[Hiring] Endpoint and Device Specialist @Tempo

Role Description

As an Endpoint and Device Specialist, you will own the health, security, and lifecycle of the devices that Tempo staff rely on every day. From provisioning a new hire’s laptop to enforcing security posture across a global, remote-first fleet, you will ensure every endpoint is reliable, compliant, and ready to work from day one.

You will be the go-to expert for endpoint management and identity access, administering our device management and single sign-on tooling, resolving escalated endpoint issues through our IT service desk, and continuously hardening our environment against risk. You will partner closely with Information Security to translate policy into enforced, auditable controls on every device.

This role reports to the Director of Corporate IT & Information Security and sits at the intersection of IT operations, security, and staff experience. You will also help us apply AI to modern endpoint operations – using AI-assisted tooling and automation to streamline support, triage, and device management at scale.

What you'll do:

• Own the full endpoint device lifecycle – procurement, provisioning, configuration, refresh, and secure retirement/wipe – across macOS, Windows, Linux (Ubuntu) and BYOD mobile devices.
• Administer and optimize Unified Endpoint Management (UEM) tooling to enforce configuration baselines, patching, encryption, and compliance policies across a distributed, remote-first fleet.
• Administer Okta SSO – managing single sign-on, application integrations, provisioning/deprovisioning, and access policies in partnership with Information Security.
• Deliver endpoint support through Jira Service Management (JSM) – triaging, resolving, and escalating tickets while building request types, workflows, automation, and knowledge-base content that improve resolution times.
• Lead device onboarding and offboarding, ensuring new hires are equipped on day one and departing employees’ access and devices are fully reclaimed and secured.
• Enforce and monitor endpoint security posture – endpoint detection and response (EDR), disk encryption, patch compliance, and configuration hardening – and remediate gaps.
• Maintain accurate device inventory and asset management, tracking ownership, warranty, and compliance status across the fleet.
• Apply AI-assisted tooling and automation to endpoint operations – automating routine provisioning, support triage, and reporting to scale IT operations without scaling headcount.
• Partner with Information Security on audits, access reviews, and evidence collection, treating auditability and least-privilege access as first-class requirements.
• Document standards, runbooks, and self-service resources so endpoint operations are consistent, repeatable, and easy to maintain as the company scales.
• Support the Tempo Way of Working by using Tempo and Jira products to manage and instrument your work.

Qualifications

• Okta SSO experience – hands-on administration of Okta single sign-on, including application integrations, provisioning, and access policies.
• Jira Service Management (JSM) experience – delivering IT support through JSM, including workflows, request types, and automation.
• SaaS company experience – you have worked in a SaaS / technology company environment.
• Remote work environment experience – you have provided support for a remote workforce.
• AI experience – hands-on experience using AI tools and/or AI-assisted automation in your work.
• Time zone – must be based in North America and able to work core hours in the Eastern (EST) or Central (CT) time zone.

Requirements

• 3+ years in endpoint management, IT operations, desktop/device support, or a similar role, ideally in a remote-first environment.
• Hands-on experience administering Unified Endpoint Management (UEM) tooling (e.g., Jamf, Kandji, Microsoft Intune) across the full device spectrum — macOS, Windows, iOS/iPadOS, Android, and Linux.
• Solid understanding of endpoint security – EDR, disk encryption, patch management, and configuration hardening.
• Working knowledge of identity and access management concepts and least-privilege principles.
• Strong troubleshooting and systems thinking – you naturally see dependencies, edge cases, and failure modes.
• Excellent communication and customer-service skills; you can support both technical and non-technical colleagues with patience and clarity.
• A bias toward automation and continuous improvement rather than repetitive manual work.
• Experience in high-growth environments where ambiguity and change are constant; scripting experience (e.g., Bash, PowerShell, Python) is a strong plus.

Benefits

• Impact: Own the endpoint experience for the entire company – with the autonomy to modernize how IT operates.
• Innovation: Apply AI and automation to real endpoint and security operations, not just experiments.
• Collaboration: Join a supportive, cross-functional Corporate IT & Information Security team that values openness and a continuous learning environment.
• Growth: Opportunities for professional development, including conferences, courses, and mentorship.
• Remote First work environment.
• Unlimited vacation in most of our locations!
• Great benefits including health, dental, vision and savings plan.
• Perks such as training reimbursement, WFH reimbursement, and more.
• Diverse and dynamic teams with challenging and exciting work.
• An opportunity to have a real impact on our business.
• A great range of social activities (both in person and virtual).
• Optional in person meet-ups and the ability to travel to our international offices.
• Employee referral program.
• And so much more!