Endpoint Engineer (Fintech)

Location: Hybrid in Austin, Texas, United States

Company

hirify.global develops fintech software that simplifies access to financial markets and supports digital wealth management platforms.

What you will do

• Own end-to-end Microsoft Intune administration, including compliance policies, configuration profiles, application deployment, Windows Autopilot enrollment, Scope Tags, and RBAC across business units.
• Manage the Apple device lifecycle with Kandji and Apple Business Manager, including DEP enrollment, supervised policies, application deployment, and zero-touch provisioning.
• Design and troubleshoot Entra ID Conditional Access policies covering device compliance, location, risk-based sign-ins, and session controls in collaboration with security and identity teams.
• Migrate legacy Group Policy Objects to Intune and Entra-based configuration and compliance policies while translating GPO logic and documenting gaps.
• Build and maintain RBAC models across Intune, Entra ID, and Kandji.
• Develop endpoint and identity workflow automation and maintain MDM solutions for BYOD devices across Windows, macOS, Linux, and Android.

Requirements

• At least 2 years of systems or endpoint engineering experience with hands-on administration of modern MDM, including Intune and Kandji or Jamf Pro.
• Deep hands-on Microsoft Intune expertise covering compliance policies, configuration profiles, app protection and app configuration policies, Autopilot, Scope Tags, and built-in and custom RBAC roles.
• Administration experience with Kandji or Jamf Pro, including Blueprints or policies, Library Items or configuration profiles, and Liftoff or equivalent zero-touch enrollment.
• Apple Business Manager experience with DEP, VPP, device assignment, and MDM server integration.
• Hands-on Group Policy experience and proven migration of GPO logic to cloud-native MDM and compliance policy equivalents.
• Entra ID administration covering users and groups, dynamic groups, app registrations, enterprise applications, and hybrid identity.
• Conditional Access policy design and troubleshooting, including sign-in logs, the What If tool, and break-glass account practices.
• Scripting proficiency with PowerShell, Python, shell scripting, and Microsoft Graph API.
• Strong understanding of Windows and macOS architecture, Kerberos, SAML, OAuth/OIDC, and certificate-based authentication using SCEP/PKCS.
• Strong documentation habits and ability to communicate technical tradeoffs to engineering and non-technical stakeholders.
• Linux and macOS administration experience, including command-line fluency, shell scripting, and system-level troubleshooting beyond GUI-based management.

Nice to have

• Microsoft certifications such as MS-102, SC-300, or AZ-500.
• Apple certifications such as Apple Certified Support Professional or Apple Deployment and Management.
• Experience with Okta or other third-party identity providers alongside Entra ID.
• Experience applying CIS or NIST security frameworks and benchmarks to endpoint compliance baselines.
• ServiceNow or similar ITSM tooling for change management and automation triggers.

Culture & Benefits

• Hybrid work schedule with flexibility to work from home and from a primary office.
• Medical, dental, vision, EAP, HSA contribution matching, and 401(k) matching.
• Competitive paid time off and parental leave.
• Paid Calm app subscription and external learning and tuition reimbursement benefits.
• Collaborative culture centered on grit, results, empathy, accountability, and teamwork.