Mac Endpoint Engineer — AI-Driven Fleet & Security

Legora; New York (NY); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Medical, Dental & Vision

401(K) with company match

Unlimited PTO

Parental leave

Lunch provided daily

Job summary

Legora is seeking an accomplished Endpoint Engineer to design and operate a secure, AI-enabled IT platform. You will own the macOS fleet, implement declarative management, and advance security, observability, and automation across a distributed environment.

You’ll work with Apple Business Manager, MDM tooling, and code-based configurations, partnering with IT and security teams to keep the fleet healthy and productive. Union Square, New York office-based role.

Qualifications

• 8+ years building and operating secure endpoint or IT systems.
• Strong coding capabilities with production-grade code in Python; Swift/Go a plus.
• Experience with AI-assisted operations and LLM tools.
• Deep knowledge of macOS internals and endpoint security.
• Ability to ship changes with Git-based workflows, staging, and rollback.

Responsibilities

• Manage endpoint configuration as code: macOS profiles, remediation scripts, and rollout.
• Run MDM as a production service with observability and upgrades.
• Automate device lifecycle from provisioning to deprovisioning.
• Own binary authorization and policy synchronization for macOS 27+.
• Build continuous posture evaluation and real-time health dashboards.
• Turn fleet telemetry into compliance and risk decisions.
• Develop AI-assisted ops to automate repetitive tasks.
• Define the endpoint roadmap and drive architectural decisions.

Skills

Endpoint engineering

Python

Swift

Go

Git workflows

AI/LLMs

macOS internals

Declarative device management

Observability

Security

Tools

Jamf

Kandji (Iru)

osquery

Apple Business Manager

MDM

Terraform

Intune

Job description

Legora is seeking an accomplished Endpoint Engineer to design and operate a secure, AI-enabled IT platform. You will own the macOS fleet, implement declarative management, and advance security, observability, and automation across a distributed environment.

You’ll work with Apple Business Manager, MDM tooling, and code-based configurations, partnering with IT and security teams to keep the fleet healthy and productive. Union Square, New York office-based role.