Endpoint Engineer; Client Platform Engineering

Staff Endpoint Engineer (Client Platform Engineering)

Join the Affirm team as a Staff Endpoint Engineer in Client Platform Engineering, building and operating the tools that power our employee‑facing IT experience. This remote‑first role focuses on delivering secure, scalable endpoint solutions across our global workforce.

• Administer and scale macOS device management using Jamf Pro, ensuring compliance with encryption, patching, and configuration standards.
• Guide architectural decisions to support future growth and scalability.
• Lead technical initiatives such as permission automation, third‑party patching, silent updates, and device deployment optimization.
• Build automation and IaC pipelines with Terraform, Bash/Python, and MDM APIs for zero‑touch provisioning.
• Manage software and package deployment pipelines with tools like Auto Pkgr or equivalent.
• Implement endpoint change‑control processes with communication, testing, rollback plans, and compliance tracking, and create dashboards for visibility.
• Collaborate with Security, Support, Engineering, and IT to enforce policies and integrate devices with Okta, Oomnitza, Google Workspace, and monitoring tools.
• Serve as the escalation tier for complex endpoint issues and act as a knowledge source for IT Support.
• Mentor junior engineers and elevate the team’s automation capabilities.
• Explore and evaluate new endpoint‑management technologies, run POCs, and recommend adoption.
• Work closely with Developer Productivity to support engineer needs.

• 5+ years hands‑on macOS endpoint management with enterprise MDM tools;
  Jamf Pro expertise (Jamf 300+ level) is essential.
• Strong Bash scripting, proficiency in Python, and experience integrating with RESTful APIs (Jamf, Okta, etc.).
• Proven experience with automation/IaC tools such as Terraform or Ansible.
• Experience with Windows Intune and Windows Endpoint Management.
• Deep knowledge of enterprise security practices (vulnerability management, least privilege, encryption, compliance).
• Experience building and managing package/software distribution pipelines.
• Exceptional troubleshooting skills for complex endpoint issues.
• Excellent cross‑functional communication and collaborative mindset.
• Growth‑oriented attitude and strong written communication skills.
• Prior technical mentoring or functional lead experience preferred.
• Either equivalent practical experience or a Bachelor’s degree in a related field.

Pay Grade: M
Equity Grade: 7
Base pay ranges: $180k–$230k (CA, WA, NY, NJ, CT) / $160k–$210k (other U.S. states). Additional equity rewards, monthly stipends for health, wellness and tech, and 100% subsidized medical coverage, dental and vision for you and dependents.

By clicking “Submit Application,” you acknowledge that you have read affirm's Global Candidate Privacy Notice and hereby freely and unambiguously give informed consent to the collection, processing, use, and storage of your personal information as described therein.

Affirm is proud to be a remote‑first company. We provide an inclusive interview experience for all and offer reasonable accommodations for applicants with disabilities. For U.S. positions eligible for Los Angeles or San Francisco, we consider qualified applicants with arrest and conviction records per local ordinances.

Mid‑Senior level

Full‑time

Engineering and Information Technology