Endpoint Engineer — MDM

ROLE OVERVIEW

Rubrik needs a strong Endpoint Engineer to backfill support for Jamf-based deployments and scripting on its Palo Alto-based device fleet. The existing team has two resources in India but needs additional onsite support. The client is specifically looking for someone with true end-to-end ownership of deployment and configuration - a prior candidate was passed over for relying on an engineering team to execute policies rather than implementing them directly.

The role covers a ~90% Mac environment, plus Jamf, Intune, and Amazon Work Spaces (VDI) for the remaining Windows-based endpoints, with responsibility for architecting and maintaining the Jamf Pro environment, leading Intune administration for Windows/Android, managing zero-touch provisioning (Apple Business Manager, Windows Autopilot), and building automation and reporting for the endpoint fleet.

• Perform daily upkeep, system maintenance, and patch management across all managed endpoints
• Serve as the final escalation point and subject matter expert for complex endpoint issues
• Architect and maintain the Jamf Pro environment for macOS/iOS: configuration profiles, policies, and patching
• Lead Microsoft Intune administration for Windows and Android: policy application, security baselines, and app delivery
• Manage Apple Business Manager (ABM) and Windows Autopilot for zero-touch deployment
• Administer Amazon Work Spaces (VDI)
• Develop and maintain Power Shell/Bash scripts to automate manual tasks and integrate system APIs
• Build and maintain a library of packaged software (dmg, pkg, msi) for silent deployment
• Implement automated reporting for hardware inventory, license compliance, and security auditing
• Enforce endpoint security standards (File Vault/Bit Locker, EDR agent health) and partner with Security on vulnerability remediation

• 3-5+ years in an Endpoint Engineering or MDM-focused role
• Proven experience managing macOS and iOS at scale via Jamf Pro
• Experience managing Windows environments through Microsoft Endpoint Manager/Intune
• Hands-on Amazon Work Spaces administration
• Experience deploying and managing a BYOD program for personal mobile devices (iOS/Android)
• Ability to write and debug Bash and Power Shell scripts from scratch
• Understanding of Okta or Azure AD (Entra ) as it relates to device enrollment and SSO
• Bachelor's degree in Computer Science, IT, or equivalent experience;
  Jamf 200/300, Microsoft MD-102, or AWS Certified Cloud Practitioner is a plus