Endpoint Engineer (IT)

TL;DR

Endpoint Engineer (IT): Designing and operating secure macOS infrastructure and automated endpoint management systems with an accent on Configuration as Code and Zero Trust architecture. Focus on MDM migration, binary authorization via Santa/Rudolph, and building AI-assisted operational workflows.

Location: Must be based in or be able to relocate to San Francisco, CA or New York, NY

Salary: $190,000 - $300,000

Company

Thinking Machines Lab is an AI research and development lab focused on advancing collaborative general intelligence.

What you will do

• Develop macOS configuration profiles and security policies using a GitOps/Configuration as Code approach.
• Lead the MDM migration from Iru to Fleet, ensuring minimal disruption and security parity.
• Architect and operate binary authorization systems using Santa and Rudolph.
• Integrate endpoint posture signals into a Zero Trust architecture for conditional access.
• Build automated macOS patching, zero-touch provisioning (ABM), and software distribution workflows.
• Develop AI-assisted tools and telemetry dashboards to monitor fleet health and compliance.

Requirements

• 8+ years of experience in secure IT or endpoint systems management.
• Expertise in macOS internals, MDM platforms, and Apple Business Manager.
• Proficiency in Python, shell scripting, and Git-based version control workflows.
• Experience with infrastructure as code (Terraform) and public cloud (AWS).
• Ability to work from the San Francisco or New York office.
• Visa sponsorship is available for the right candidate.

Nice to have

• Experience with Fleet, Iru, or Santa/Rudolph.
• Proficiency in Swift or Go for endpoint tool development.
• Background in Zero Trust architecture and continuous posture evaluation.
• Experience using LLMs to automate IT operational tasks.

Culture & Benefits

• Generous health, dental, and vision insurance.
• Unlimited PTO and paid parental leave.
• Relocation support for candidates moving to the US.
• Opportunity to work at the forefront of AGI development.