> Markdown version of [/jobs/ext/1391408-endpoint-engineer](https://www.wearedevelopers.com/jobs/ext/1391408-endpoint-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Endpoint Engineer - **Company:** Wave - **Location:** Spain (Remote available) - **Salary:** €96,500.0 - €133,100.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Apple Mac Systems, Systems Engineering, Chrome OS, Cyber Security, Linux, IT Management, Inventory Management Software, Linux System Administration, SSL Certificate Management, Software Distribution, Okta, Microsoft InTune, Deployment Automation, Patch Management, Casper Suite, Gsuite, Legacy Systems - **Published:** July 23, 2026 - **Apply:** https://es.indeed.com/viewjob?jk=41397f4beef71b48 ## About the Role * 5+ years in endpoint engineering or systems engineering with hands-on ownership of multi-platform fleets at scale. * Demonstrated strong understanding of two out of the following: * Windows/Intune experience is not required, but can be considered applicable if enough strength in our existing device fleet is demonstrated. * Strong understanding of endpoint security principles: EDR integration, compliance baselines (CIS, SOC2), certificate management, and disk encryption enforcement. * Familiarity with identity and access tooling as it touches endpoints: SSO, certificate-based auth, conditional access policies (Okta or equivalent). * Scripting and automation capability sufficient to build reliable deployment pipelines and reduce manual operational work. * Fleet reporting and observability, meaning you can tell leadership the compliance posture of the fleet at any time. You might be a good fit if you * You've owned an endpoint function through a period of growth or organizational change, not just maintained a stable one. * You build for the people executing on the ground. Your runbooks actually work, your tooling has sensible defaults, and your policies account for the reality of field operations. * You can communicate risk and tradeoffs clearly to InfoSec, IT leadership, and non-technical stakeholders. * You're comfortable operating with ambiguity and incomplete inventory data, and your first instinct is to establish observability, not assume things are fine. * You have experience with CrowdStrike Falcon or equivalent EDR platforms * Prior work in a fintech or regulated industry with compliance-driven endpoint requirements * Have French language skills or an interest in learning French * Experience managing device fleets in multi-country markets, ideally including emerging market contexts. ## Description We're looking for a Sr Endpoint Engineer who's excited about consolidating and updating legacy systems with an eye for automation. You'll be responsible for the MDM platforms, endpoint policies, device deployment pipelines, and fleet tooling that underpin how every employee at Wave interacts with their device. This role blends architectural ownership with hands-on execution, requiring you to deliver scalable, resilient, and compliant endpoint solutions in a fast growth environment. You'll own the endpoint function end-to-end: platform and policy design, provisioning standards, fleet reporting, and security integration. You'll work closely with Information Security, IT, and People Operations, and you'll be the person who sets the technical direction for how Wave manages devices at scale. The first year will be weighted toward remediation and foundation-building before shifting toward automation and scale. Candidates who have built in scrappy, high-complexity environments will be better prepared for this role than those who have only operated mature platforms in static environments. In this role, you'll: * Own and operate Wave's MDM platforms across ChromeOS (GWS Admin Console), macOS (Jamf), Android, (and Linux environments): configuration, policy design, maintenance, and roadmap. * + Manage ChromeOS device policy in Google Workspace: enrollment configuration, org unit structure, security policies, extension management, and OS version enforcement across the majority of the fleet. + Include for Jamf (also add context on device split within population) * Design and enforce endpoint security policies in collaboration with Information Security, including EDR integration (CrowdStrike Falcon), compliance baselines, and patch management. * Build and maintain automated deployment pipelines for OS updates, software distribution, and configuration changes: minimizing manual intervention and maximizing consistency. (?) * Define and manage the device lifecycle: provisioning standards, imaging, refresh cycles, decommission processes, and fleet reporting. * Establish cross-platform compatibility standards and tooling for a heterogeneous fleet (macOS, Linux, Android, with awareness of ChromeOS and Windows edge cases). * Build the tooling and runbooks that Local IT teams use to execute provisioning and onboarding on the ground. You set the standard, they execute it. * Own fleet observability: dashboards, compliance reporting, patch currency metrics, and audit-ready documentation. * Evaluate and own vendor relationships for endpoint tooling, including MDM, patch management, and related platforms. * Mentor junior profiles working in endpoint and device management. ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Simplifying edge app delivery: one workflow, thousands of devices](https://www.wearedevelopers.com/videos/1608-simplifying-edge-app-delivery-one-workflow-thousands-of-devices) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)