Senior Endpoint Engineer: macOS Security & Zero Trust

Thinking Machines Lab Inc.; San Francisco (CA); On-site; USD 200,000 - 325,000; Full time

Benefits offered by this job

Health, dental & vision benefits

Unlimited PTO

Paid parental leave

Relocation support

Job summary

Thinking Machines Lab is seeking a seasoned IT/endpoint engineer to own macOS configuration, security, and deployment across a large fleet. The role emphasizes running MDM as a production service, migration planning, and building automation for patching and posture evaluation.

You will collaborate with Security and Identity teams to advance Zero Trust, posture signals, and device provisioning in a hybrid New York/San Francisco environment.

Qualifications

• Strong knowledge of macOS internals and enterprise deployment.
• Experience with zero-touch provisioning and patching workflows.
• Proficiency in Git-based workflows and GitOps.
• Ability to design scalable endpoint configurations and tooling.
• Proven track record delivering complex IT/endpoint projects.

Responsibilities

• Own macOS configuration profiles, security policies, and remediation scripts.
• Operate MDM platforms as production services with CI/CD pipelines.
• Lead MDM migrations and ensure minimal employee disruption.
• Manage Santa and Rudolph tooling, binary authorization, and telemetry.
• Collaborate on Zero Trust posture, device trust, and authentication integration.
• Build automated patching, deployment, and continuous posture evaluation.

Skills

macOS internals

Zero Trust concepts

Endpoint configuration scripting

Automation & scripting

Communication

Tools

Iru

Fleet

Apple Business Manager

Apple Device Enrollment

osquery

Terraform

Jamf

Job description

Thinking Machines Lab is seeking a seasoned IT/endpoint engineer to own macOS configuration, security, and deployment across a large fleet. The role emphasizes running MDM as a production service, migration planning, and building automation for patching and posture evaluation.

You will collaborate with Security and Identity teams to advance Zero Trust, posture signals, and device provisioning in a hybrid New York/San Francisco environment.