Endpoint Engineer; Client Platform Engineering

Join to apply for the Staff Endpoint Engineer (Client Platform Engineering) role at Affirm
.

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest.

Affirm’s IT Engineering teams build and operate the tools, systems, and services that power employee‑facing IT experience. The Client Platform Engineering team builds and maintains the hardware and software at the heart of employee‑facing operations, delivering scalable, secure solutions such as zero‑touch provisioning, package and patch management, and silent updates.

• Administer and scale macOS device management using Jamf Pro, ensuring endpoints meet compliance standards.
• Guide architectural decisions to scale endpoint management.
• Lead technical initiatives such as permission automation, third‑party patching, silent updates, stability improvements, and device deployment.
• Build automation and infrastructure‑as‑code pipelines with Terraform, Bash/Python scripting, and MDM APIs.
• Manage enterprise‑grade software and package deployment using tools like Auto Pkgr.
• Implement and refine endpoint change control processes and reporting dashboards.
• Collaborate with Security, Support, Engineering, and IT to enforce policies, onboard security agents, and integrate devices with Okta SSO, Oomnitza, Google Workspace, etc.
• Serve as escalation tier for complex endpoint issues, troubleshooting macOS, hardware, networking, or software problems.
• Mentor junior engineers to elevate Jamf, scripting, and automation capabilities.
• Explore and evaluate new endpoint‑management and automation technologies, run POCs, and recommend adoption.
• Work with Developer Productivity to support engineers’ unique needs.

• 5+ years of managing macOS at scale with enterprise MDM tools – Jamf Pro expertise required (Jamf 300+ level).
• Strong Bash scripting and fluency in a second language such as Python; API integration experience.
• Proficiency in infrastructure‑as‑code tools like Terraform or Ansible in an IT context.
• Experience with Windows Intune and Windows Endpoint Management.
• Deep understanding of enterprise security practices for endpoints.
• Experience building package/software distribution pipelines using Auto Pkg, Jamf, or similar.
• Exceptional troubleshooting skills for complex endpoint issues.
• Excellent cross‑functional communication skills.
• Positive, growth‑oriented attitude and strong written communication.
• Prior technical mentoring or functional lead experience in a high‑growth environment.
• Either practical experience or a Bachelor’s degree in a related field.

M

7

USA base pay range (CA, WA, NY, NJ, CT) per year: $180,000 - $230,000

USA base pay range (all other U.S. states) per year: $160,000 - $210,000

• Health care coverage – premium coverage for all levels for you and dependents.
• Flexible Spending Wallets – stipends for technology, food, lifestyle, and family expenses.
• Time off – competitive vacation and holiday schedules.
• ESPP – employee stock purchase plan.

Affirm is proud to be a remote‑first company. The majority of roles are remote and can be performed almost anywhere within the country of employment. No visa sponsorship is available for this position.

We are committed to providing an inclusive interview experience for all candidates, including those with disabilities, and we provide reasonable accommodations during hiring.

By submitting your application you acknowledge that you have read and consent to our privacy notice.