Senior Endpoint Engineer - macOS Security & Deployment

PVH (Tommy Hilfiger/Calvin Klein); San Francisco (CA); On-site; USD 150,000 - 190,000; Full time

Job summary

Thinking Machines Lab in San Francisco seeks an experienced IT Endpoint Engineer to design and operate secure macOS configurations, policies, and deployments. You will manage an MDM platform as a production service and drive a migration from Iru to Fleet with minimal disruption.

Lead Zero Trust integration, posture evaluation, and automated patching while partnering with Security and Identity. Strong cross-team collaboration is essential to deliver reliable employee computing.

Qualifications

• 8+ years of experience building and operating secure IT or endpoint systems in complex environments.
• Experience managing a large fleet of macOS devices through a modern MDM platform.
• Experience managing endpoint configuration through scripted deployments, Git-based workflows, or a full GitOps model.
• Deep knowledge of macOS internals, enterprise deployment, security controls, and troubleshooting.
• Experience designing and operating zero-touch Mac provisioning, patching, and software-distribution workflows.
• Experience using device health and security signals to evaluate endpoint compliance.
• Experience successfully delivering complex technical projects from conception through production.
• Strong ability to solve ambiguous problems involving multiple teams and stakeholders.

Responsibilities

• Endpoint Configuration as Code: Author, review, test, and progressively deploy macOS configuration profiles, security policies, queries, and remediation scripts.
• MDM Platform Engineering: Operate our MDM platform as a production service, including configuration as code, observability, upgrades, reliability, incident response.
• MDM Migration: Lead the evaluation, design, testing, and execution of migration from Iru to Fleet with minimal disruption.
• Zero Trust and Device Trust: Partner with Security and Identity to make device trust a core component of Zero Trust architecture.
• Continuous Posture Evaluation: Build systems that evaluate device health and security posture and remediate drift.
• Automation: Build tools and AI-assisted workflows that reduce repetitive operational work.
• Endpoint Security: Collaborate on macOS hardening, binary authorization, vulnerability management, and policy enforcement.
• Technical Leadership: Help define the endpoint roadmap and lead complex initiatives from conception through production.

Skills

macOS internals

MDM experience

GitOps workflows

Zero Trust

Automation

Troubleshooting

Cross-team collaboration

Security controls

Tools

Git

Apple Business Manager

MDM platforms

Job description

Thinking Machines Lab in San Francisco seeks an experienced IT Endpoint Engineer to design and operate secure macOS configurations, policies, and deployments. You will manage an MDM platform as a production service and drive a migration from Iru to Fleet with minimal disruption.

Lead Zero Trust integration, posture evaluation, and automated patching while partnering with Security and Identity. Strong cross-team collaboration is essential to deliver reliable employee computing.