[Hiring] Staff Endpoint Engineer @Affirm

Role Description

This role involves administering and scaling macOS device management using Jamf Pro, ensuring endpoints meet company compliance standards.

• Guide architectural decisions to ensure endpoint management can easily scale with the company.
• Drive key technical initiatives such as permission automation, third-party patching, silent updates, stability improvements, and streamlined device deployment.
• Build automation and infrastructure-as-code pipelines using tools like Terraform, Bash/Python scripting, and Jamf/Okta/MDM APIs to minimize manual work and create “zero-touch” provisioning workflows.
• Manage enterprise-grade software and package deployment, using tools like AutoPkgr or equivalent for packaging and silent rollout of updates at scale.
• Implement and refine endpoint change control processes, with communication, testing, rollback plans, and compliance tracking.
• Create dashboards and reporting for visibility into compliance, patch levels, and device health.
• Collaborate closely with Security, Support, Engineering, and IT to enforce policies and onboard security agents.
• Serve as the escalation tier for complex endpoint issues—troubleshoot deep macOS, hardware, networking, or software issues.
• Mentor junior engineers—share expertise, set best practices, and help elevate the team’s Jamf, scripting, and automation capabilities.
• Explore and evaluate new endpoint-management and automation technologies, run POCs, and recommend adoption.
• Work directly with Developer Productivity to support the unique needs of Affirm’s engineers.

Qualifications

• 5+ years of hands-on experience managing macOS (and ideally other endpoints) at scale with enterprise MDM tools - Jamf Pro expertise required (Jamf 300+ level).
• Strong scripting capabilities in Bash, with fluency in a second language like Python.
• Proven proficiency in automation/infrastructure-as-code tools like Terraform, Ansible, or similar in an IT context.
• Experience with Windows Intune and Windows Endpoint Management.
• Deep understanding of enterprise security practices for endpoints, including vulnerability/patch management, enforcing least privilege, encryption, and compliance frameworks.
• Experience building and managing package/software distribution pipelines, with tools like AutoPkg, Jamf, or others.
• Exceptional troubleshooting skills and ability to debug complex endpoint issues.
• Excellent cross-functional communication skills with a collaborative mindset.
• A positive, growth-oriented attitude, with strong written communication.
• Prior experience serving as a technical mentor or functional lead in a high-growth or enterprise environment is strongly preferred.
• This position requires either equivalent practical experience or a Bachelor’s degree in a related field.

Requirements

• Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits.
• USA base pay range (CA, WA, NY, NJ, CT) per year: $180,000 - $230,000.
• USA base pay range (all other U.S. states) per year: $160,000 - $210,000.
• Please note that visa sponsorship is not available for this position.

Benefits

• Health care coverage - Affirm covers all premiums for all levels of coverage for you and your dependents.
• Flexible Spending Wallets - generous stipends for spending on Technology, Food, various Lifestyle needs, and family forming expenses.
• Time off - competitive vacation and holiday schedules allowing you to take time off to rest and recharge.
• ESPP - An employee stock purchase plan enabling you to buy shares of Affirm at a discount.