Sr. Systems Engineer, Client Engineering

Harvey, Inc.; San Francisco, Northern (CA, KY); Hybrid; USD 153,000 - 211,000; Full time

Job summary

Harvey, Inc. is seeking a Senior Systems Engineer to own the endpoint platform across macOS and Windows, shaping deployment, patching, and security baselines. You will drive automation using Python, Bash, Swift, and vendor APIs, and ensure scale across global offices.

The role demands deep experience with Jamf, Intune, Autopilot, and Okta, plus strong communication with non-technical teams in a fast-growing, remote-ready organization.

Qualifications

• 5+ years in endpoint, client, or IT systems engineering.
• Experience running macOS MDM for 1000+ devices.
• Deep hands-on Jamf experience and Windows management via Intune/Autopilot/Entra.
• Strong scripting and automation in Python, Bash, or Swift.
• Familiarity with IdP (Okta preferred) covering SSO, MFA and device trust.
• Excellent communication with non-technical teams and stakeholders.
• Thrives in a fast-paced, global environment.

Responsibilities

• Own the endpoint platform with Jamf Pro, Intune, and Autopilot across macOS and Windows.
• Engineer the device lifecycle from provisioning to retirement with automation.
• Build tooling against vendor APIs and create self-service capabilities for employees.
• Serve as final escalation for endpoint issues, driving root-cause fixes.
• Support a global, in-person-heavy company with time-zone aware documentation.

Skills

Jamf

Intune

Autopilot

Okta

Entra

Python

Bash

Swift

Endpoint management

Security policy

Tools

Jamf

Intune

Autopilot

Okta

Entra

Python

Bash

Swift

Job description

Why Harvey

At Harvey, we're transforming how legal and professional services operate. By combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise, we're reshaping how critical knowledge work gets done for decades to come.

This is a rare chance to help build a generational company at a true inflection point. We have strong product-market fit and world-class investor support. We're scaling fast and defining a new category in real time. The work is ambitious, the bar is high, and the opportunity for growth - personal, professional, and financial - is unmatched.

Our team moves fast, takes ownership, and is deeply committed to the mission - operating with intensity, staying close to our customers, and pushing each other for excellence. We live by three values: Decisiveness, Simplicity, and Job's Not Finished. We act quickly on clear judgment over perfect information, we believe simplicity is what scales, and we're never satisfied with where we are. If you want to do the best work of your career alongside people who share that drive, we'd love to build with you.

At Harvey, the future of professional services is being written today - and we're just getting started.

Role Overview

Harvey runs on a fleet of Macs and Windows devices, and every one of them is the front door to how each Harvey employee does their work. We're seeking a Senior Systems Engineer to own client engineering end to end - Jamf, Intune, Autopilot, Okta device trust, and more, and the automation that ties them together. This is the person who decides how a laptop gets built, secured, patched, recovered, and retired, and who makes those decisions hold up as we scale across offices globally.

The ideal candidate has run a production device management environment at scale and can move between writing the deployment tooling, debugging a broken enrollment, and pushing for improvements to policy, process, and systems along the way.

What You'll Do

Own the endpoint platform. Jamf Pro for macOS, Intune and Autopilot for Windows, and the mobile fleet alongside them. You set configuration standards, patching cadence, and compliance baselines in partnership with Security, and you're accountable for the fleet actually meeting them.

Engineer the device lifecycle. Zero-touch provisioning through Apple Business Manager and Autopilot, automated onboarding and offboarding, hardware refreshes, DLP, and forensics. Where the lifecycle still depends on someone remembering to do something, replace that with code.

Build the automation the fleet runs on. Most of this role's leverage comes from tooling - Python and scripts against Jamf, Intune, and Okta APIs, event-driven workflows, and self-service that lets employees fix their own problems.

Be the final escalation for endpoint issues. IT Operations handles tier 1 and 2 globally; the problems that reach you are the strange ones. You'll fix them, and then fix the class of problem so the next person doesn't file the ticket.

Support a global, in-person-heavy company. Harvey has offices across the US, EMEA, and APAC. You'll build for time zones you aren't in, and document and train the team well enough that someone in each location can resolve issues independently.

What You Have

Minimum 5 years in endpoint, client, or IT systems engineering, including direct ownership of a macOS MDM environment at 1000+ devices.

Deep hands-on Jamf experience, plus real Windows management experience via Intune, Autopilot, and Entra.

Strong scripting and automation ability in Python, Bash, or Swift, with a track record of building tooling against vendor APIs rather than clicking through admin consoles.

Working fluency with an IdP, Okta preferred, covering SSO, MFA, device trust, and how identity and endpoint policy interact.

Strong communication and stakeholder management skills, especially with non-technical teams.

Ability to thrive in a fast-paced, high-growth, and global environment.

Bonus Points:

Experience running endpoint security tooling in a production environment - CrowdStrike or equivalent EDR, managed Chrome Enterprise, DLP.

Endpoint work inside a compliance program (SOC 2, ISO 27001).

Compensation

$153,000 - $210,500 USD

Depending on your location, an Applicant Privacy Notice may apply to you. You can find all of our Applicant Privacy Notices here .

#LI-RB1

Harvey is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.

We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made by emailing [e-mail]