[Hiring] IT Endpoint Engineer @Vannevar

Role Description

We are looking for an IT Endpoint Engineer to own the technical health and continued development of our corporate endpoint environment across macOS, Windows, and iOS.

• Responsible for systems and automation that keep our device fleet secure, reliable, compliant, and manageable at scale.
• Partner closely with Security to translate requirements such as CIS Benchmarks and NIST 800-171 controls into practical technical implementations.
• Build scripts and automation to deploy controls, detect configuration drift, remediate issues, and make endpoint state observable.
• Focus on engineering-oriented IT role, automating repetitive administration and improving underlying systems.

What you’ll do

• Own the management and continued development of our endpoint environment across macOS, Windows, and iOS.
• Partner with Security and IT to translate security and compliance requirements into practical endpoint controls and deployment plans.
• Own endpoint patching and vulnerability management, ensuring remediations occur within established SLAs.
• Develop scripts, automation, and tooling across macOS and Windows to deploy configurations, remediate issues, and reduce manual administration.
• Build recurring health checks and monitoring to identify configuration drift, missing controls, unhealthy devices, and gaps in management coverage.
• Own technical projects from planning through testing and deployment, accounting for dependencies, risk, and user impact.
• Own root-cause analysis and resolution of complex endpoint issues, using recurring problems as inputs into improvements to our tooling and architecture.
• Stay close to user-facing IT issues alongside the broader team so that endpoint engineering priorities reflect real problems across the company.

Qualifications

• 5+ years of experience in endpoint engineering, systems administration, IT infrastructure, or similar technical roles.
• Strong technical knowledge of macOS and Windows administration, scripting, and troubleshooting in an environment with a distributed or remote user base.
• Hands-on experience administering endpoints through enterprise MDM platforms such as Microsoft Intune.
• Experience managing enterprise patching and vulnerability remediation within applicable remediation timelines.
• Strong scripting and automation skills, with experience using tools such as PowerShell, Bash, Python, or similar technologies.
• Demonstrated ability to independently investigate complex technical problems using logs, telemetry, command-line tools, scripting, and other diagnostic methods.
• Experience leading technical projects from planning through testing and deployment.
• Experience translating technical, security, or compliance requirements into practical solutions.
• Ability to work autonomously, make sound technical decisions, and manage competing priorities.

Benefits

• The salary range for this position is $85,000 - $125,000 + equity.
• Health, dental, and vision insurance.
• Remote friendly with WeWork access.
• Unlimited PTO, shared downtime during the federal holiday calendar, and company-wide off time at the end of each year.
• 401(k) match.
• Lifestyle & wellbeing stipends.
• Salary top-up during military reserve duty.
• Fully paid parental leave.
• Child and pet care reimbursement during travel.