Senior Endpoint Systems Engineer (HYBRID: Chicago)

We are seeking a highly skilled and strategic Senior Endpoint Systems Engineer to join our IT team. In this role, you will serve as the primary architect and technical lead for the health, security, compliance, and lifecycle management of our global endpoint fleet. Our environment features a balanced mix of both Windows and macOS devices. We need a senior professional with deep, dual-platform expertise who can design scalable deployment workflows, architect robust endpoint security configurations, and optimize our enterprise toolset-specifically Microsoft Intune, Jamf Pro, and Workspace ONE. As a senior member of the team, you will drive technical strategy, lead complex integration projects, and mentor junior IT staff to ensure a seamless and secure digital employee experience., * Enterprise MDM Architecture: Architect, optimize, and maintain our global Unified Endpoint Management (UEM) infrastructure using Microsoft Intune, Jamf Pro, and VMware Workspace ONE.

• Strategic Fleet Engineering: Design and scale automated deployment, provisioning, and configuration management workflows for a balanced fleet of Windows 10/11 and macOS hardware.
• Modern Provisioning & Lifecycle: Standardize and evolve modern deployment frameworks utilizing Windows Autopilot, Apple Business Manager (ABM), and Automated Device Enrollment to achieve zero-touch provisioning.
• Advanced Scripting & Automation: Develop, test, and maintain robust code repositories (PowerShell for Windows; Bash/Zsh/Python for macOS) to automate complex administrative tasks, custom reporting, and API integrations.
• Security & Compliance Governance: Partner closely with the Security team to engineer and enforce endpoint security baselines (e.g., CIS Benchmarks), disk encryption protocols (BitLocker, FileVault), and EDR/antivirus agent deployments.
• Identity & Access Architecture: Lead the integration of endpoint platforms with enterprise identity and access management (IAM) systems (e.g., Entra ID, Okta), including modern single sign-on (SSO) extensions.
• Tier 3/4 Escalation & Mentorship: Act as the highest tier of technical escalation for complex endpoint, OS, and software issues. Provide mentorship, guidance, and technical training to Tier 1/2 service desk and junior systems administrators.
• Roadmapping & Documentation: Maintain a forward-looking roadmap for endpoint technologies, evaluate emerging tools, and author authoritative architectural diagrams and standard operating procedures (SOPs).

• Experience: 5-8+ years of dedicated experience in endpoint engineering, systems administration, or infrastructure architecture within an enterprise environment.
• Dual-Platform Mastery: Comprehensive, expert-level knowledge of both Windows and macOS operating systems, system internals, and enterprise deployment methodologies.
• Enterprise Tooling Expertise: Deep hands-on engineering experience configuring and managing Microsoft Intune, Jamf Pro, and Workspace ONE at scale.
• Advanced Scripting: Strong proficiency in PowerShell and Bash/Zsh (Python or Swift is a significant plus) for advanced automation, custom scripts, and utilizing MDM APIs.
• Leadership & Communication: Proven ability to lead projects independently, collaborate across multi-functional engineering teams, and explain complex technical concepts to non-technical stakeholders.

$130,000-$145,000 annually

The expected salary range above is applicable if the role is performed from Illinois and may vary for other locations (California, Colorado, New York). Actual salary may vary based on qualifications and experience. Tempus offers a full range of benefits, which may include incentive compensation, restricted stock units, medical and other benefits depending on the position.

Tempus was founded in August of 2015 by Eric Lefkofsky, after his wife was diagnosed with Breast Cancer. Shortly after he founded the company in an effort to bring the power of technology and artificial intelligence to cancer care, he convinced Ryan Fukushima to join as the company’s first employee. Ryan and Eric began assembling a world class team, focused on building the first version of a platform capable of ingesting real time healthcare data in an effort to personalize diagnostics.

We built the platform for oncology and have expanded it to neuropsychiatry, cardiology, infectious disease (through COVID), and radiology. Despite our rapid growth, our mission remains the same-to help make sure patients are on the right drug at the right time, so they can live longer and healthier lives.