Remote Senior Endpoint Security Architect (macOS)

GitLab; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

GitLab is seeking a Senior Corporate Security Engineer to secure endpoints across a fully remote environment, with a strong emphasis on macOS. You will own endpoint hardening, automation, and scalable security controls using code.

You’ll collaborate across IT, Security Operations, and Detection and Response to improve telemetry, detections, and response models, while mentoring engineers and driving auditable change management.

Qualifications

• Experience designing endpoint, systems, or corporate security solutions.
• Ability to implement scalable, durable security controls using code.
• Hands-on experience with macOS environments and security tooling.

Responsibilities

• Lead the security architecture of GitLab's endpoint fleet, focused on macOS.
• Design automation for secure endpoint deployment and lifecycle management.
• Manage endpoint and SaaS security configuration via Terraform and CI pipelines.
• Define and enforce security baselines across macOS, iOS, Windows, and Linux endpoints.
• Develop patching and software distribution aligned with security needs.
• Collaborate with IT, Security Ops, and Detection & Response to improve telemetry.
• Drive automation and auditable change management to reduce manual work.
• Mentor engineers and act as escalation for endpoint security issues.

Skills

Endpoint security

Terraform IaC

GitOps workflows

Bash scripting

macOS security

Automation

Team collaboration

Tools

Jamf Pro

FleetDM

Okta

Google Workspace

LDAP

Terraform

Job description

GitLab is seeking a Senior Corporate Security Engineer to secure endpoints across a fully remote environment, with a strong emphasis on macOS. You will own endpoint hardening, automation, and scalable security controls using code.

You’ll collaborate across IT, Security Operations, and Detection and Response to improve telemetry, detections, and response models, while mentoring engineers and driving auditable change management.