← All roles

Endpoint Engineer, IT

Thinking Machines Lab· Technical
Apply on company site
Hybrid (San Francisco, CA and New York, NY)$190k - $300kFull-timePosted 2mo ago

About the role

Thinking Machines Lab seeks an Endpoint Engineer to build and operate secure macOS endpoint infrastructure at scale, partnering with IT, Security, Identity, and Infrastructure to deliver a secure and reliable employee computing experience in a dual San Francisco and New York office footprint.

Responsibilities

  • Endpoint Configuration as Code: Author, review, test, and progressively deploy macOS configuration profiles, security policies, queries, and remediation scripts. Build code review, staging, canary, validation, and rollback processes into endpoint changes.
  • MDM Platform Engineering: Operate our MDM platform as a production service, including configuration as code, observability, upgrades, reliability, incident response, and integrations with other IT and Security systems.
  • MDM Migration: Lead evaluation, design, testing, and execution of migration from Iru to Fleet; establish requirements, identify gaps, develop phased plan, minimize disruption.
  • Santa and Rudolph: Own architecture and operation of Santa and Rudolph synchronization service, manage binary-authorization policies, rule distribution, app approvals, telemetry, observability, infrastructure, and incident response.
  • Zero Trust and Device Trust: Partner with Security and Identity to integrate device trust into Zero Trust architecture; incorporate endpoint posture signals into auth/authorization/conditional-access.
  • Continuous Posture Evaluation: Build systems for ongoing device health assessment and remediation, including drift detection and access restriction as needed.
  • Patch Management: Develop automated macOS patching workflows for rapid enforcement with good user experience.
  • Zero-Touch Provisioning: Improve Apple Business Manager and Automated Device Enrollment workflows for secure, fully configured Mac provisioning.
  • Software Distribution: Own packaging, deployment, updating, and removal across the Mac fleet.
  • Fleet Telemetry and Compliance: Query live device state at scale and translate telemetry into policies, dashboards, compliance reports, and drift warnings.
  • Automation: Create tools and AI-assisted workflows to reduce repetitive work and improve reliability and scalability in endpoint management.
  • Endpoint Security: Collaborate on macOS hardening, binary authorization, vulnerability management, compliance controls, detection and response, and device-based access policies.
  • Advanced Troubleshooting: Serve as escalation point for complex macOS and endpoint-platform issues.
  • Technical Leadership: Help define endpoint roadmap, evaluate technologies, and lead complex initiatives from conception through production.

Qualifications

  • 8+ years of experience building and operating secure IT or endpoint systems in complex environments.
  • Experience managing a large fleet of macOS devices through a modern MDM platform.
  • Experience managing endpoint configuration through scripted deployments, Git-based workflows, or a full GitOps model.
  • Deep knowledge of macOS internals, enterprise deployment, security controls, and troubleshooting.
  • Experience designing and operating zero-touch Mac provisioning, patching, and software-distribution workflows.
  • Experience using device health and security signals to evaluate endpoint compliance.
  • Experience delivering complex technical projects from conception through production.
  • Strong ability to solve ambiguous problems involving multiple teams and stakeholders.
  • Ability to communicate technical concepts clearly to technical and nontechnical audiences.
  • Product-engineering mindset toward IT systems, including testing, observability, reliability, and controlled change management.
  • Clear technical documentation, architecture diagrams, runbooks, and operational procedures.
  • Ability to work from either New York or San Francisco office.

Skills

Required:Python and shell scriptingmacOS internalsApple Business Manager and Automated Device EnrollmentMDM platforms (Iru, Fleet, Jamf)
Nice to have:Santa binary authorization and Rudolph synchronizationZero Trust / device trustInfrastructure as Code (Terraform)Cloud and serverless basicsSwift or Go for macOS tools

Benefits

  • generous health, dental, and vision benefits
  • unlimited PTO
  • paid parental leave
  • relocation support as needed
Last updated Jul 29, 2026. Interested? Apply on the company site.
Thinking Machines Lab logo

About Thinking Machines Lab

Connectionism: Research Blog by Thinking Machines Lab

Thinking Machines Lab is an artificial intelligence research and product company. We’re building a future where everyone has access to the knowledge and tools to make AI work for their unique needs and goals.

AIartificial intelligencebessemer-ai-infrastructure-2026deep learningliquid-ai-recruiting-targetmachine learningproductreinforcement-learning-platforms
Company profileWebsite

More open roles at Thinking Machines Lab