Senior Endpoint Engineer (Intune/macOS)

Location: Austin, Texas, United States; hybrid office environment three days per week.

Company

hirify.global builds fintech software for digital wealth management and financial market access, serving clients including Stash, Betterment, SoFi, Webull, and eToro.

What you will do

• Own Microsoft Intune for Windows compliance, configuration profiles, Autopilot, application deployment, Scope Tags, and RBAC.
• Manage the Apple device lifecycle with Jamf Pro or Kandji and Apple Business Manager, including zero-touch enrollment and application deployment.
• Design Entra ID Conditional Access and Okta device-trust policies with security and identity teams.
• Implement macOS and Windows MDM policy as code through GitOps, CI/CD, peer review, staged rollouts, and rollback.
• Build integrations and automation across endpoint, identity, and cloud platforms using PowerShell, Python, Microsoft Graph, Azure services, and AWS Lambda.
• Lead patching, application packaging, vulnerability remediation, incident escalation, technical standards, architecture documentation, and engineer mentoring.

Requirements

• Bachelor’s degree in computer science or a related technical discipline, or equivalent work experience.
• 6+ years of endpoint or systems engineering experience with hands-on administration of both Microsoft Intune and an Apple MDM such as Jamf Pro or Kandji.
• Deep Intune expertise covering compliance, configuration profiles, Autopilot, app protection, Scope Tags, and custom RBAC roles.
• Strong Jamf Pro or Kandji experience with policies or Blueprints, configuration profiles, and zero-touch enrollment, plus Apple Business Manager experience with automated enrollment, VPP, and MDM server integration.
• Proven policy-as-code and GitOps experience using infrastructure-as-code tools such as Terraform, Bicep, Ansible, or CloudFormation; CI pipelines and code review are required.
• Strong PowerShell and Python automation skills, Microsoft Graph API experience, and strong Azure experience with Azure Automation, Logic Apps, and Azure Functions.
• Entra ID administration experience with dynamic groups, app registrations, hybrid identity, and production Conditional Access design.
• Vulnerability management, patching, and application packaging experience, including relevant tools such as Defender Vulnerability Management, Rapid7, Qualys, Patch My PC, Winget, PSADT, IntuneWin, or PKG.
• Strong understanding of Windows and macOS architecture, Kerberos, SAML, OAuth/OIDC, and certificate-based authentication including SCEP/PKCS, plus strong documentation and communication skills.

Nice to have

• Okta experience.
• AWS automation and integrations using Lambda, Step Functions, or EventBridge.
• Production use of AI to solve operational problems.
• Experience applying CIS Benchmarks and NIST frameworks such as 800-53 or CSF to endpoint compliance baselines.
• Microsoft, Apple, AWS, or Azure certifications, including MD-102, SC-300, AZ-104, or AZ-500.
• ServiceNow or similar ITSM experience.

Culture & Benefits

• Hybrid work schedule with three office days per week.
• Medical, dental, vision, EAP, HSA contribution matching, and a 401(k) match.
• Competitive paid time off and parental leave.
• Paid Calm subscription and external learning and tuition reimbursement benefits.
• Collaborative culture centered on grit, results, empathy, accountability, and teamwork.