Mac Endpoint Engineer: Secure MDM & Automation

Anthropic Limited; San Francisco (CA); Hybrid; USD 285,000 - 325,000; Full time

Benefits offered by this job

Competitive compensation

Generous vacation and parental leave

Flexible working hours

Office space in San Francisco

Equity donation matching

Job summary

Anthropic is seeking a senior Endpoint Platform Engineer to own the MDM-powered fleet platform end-to-end. You will manage the infrastructure, configuration, patching pipelines, and telemetry to validate device trust and enable secure access decisions.

You’llPartner with Security and Infrastructure teams to harden endpoints, implement zero-touch provisioning, and drive automation to reduce manual ops while maintaining high autonomy for the team.

Qualifications

• 8+ years building secure IT systems in complex environments.
• Experience leading projects across multiple teams.
• Experience managing endpoint fleets of macOS devices with MDM.
• Configuration as code with version control and peer review.
• Deep knowledge of macOS internals (launchd, TCC, system extensions).
• Proficient in Python and shell scripting.

Responsibilities

• Own endpoint configuration as code; author, review, test, roll out policies across macOS and mobile with canary stages.
• Operate the MDM platform as a production service incl. IaC, observability, upgrades, incident response.
• Build patch management automation with rapid enforcement timelines and good UX.
• Design zero touch provisioning to ship devices ready on day one.
• Collaborate with Security on endpoint hardening and compliance controls.
• Turn fleet telemetry into policy dashboards and automatic ops workflows.

Skills

8+ years in secure IT

MDM fleet management

Endpoint configuration as code

macOS internals

Python

Shell scripting

Education

Bachelor’s degree or equivalent

Tools

Munki

osquery

AutoPkg

Job description

Anthropic is seeking a senior Endpoint Platform Engineer to own the MDM-powered fleet platform end-to-end. You will manage the infrastructure, configuration, patching pipelines, and telemetry to validate device trust and enable secure access decisions.

You’llPartner with Security and Infrastructure teams to harden endpoints, implement zero-touch provisioning, and drive automation to reduce manual ops while maintaining high autonomy for the team.