← All roles

Senior Endpoint Security Engineer

Crusoe· IT, Compliance, and Security
Apply on company site
San Francisco, CA - US$170k - $205kFull-timePosted 3mo ago

About the role

Security Engineer focused on implementing secure-by-default endpoints, endpoint visibility, and maintaining security posture across a global fleet of macOS, Windows, iOS, and Android devices. Onsite role with cross-functional partnership and opportunities to shape endpoint security practices at Crusoe.

Responsibilities

  • Administer and continuously improve Jamf and Microsoft Intune environments across all managed device types: macOS, Windows, iOS, and Android; maintain configuration profiles, compliance policies, app deployment packages, and OS update enforcement across all platforms.
  • Build and maintain automated enrollment workflows including Apple Business Manager (ABM) and Windows Autopilot for zero-touch provisioning at scale.
  • Own a structured patch management program with clear SLAs for OS and application updates across all device platforms.
  • Define and enforce device compliance baselines aligned with Crusoe security standards and frameworks including CIS Benchmarks and SOC 2; integrate MDM telemetry with EDR and SIEM tooling for compliance drift visibility and proactive remediation.
  • Partner with Security on device trust policies, Conditional Access enforcement, certificate-based authentication rollout (SCEP/PKCS), and network-level access control for certificate-based Wi-Fi and VPN authentication.
  • Build and maintain scripts and automation in Bash, Python, or PowerShell to reduce manual IT workload; develop self-service tooling for routine fixes and software requests.
  • Own MDM runbooks, device policy documentation, and asset records; contribute to standardization of enrollment workflows, naming conventions, and configuration baselines across all platforms.
  • Serve as the MDM escalation point in the IT on-call rotation; partner with People Operations on seamless device provisioning and deprovisioning; mentor junior IT team members on endpoint management practices.

Qualifications

  • Foundational Security Experience: Demonstrated experience with OSQuery and CrowdStrike (XDR/EDR) for endpoint visibility and threat detection.
  • Identity & Access Management: Deep understanding of Okta (Device Trust/FastPass) and Entra ID (Conditional Access).
  • MDM/Endpoint Management: 3–6 years of experience with Jamf/Kandji and Microsoft Intune (Autopilot, Compliance Policies, App Protection).
  • Independent Engineering: A "Security-First" mindset and proven ability to drive R&D initiatives from planning through implementation independently, with a focus on automating security controls.
  • Scripting & Automation: Proficiency in Bash, Python, or PowerShell for device policy automation, packaging, and remediation.
  • Infrastructure Knowledge: Strong understanding of certificate infrastructure (SCEP, PKCS) and experience with Absolute for Windows persistence.
  • Strong documentation habits, ownership mindset, and ability to communicate technical policies to non-technical stakeholders.
  • Bachelor’s degree in IT, Computer Science, or equivalent practical experience.
  • OSQuery and CrowdStrike expertise, demonstrable experience leveraging OSQuery for endpoint visibility and administering CrowdStrike for threat detection and response.

Skills

Required:Jamf/Kandji managementMicrosoft Intune / AutopilotOSQueryCrowdStrike (XDR/EDR)Scripting (Bash/Python/PowerShell)Certificate infrastructure (SCEP/PKCS)

Benefits

  • Competitive compensation and equity packages
  • Restricted Stock Units
  • Paid time off, paid holidays & leave of absence programs
  • Comprehensive health, dental & vision insurance
  • Employer contributions to HSA account
  • Paid parental leave
  • Paid life insurance, short-term and long-term disability
  • Professional development & tuition reimbursement
  • Mental health & wellness support
  • Commuter benefits (parking & transit)
  • Cell phone stipend
  • 401(k) Retirement plan with company match up to 4% of salary
  • Volunteer time off
  • Global travel insurance & emergency assistance
  • Daily meals allowance
  • Additional perks & programs specific to location
Last updated Jul 15, 2026. Interested? Apply on the company site.

About Crusoe

The AI factory company | Renewable-powered AI infrastructure

Crusoe provides next-gen AI infrastructure and cloud compute using an energy-first approach. Deploy AI workloads at scale with reliable performance and 24/7 support.

AI infrastructureData centersEdge computingGPU computingRenewable energycloud computeenergy-first approachsetter-30
Company profileWebsite

More open roles at Crusoe