Staff IT Systems Engineer, Endpoints

Lila Sciences, Inc.; Cambridge (MA); On-site; USD 140,000 - 173,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Employer-paid life and disability保险

Paid time off with holidays

Job summary

Lila Sciences, Inc. is hiring a Staff IT Systems Engineer, Endpoints to own the architecture and roadmap for endpoint management across macOS, Windows, Linux, and mobile devices.

This hands-on staff role will drive configuration-as-code, CI/CD rollout, and zero-touch provisioning while mentoring IT and Security engineers. You will partner with Security, Research Computing, and Lab Operations to secure device posture, implement trusted endpoints, and reduce manual toil, with a focus on auditable,

Qualifications

• Deep experience in IT systems engineering and endpoint engineering with staff-level ownership.
• Strong experience with MDM/UEM platforms (Jamf, Intune, Workspace ONE).
• Experience managing endpoint configuration through code, automation, CI/CD.
• Systems knowledge across macOS and Windows endpoints.
• Automation using Python, Bash, PowerShell, APIs.
• Experience with AI-assisted engineering to reduce operational toil in IT/endpoint ops.
• Experience partnering with Security on endpoint hardening, device trust, EDR, or Zero Trust.
• Mentor engineers and set technical standards across teams.
• Clear written and verbal communication to influence decisions.

Responsibilities

• Own the architecture and roadmap for the endpoint fleet across devices.
• Define standards for configuration, policy, remediation, and rollout practices.
• Drive configuration-as-code adoption for MDM policies and scripts.
• Design zero-touch provisioning to deliver encrypted, compliant devices out of the box.
• Collaborate with Security to integrate posture, trust, vulnerability data, and access controls.
• Build tooling using scripts, APIs, CI/CD, and AI-assisted practices.
• Improve patch management via telemetry, dashboards, and auditable workflows.
• Act as escalation point for complex endpoint issues and mentor engineers.
• Partner cross-functionally to protect IP while maintaining seamless employee experience.

Skills

IT systems engineering

endpoint engineering

infrastructure

platform engineering

MDM/UEM platforms

Python

Bash

PowerShell

APIs

AI-assisted engineering

endpoint security

Zero Trust

mentoring engineers

communication skills

Tools

Jamf

Intune

Workspace ONE

Okta

SAML

SCIM

Job description

Lila is hiring a Staff IT Systems Engineer, Endpoints to own the architecture and roadmap for endpoint management across the company. This role sits within IT & Security and supports the technology every scientist, engineer, and employee relies on, including laptops, mobile devices, specialized research compute, endpoint security, and device trust.

We treat endpoint management as a software engineering discipline. Configuration, policy, remediation, and fleet operations should move through code, CI/CD, staged rollout, observability, and automated rollback. This is a hands‑on staff-level role for someone who can set technical standards, build missing tooling, mentor engineers, and lead cross‑functional initiatives across IT, Security, Research Computing, and Lab Operations.

As Lila scales its workforce and physical footprint, endpoint systems need to become more automated, secure, auditable, and seamless. The right person will help employees and scientists become productive faster while reducing device risk, operational noise, and manual toil.

What You'll Be Building

• Own the architecture and roadmap for Lila’s endpoint fleet across macOS, Windows, Linux, mobile devices, and specialized research or lab computing endpoints.
• Define standards for endpoint configuration, policy, remediation, observability, and rollout practices across the IT & Security team.
• Drive configuration-as-code adoption for MDM policies, profiles, scripts, staged rollouts, canary groups, and automated rollback.
• Design zero‑touch provisioning workflows so devices arrive encrypted, configured, compliant, and productive out of the box.
• Partner with Security to integrate endpoint posture, device trust, vulnerability data, EDR, and Zero Trust access controls.
• Build automation and internal tooling using scripts, APIs, CI/CD, and AI‑assisted engineering practices to reduce manual toil.
• Improve vulnerability and patch management through telemetry, dashboards, drift detection, and auditable compliance workflows.
• Serve as a technical escalation point for complex endpoint issues and mentor engineers across IT and Security.
• Partner across Security, Legal, HR, Research Computing, and Lab Operations to protect sensitive IP while keeping the employee experience seamless.

What You'll Need to Succeed

• Deep experience in IT systems engineering, endpoint engineering, infrastructure, or platform engineering, with staff‑level technical ownership.
• Strong experience with modern MDM or UEM platforms such as Jamf, Intune, Workspace ONE, or similar tools.
• Experience managing endpoint configuration through code, automation, version control, staged rollout, or CI/CD practices.
• Strong systems knowledge across macOS and Windows endpoint environments.
• Ability to build and maintain automation using Python, Bash, PowerShell, APIs, or similar tooling.
• Experience using AI‑assisted engineering, LLM APIs, internal copilots, or agentic automation to reduce operational toil in IT, endpoint, infrastructure, or platform operations.
• Experience partnering with Security on endpoint hardening, device trust, vulnerability management, EDR, or Zero Trust initiatives.
• Strong troubleshooting ability across endpoint, identity, network, application, and user‑experience boundaries.
• Track record mentoring engineers, setting technical standards, and leading cross‑functional technical initiatives.
• Clear written and verbal communication skills with the ability to influence technical decisions across teams.

Bonus Points For

• Experience supporting scientific, research, lab, OT, or high‑performance computing environments.
• Familiarity with Okta, SAML, SCIM, device trust, SASE, EDR, or cloud access patterns.
• Experience with AWS, GCP, cloud‑native infrastructure, or cloud‑based endpoint telemetry workflows.
• Experience with open‑source endpoint tooling such as osquery, Fleet, Munki, or similar tools.
• Proficiency in Go, Swift, or another language used for custom endpoint tooling.
• Experience in a regulated, IP‑sensitive, biotech, life‑sciences, or research environment.

Compensation

We offer competitive base compensation with bonus potential and generous early‑stage equity. Your final offer will reflect your background, expertise, and expected impact.

U.S. Benefits. Full‑time U.S. employees receive a comprehensive benefits program including medical, dental, and vision coverage; employer‑paid life and disability insurance; flexible time off with generous company wide holidays; paid parental leave; an educational assistance program; commuter benefits, including bike share memberships for office based employees; and a company subsidized lunch program.

International Benefits. Full‑time employees outside the U.S. receive a comprehensive benefits program tailored to their region. USD salary ranges apply only to U.S.-based positions; international salaries are set to local market.

Expected Base Salary Range

$140,000 - $172,667 USD

About LILA

Lila Sciences is building Scientific Superintelligence™ to solve humankind's greatest challenges. We believe science is the most inspiring frontier for AI. Rather than hard‑coding expert knowledge into tools, LILA builds systems that can learn for themselves.

LILA combines advanced AI models with proprietary AI Science Factory™ instruments into an operating system for science that executes the entire scientific method autonomously, accelerating discovery at unprecedented speed, scale, and impact across medicine, materials, and energy. Learn more at www.lila.ai.

Guided by our core values of truth, trust, curiosity, grit, and velocity, we move with startup speed while tackling problems of historic importance. If this sounds like an environment you'd love to work in, even if you don't meet every qualification listed above, we encourage you to apply.

Lila Sciences iscommitted to equal employment opportunityregardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.

Information you provide during your application process will be handled in accordance with our Candidate Privacy Policy .