Sr. IT Endpoint Engineer

GAQ
127R160

As an IT Endpoint Engineer focused on Mobile Security and Device Management, you will be a core technical contributor on the IT Endpoint Team  will own and evolve our mobile security ecosystem, mobile device management platforms, and endpoint compliance programs that protect company data while delivering a smooth employee experience.

This role requires deep expertise in enterprise MDM, mobile security controls, endpoint configuration, device lifecycle management, and cross-functional partnership with Security, IAM, Infrastructure, and Engineering. Automation remains an important part of the role, primarily to improve operational scale, compliance, and supportability across the mobile and endpoint environment.

• Own and evolve the Mobile Security program, including MDM configuration, policy enforcement, compliance workflows, and user experience improvements.
• Serve as a subject matter expert for mobile device management across iOS, Android, macOS, and other managed endpoint ecosystems.
• Design, implement, and maintain secure, scalable device management policies that protect company data while minimizing employee friction.
• Manage mobile security platform operations, including enrollment flows, compliance policies, application deployment, VPN/ZTNA mobile access controls, device posture, and remediation processes.
• Partner closely with Security, IAM, Infrastructure, Engineering, Legal/Privacy, and Support teams to deliver mobile security initiatives with measurable business outcomes.
• Support BYOD roadmap initiatives, including platform migrations, policy updates, app access changes, compliance campaigns, and operational readiness.
• Use automation where appropriate to improve MDM operations, device lifecycle workflows, compliance reporting, and recurring operational tasks.
• Support M&A and new-hire readiness by ensuring mobile and endpoint enrollment experiences are secure, reliable, and scalable.
• Document technical solutions, operational runbooks, user-facing processes, and train or mentor peers on the platforms you own.

• 5+ years of experience in IT systems engineering, endpoint management, mobile device management, or enterprise mobility.
• Strong hands‑on experience managing MDM platforms and mobile security programs in a large‑scale enterprise environment.
• Proven ability to own complex technical programs involving device management, security policy enforcement, compliance, and employee experience.
• Deep understanding of mobile and endpoint security concepts, including device posture, conditional access, managed applications, VPN/mobile access controls, data protection, and compliance remediation.
• Ability to operate with minimal guidance, take ownership of ambiguous technical problems, and deliver high‑quality work in a fast‑paced environment.
• Strong judgment in balancing security requirements, privacy considerations, usability, and operational scale.

• Expertise with Jamf Pro and/or Jamf Trust for managing Apple and mobile device security programs at scale.
• Experience managing iOS and Android device fleets, including BYOD and corporate‑owned device models.
• Experience with device enrollment, zero‑touch provisioning, configuration profiles, compliance policies, certificate management, managed apps, app protection, and device remediation.
• Ability to design and troubleshoot MDM policies, enrollment flows, app deployment, mobile VPN configurations, and device compliance issues.
• Experience supporting mobile security migrations, policy rollouts, and employee‑facing change management.

• Strong cross‑functional collaboration skills. Comfortable working with Legal, Security, Engineering, Infrastructure, and business stakeholders to ensure mobile security programs meet enterprise requirements while respecting employee privacy expectations.
• Effective at coaching and training peers on new tools and processes.
• Clear communicator who can translate complex technical concepts for non‑technical audiences.

• Certifications in relevant platforms (e.g., Jamf 100, Jamf 200, Jamf 300, or…