Senior Endpoint Engineer

Wave Mobile Money; United States; Remote; USD 97,000 - 133,000; Full time

Benefits offered by this job

Travel to Africa: yearly

Stipend $1,200 for meeting coworkers

Subsidized health insurance

6 months parental leave

Unlimited vacation (20-day minimum)

Charitable donation matching $10,000

Job summary

Wave Mobile Money is seeking a Sr Endpoint Engineer to consolidate and update legacy systems with a focus on automation. You will own MDM platforms, endpoint policies, deployment pipelines, and fleet tooling that power how Wave staff interact with devices.

The role blends architecture with hands-on work in a fast-growth environment. The candidate will lead end-to-end endpoint design, provisioning standards, fleet reporting, and security integration, collaborating with Information Security, IT,

Qualifications

• BA in Computer Science, Economics, Data Analytics, or equivalent experience.
• 5+ years in endpoint engineering or systems engineering with hands-on ownership of multi-platform fleets at scale.
• Demonstrated understanding of at least two: ChromeOS fleet management, Jamf, Android MDM, or Linux endpoint management.
• Strong understanding of endpoint security principles: EDR integration, CIS/SOC2 baselines, and disk encryption.

Responsibilities

• Own and operate Wave's endpoint function end-to-end across ChromeOS, macOS, Android, and Linux.
• Design and enforce endpoint security policies with Information Security.
• Build automated deployment pipelines for OS updates, software distribution, and configuration changes.
• Define and manage device lifecycle: provisioning, imaging, refresh cycles, decommissioning, fleet reporting.
• Establish cross‑platform compatibility standards and tooling for a heterogeneous fleet.
• Create runbooks for provisioning and onboarding used by Local IT teams.
• Own fleet observability: dashboards, compliance reporting, and audit-ready docs.
• Evaluate vendor relationships for endpoint tooling and related platforms.
• Mentor junior profiles in endpoint and device management.

Skills

Endpoint engineering

Multi‑platform fleet management

Automation scripting

Security collaboration with InfoSec

Communication with IT leadership

Education

BA in Computer Science, Economics, Data Analytics or equivalent

Tools

CrowdStrike Falcon

Google Workspace Admin Console

Jamf

Android Enterprise (EMM/MDM)

Ansible/Chef/Puppet

Job description

We're making Africa the first cashless continent.

In 2017, over half the population in Sub-Saharan Africa had no bank account. That's for good reason—the fees are too high, the closest branch can be miles away, and nobody takes cards. Without access to financial institutions, people are forced to keep their savings under the mattress. Small business owners rely on lenders who charge extortionate rates. Parents spend hours waiting in line to pay school fees in cash.

We're solving this by building financial services that just work: no account fees, instantly available, and accepted everywhere. In places where electricity, water and roads don't always work, you can still send money with Wave. In 2017, we launched a mobile app in Senegal for cash deposit, withdrawal, and peer-to-peer and business payments. Now, we have millions of users across 9 countries and are growing fast.

Our goal is to make Africa the first cashless continent and that's where you come in...

How you'll help us achieve it

Our mission

We're making Africa the first cashless continent.

In 2017, over half the population in Sub-Saharan Africa had no bank account. That's for good reason—the fees are too high, the closest branch can be miles away, and nobody takes cards. Without access to financial institutions, people are forced to keep their savings under the mattress. Small business owners rely on lenders who charge extortionate rates. Parents spend hours waiting in line to pay school fees in cash.

We're solving this by building financial services that just work: no account fees, instantly available, and accepted everywhere. In places where electricity, water and roads don't always work, you can still send money with Wave. In 2017, we launched a mobile app in Senegal for cash deposit, withdrawal, and peer-to-peer and business payments. Now, we have millions of users across 9 countries and are growing fast.

Our goal is to make Africa the first cashless continent and that's where you come in...

We’re looking for a Sr Endpoint Engineer who’s excited about consolidating and updating legacy systems with an eye for automation. You'll be responsible for the MDM platforms, endpoint policies, device deployment pipelines, and fleet tooling that underpin how every employee at Wave interacts with their device. This role blends architectural ownership with hands‑on execution, requiring you to deliver scalable, resilient, and compliant endpoint solutions in a fast growth environment.

You'll own the endpoint function end-to-end: platform and policy design, provisioning standards, fleet reporting, and security integration. You'll work closely with Information Security, IT, and People Operations, and you'll be the person who sets the technical direction for how Wave manages devices at scale. The first year will be weighted toward remediation and foundation-building before shifting toward automation and scale. Candidates who have built in scrappy, high‑complexity environments will be better prepared for this role than those who have only operated mature platforms in static environments.

• Own and operate Wave's MDM platforms across ChromeOS (GWS Admin Console), macOS (Jamf), Android, (and Linux environments): configuration, policy design, maintenance, and roadmap.
  • Manage ChromeOS device policy in Google Workspace: enrollment configuration, org unit structure, security policies, extension management, and OS version enforcement across the majority of the fleet.
• Design and enforce endpoint security policies in collaboration with Information Security, including EDR integration (CrowdStrike Falcon), compliance baselines, and patch management.
• Build and maintain automated deployment pipelines for OS updates, software distribution, and configuration changes: minimizing manual intervention and maximizing consistency.
• Define and manage the device lifecycle: provisioning standards, imaging, refresh cycles, decommission processes, and fleet reporting.
• Establish cross‑platform compatibility standards and tooling for a heterogeneous fleet (macOS, Linux, Android, with awareness of ChromeOS and Windows edge cases).
• Build the tooling and runbooks that Local IT teams use to execute provisioning and onboarding on the ground. You set the standard, they execute it.
• Own fleet observability: dashboards, compliance reporting, patch currency metrics, and audit‑ready documentation.
• Evaluate and own vendor relationships for endpoint tooling, including MDM, patch management, and related platforms.
• Mentor junior profiles working in endpoint and device management.

Key Details

• This is a fully remote role. Candidates must be based in one of our talent hub countries (UK, Spain, USA, Canada, Kenya and Ghana) or in one of our operating markets in Africa including Senegal, Côte d'Ivoire, or Burkina Faso. Wherever you are based, you must have reliable Internet access and have work authorization.
• Wave covers travel once per year to one of our operating countries in Africa, as well as a yearly stipend of $1,200 to meet with coworkers.
• Our salaries are competitive and are calculated using a transparent formula. For this role, depending on your experience level and location, we are offering a salary range of $96,500 to $133,100 USD (paid in your local currency equivalent) plus a generous equity package.
• Major benefits:
  • Subsidized health insurance for you and your dependents and retirement contributions (both vary from country to country)
  • 6 months fully paid parental leave and subsidized fertility assistance
  • Unlimited vacation with a 20-day minimum requirement
  • $10,000 annual charitable donation matching

Requirements

• BA in Computer Science, Economics, Data Analytics, or equivalent experience in the required field.
• 5+ years in endpoint engineering or systems engineering with hands‑on ownership of multi‑platform fleets at scale.
• Demonstrated strong understanding of two out of the following:
  • ChromeOS fleet management via Google Workspace Admin Console (device policy, org unit design, forced installs, Context‑Aware Access).
  • Deep macOS expertise: Jamf administration, macOS internals, configuration profiles, extension attributes, scripting (Bash, Python, or Swift).
  • Android MDM experience: enterprise enrollment, policy enforcement, and management via Android Enterprise (EMM/MDM platforms)
  • Linux endpoint management experience: package management, configuration tooling (Ansible, Chef, Puppet, or similar), and hardening
• Windows/Intune experience is not required, but can be considered applicable if enough strength in our existing device fleet is demonstrated.
• Strong understanding of endpoint security principles: EDR integration, compliance baselines (CIS, SOC2), certificate management, and disk encryption enforcement.
• Familiarity with identity and access tooling as it touches endpoints: SSO, certificate‑based auth, conditional access policies (Okta or equivalent).
• Scripting and automation capability sufficient to build reliable deployment pipelines and reduce manual operational work.
• Fleet reporting and observability, meaning you can tell leadership the compliance posture of the fleet at any time.

You might be a good fit if you

• You've owned an endpoint function through a period of growth or organizational change, not just maintained a stable one.
• You build for the people executing on the ground. Your runbooks actually work, your tooling has sensible defaults, and your policies account for the reality of field operations.
• You can communicate risk and tradeoffs clearly to InfoSec, IT leadership, and non‑technical stakeholders.
• You're comfortable operating with ambiguity and incomplete inventory data, and your first instinct is to establish observability, not assume things are fine.
• You have experience with CrowdStrike Falcon or equivalent EDR platforms
• Prior work in a fintech or regulated industry with compliance‑driven endpoint requirements
• Have French language skills or an interest in learning French
• Experience managing device fleets in multi‑country markets, ideally including emerging market contexts.

Our team

• We have a rapidly growing in‑country team in Senegal, Côte d'Ivoire, Mali, Burkina Faso, The Gambia, Uganda, Niger, Sierra Leone, and Cameroon plus remote team members spread across the world.
• We're deeply passionate about our mission of bringing radically affordable financial services to the people who need them most.
• We foster autonomy for our employees. You'll own your projects at every stage, from understanding the problem to monitoring your solution in production.
• We raised the largest Series A in Africa in 2021. Our world‑class investors, include Founders Fund, Sequoia Heritage, Stripe, Ribbit Capital, Y Combinator, and Partech Africa.
• We are onY Combinator's top companies by revenue.

Wave is an equal‑opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.