Senior Systems Engineer , NY San Francisco, CA

Chicago, IL, USA;
New York, NY, USA;
San Francisco, CA, USA

We are seeking an experienced Senior Systems Engineer to own our macOS platform and drive endpoint management and device trust standards across Chime’s IT ecosystem.

As a Senior Systems Engineer, you will drive multi‑system initiatives across our IT domains – endpoint management, identity, and security tooling – with a primary focus on macOS and Jamf Pro. You’ll establish the technical standards other engineers work to, and partner cross‑functionally on programs that affect IT Support, Security, and every Chimer with a laptop.

This is a role for someone who thrives in ambiguity: you’ll often define the problem before solving it, and align stakeholders around a technical direction rather than waiting for a specification. We believe a secure access platform can be built entirely in the cloud, leveraging tools such as Jamf, Auto Pkg, Okta, os Query, and Crowd Strike. Pairing closely with our Security team, this role makes sure our fleet stays in sync with all policies and posture checks before devices are allowed access to corporate data.

This role participates in an after‑hours/on‑call rotation for critical endpoint and device‑management issues. Rotation frequency, response expectations, and escalation procedures will be communicated during the interview process. This position will report to the IT Engineering Manager.

The base salary offered for this role and level of experience will begin at $ and up to $ . Full‑time employees are also eligible for a bonus, competitive equity package, and benefits. The actual base salary offered may be higher, depending on your location, skills, qualifications, and experience.

• Platform Ownership: Own the technical direction, operation, and continuous improvement of our Jamf Pro environment, including configuration profiles, smart groups, policies, MDM commands, and change standards.
• Software Delivery: Own our Auto Pkg‑based software pipeline: recipes, overrides, trust verification, and automated import into Jamf, alongside packaging, deployment, patch management, and disk encryption across the global macOS fleet.
• Automation & Reusable Tooling: Build automations and shared tooling that accelerate work beyond your own – scripts, patterns, and integrations other IT engineers can adopt rather than rebuild.
• Provisioning: Own zero‑touch provisioning and device enrollment (Automated Device Enrollment, Setup Assistant, bootstrap workflows) so new Chimers are productive on day one.
• Scripting & API Integration: Use scripting and general-purpose languages (Python, Swift, Bash, Go) and vendor APIs to create custom integrations and eliminate manual IT operations.

• Security Posture: Partner with Security to identify and mitigate risks to the fleet, enforcing a Zero Trust / Beyond Corp model through device trust, adaptive authentication, and least‑privilege access.
• Device Trust: Connect device management to our identity provider (Okta) so device posture is a factor in authentication and application access.
• Compliance: Implement compliance processes and tooling to report configuration status, and assess and implement benchmark standards (e.g., CIS) against a documented, risk‑based rationale.
• Reporting: Develop metrics and reporting reflecting the inventory, health, and compliance state of all devices.
• Troubleshooting: Serve as the Tier 3 escalation point for complex endpoint issues.

• Technical Standards: Establish and document the endpoint standards the broader IT organization works to, and raise the bar on testing, monitoring, and maintainability through example…