Senior Endpoint Security Engineer: macOS & Automation

GitLab Inc.; United States; Remote; USD 139,000 - 200,000; Full time

Benefits offered by this job

Flexible Paid Time Off

Equity Compensation

Employee Stock Purchase Plan

Growth and Development Fund

Parental Leave

Remote-friendly Benefits

Job summary

GitLab Inc. is seeking a Senior Corporate Security Engineer to secure endpoints across a fully remote environment, with a strong emphasis on macOS.

You will own endpoint hardening, automation, and detection, turning security needs into scalable, auditable systems that minimize friction for users. In your first year, strengthen endpoint security architecture, expand automation, and improve deployment reliability across macOS, iOS, Windows and Linux using Infrastructure-as-Code and GitOps

Qualifications

• Experience designing and delivering endpoint security solutions with scalable controls.
• Deep knowledge of endpoint management platforms (Jamf Pro, FleetDM).
• Hands-on Terraform and IaC with modular design and pipelines.
• GitOps workflows using Git repositories, MR reviews and automated pipelines.

Responsibilities

• Lead security architecture for the endpoint fleet, focused on macOS.
• Design automation for secure endpoint deployment, configuration and lifecycle.
• Manage endpoint and SaaS security via Terraform, VCS, MRs, CI pipelines and rollouts.
• Define baselines across macOS, iOS, Windows, Linux endpoints.
• Develop patching and software distribution aligned with security and compliance.
• Collaborate with IT, Security Operations and Detection & Response teams.
• Drive automation to reduce manual work and enable auditable changes.
• Mentor engineers and serve as senior escalation for complex issues.

Skills

Endpoint security

macOS expertise

Terraform

GitOps

Scripting (bash, Python, PowerShell,Go

Tools

Jamf Pro

FleetDM

CI/CD pipelines

Infrastructure-as-Code

Okta / Google Workspace / LDAP

Job description

GitLab Inc. is seeking a Senior Corporate Security Engineer to secure endpoints across a fully remote environment, with a strong emphasis on macOS.

You will own endpoint hardening, automation, and detection, turning security needs into scalable, auditable systems that minimize friction for users. In your first year, strengthen endpoint security architecture, expand automation, and improve deployment reliability across macOS, iOS, Windows and Linux using Infrastructure-as-Code and GitOps