Senior Endpoint Architect (Mac/Windows, IaC)

Visa Hunt; New York (NY); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Flexible PTO

Home-office stipend

Health stipend

Relocation assistance

Weekly coffee stipend

Job summary

Ramp is hiring an Endpoint Security Architect to secure macOS, Windows, and BYOD devices across the fleet. You’ll implement secure-by-default controls with Terraform and GitOps, automate the device lifecycle, and partner with IT, SecOps, and engineering to sharpen telemetry and detections.

We’re looking for a strong background in macOS security, IaC, and Google Workspace governance, plus a vision on how AI changes the security surface.

Qualifications

• Deep macOS security experience with scale and MDM tooling.
• Strong IaC and GitOps fundamentals in production environments.
• Solid knowledge of Google Workspace in managed enterprise settings.
• Ability to reason about agentic AI changes to security surface.

Responsibilities

• Write and ship MDM policy as code for macOS, Windows, and mobile with controlled rollouts.
• Build patch automation to close exposure windows quickly.
• Manage software distribution across the fleet.
• Mine fleet telemetry to build dashboards, alerts, and AI-assisted toil reduction.
• Own browser/extension policy and keep the control plane auditable.
• Serve as the last line of defense on endpoint escalations.

Skills

macOS security

IaC fundamentals

GitOps delivery

Google Workspace admin

AI risk perspective

Tools

Jamf Pro

FleetDM

Terraform

Job description

Ramp is hiring an Endpoint Security Architect to secure macOS, Windows, and BYOD devices across the fleet. You’ll implement secure-by-default controls with Terraform and GitOps, automate the device lifecycle, and partner with IT, SecOps, and engineering to sharpen telemetry and detections.

We’re looking for a strong background in macOS security, IaC, and Google Workspace governance, plus a vision on how AI changes the security surface.