Senior Endpoint Systems Engineer (HYBRID: Chicago)

Tempus AI, Inc.; Chicago (IL); Hybrid; USD 130,000 - 145,000; Full time

Job summary

Ambry Genetics Corporation is seeking a Senior Endpoint Systems Engineer to lead the health, security, and lifecycle management of our global endpoint fleet. The role requires deep dual‑platform expertise across Windows and macOS and hands‑on experience with MDM platforms.

You will architect scalable deployment workflows, drive optimization of Intune, Jamf Pro, and Workspace ONE, and mentor junior staff while partnering with Security and IAM teams to enforce compliance and secure access.

Qualifications

• 5–8+ years of dedicated experience in endpoint engineering, systems administration, or infrastructure architecture within an enterprise environment.
• Dual‑Platform Mastery: Comprehensive, expert‑level knowledge of both Windows and macOS operating systems, system internals, and enterprise deployment methodologies.
• Enterprise Tooling Expertise: Deep hands‑on engineering experience configuring and managing Microsoft Intune, Jamf Pro, and Workspace ONE at scale.
• Advanced Scripting: Strong proficiency in PowerShell and Bash/Zsh (Python or Swift is a significant plus) for advanced automation, custom scripts, and utilizing MDM APIs.
• Leadership & Communication: Proven ability to lead projects independently, collaborate across multi‑functional engineering teams, and explain complex technical concepts to non‑technical stakeholders.

Responsibilities

• Architect, optimize, and maintain our global UEM infrastructure using Microsoft Intune, Jamf Pro, and VMware Workspace ONE.
• Design and scale automated deployment, provisioning, and configuration management workflows for Windows 10/11 and macOS.
• Standardize and evolve modern deployment frameworks using Windows Autopilot, ABM, and ADE for zero-touch provisioning.
• Develop, test, and maintain code repositories (PowerShell, Bash, Python) to automate tasks and API integrations.
• Engineer endpoint security baselines (CIS Benchmarks), disk encryption (BitLocker/FileVault), and EDR deployments.
• Lead integration of endpoint platforms with IAM systems (Entra ID, Okta) including SSO extensions.
• Mentor Tier 1/2 staff and maintain endpoint technology roadmaps and SOPs.

Skills

Dual-Platform Mastery

Endpoint engineering

Intune/Jamf/Workspace ONE

Advanced scripting

Leadership & communication

Tools

Intune

Jamf Pro

Workspace ONE

Job description

Position Overview

Passionate about precision medicine and advancing the healthcare industry? Recent advancements in underlying technology have finally made it possible for AI to impact clinical care in a meaningful way. Tempus' proprietary platform connects an entire ecosystem of real‑world evidence to deliver real‑time, actionable insights to physicians, providing critical information about the right treatments for the right patients, at the right time. Location: Hybrid: Chicago (3 days on-site). We are seeking a highly skilled and strategic Senior Endpoint Systems Engineer to join our IT team. In this role, you will serve as the primary architect and technical lead for the health, security, compliance, and lifecycle management of our global endpoint fleet. Our environment features a balanced mix of both Windows and macOS devices. We need a senior professional with deep, dual‑platform expertise who can design scalable deployment workflows, architect robust endpoint security configurations, and optimize our enterprise toolset—specifically Microsoft Intune, Jamf Pro, and Workspace ONE. As a senior member of the team, you will drive technical strategy, lead complex integration projects, and mentor junior IT staff to ensure a seamless and secure digital employee experience.

Key Responsibilities

• Enterprise MDM Architecture: Architect, optimize, and maintain our global UEM infrastructure using Microsoft Intune, Jamf Pro, and VMware Workspace ONE.
• Strategic Fleet Engineering: Design and scale automated deployment, provisioning, and configuration management workflows for a balanced fleet of Windows 10/11 and macOS hardware.
• Modern Provisioning & Lifecycle: Standardize and evolve modern deployment frameworks utilizing Windows Autopilot, Apple Business Manager (ABM), and Automated Device Enrollment to achieve zero‑touch provisioning.
• Advanced Scripting & Automation: Develop, test, and maintain robust code repositories (PowerShell for Windows; Bash/Zsh/Python for macOS) to automate complex administrative tasks, custom reporting, and API integrations.
• Security & Compliance Governance: Partner closely with the Security team to engineer and enforce endpoint security baselines (e.g., CIS Benchmarks), disk encryption protocols (BitLocker, FileVault), and EDR/antivirus agent deployments.
• Identity & Access Architecture: Lead the integration of endpoint platforms with enterprise identity and access management (IAM) systems (e.g., Entra ID, Okta), including modern single sign‑on (SSO) extensions.
• Tier 3/4 Escalation & Mentorship: Act as the highest tier of technical escalation for complex endpoint, OS, and software issues. Provide mentorship, guidance, and technical training to Tier 1/2 service desk and junior systems administrators.
• Roadmapping & Documentation: Maintain a forward‑looking roadmap for endpoint technologies, evaluate emerging tools, and author authoritative architectural diagrams and standard operating procedures (SOPs).

Required Skills & Qualifications

• 5–8+ years of dedicated experience in endpoint engineering, systems administration, or infrastructure architecture within an enterprise environment.
• Dual‑Platform Mastery: Comprehensive, expert‑level knowledge of both Windows and macOS operating systems, system internals, and enterprise deployment methodologies.
• Enterprise Tooling Expertise: Deep hands‑on engineering experience configuring and managing Microsoft Intune, Jamf Pro, and Workspace ONE at scale.
• Advanced Scripting: Strong proficiency in PowerShell and Bash/Zsh (Python or Swift is a significant plus) for advanced automation, custom scripts, and utilizing MDM APIs.
• Leadership & Communication: Proven ability to lead projects independently, collaborate across multi‑functional engineering teams, and explain complex technical concepts to non‑technical stakeholders.

Salary

Salary range: $130,000–$145,000 annually (Illinois). The range may vary for other locations.

Benefits

• Incentive compensation and restricted stock units.
• Medical, dental, vision, and other insurance benefits.
• Paid sick leave and generous paid time off (PTO).
• Other benefits may depend on the position.

Company Information

Ambry Genetics Corporation is a CAP‑accredited and CLIA‑licensed molecular genetics laboratory based in AlisoViejo, California. We are a genetics‑based healthcare company dedicated to open scientific exchange to better understand and treat all human disease. At Ambry, everyone is welcome.

EEO Statement

We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Qualified applicants with arrest or conviction history will be considered regardless of their arrest or conviction history, consistent with applicable laws. If you have a disability or special need that requires accommodation, please contact us.