vulnerability management reports and investigate devices with active vulnerabilities to drive down vulnerable endpoints
• Engage with our vulnerability management partners for assistance with debugging false-positives, or getting more information related to vulnerabilities
• Escalate vulnerabilities/patching operations that need an exception due to potential user impact
• Assist with business-as-usual packaging requests for new software and software updates
• Research and suggest improvements to our vulnerability management posture on endpoints to improve our overall compliance metrics
• Periodically review existing automation processes to ensure they are working as expected and automatically updating client software
• Assist with testing and validation of new software and agents the engineering team is planning to deploy
• Improve vulnerability observability with telemetry from Mac endpoints to better inform decisions with data and alert on problems as they arise

Basic Qualifications

• High School Diploma, GED, or equivalent certification
• At least 2 years of experience of managing macOS devices leveraging JAMF Pro
• At least 2 years of experience with Vulnerability Management and patching
• At least 2 years of experience using packaging tools (JAMF's Composer, Apple's package utility, or Suspicious Package)
• At least 2 years of experience developing Shell scripts, AppleScript, or Python scripts

Preferred Qualifications

• Bachelor’s Degree
• One or more of the following JAMF Pro Certifications: JAMF Pro 200, 300, or 400.
• 2+ years of experience in Change Management process
• 2+ years of experience working within an Agile environment
• 2+ years of experience with vulnerability management reporting tools: Qualys, Crowdstrike, Symantec, Trellix, or Nessus.
• Experience with Mac Admins community and available open source solutions

The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.

McLean, VA: $164,800 - $188,100 for Lead Platform Engineer

Plano, TX: $149,800 - $171,000 for Lead Platform Engineer

Richmond, VA: $149,800 - $171,000 for Lead Platform Engineer

Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate’s offer letter.

This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.

Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.

This role is expected to accept applications for a minimum of 5 business days. No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City’s Fair Chance Act; Philadelphia’s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.

If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at [e-mail].

For technical support or questions about Capital One’s recruiting process, please send an email to [e-mail].

Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.

Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).