> Markdown version of [/jobs/ext/2153391-endpoint-engineer-mdm](https://www.wearedevelopers.com/jobs/ext/2153391-endpoint-engineer-mdm). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Endpoint Engineer - MDM

- **Company:** After School Matters, Inc.
- **Location:** Palo Alto, CA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Amazon Web Services, Apple IOS, Apple Mac Systems, Bash Shell, BitLocker Drive Encryption, Cloud Computing, Software Debugging, Windows PowerShell, Azure Active Directory, Software Vulnerability Management, Okta, Microsoft InTune, Information Technology, Deployment Automation, Patch Management, Casper Suite, CIS Benchmarks, Unified Endpoint Management
- **Published:** August 20, 2026
- **Apply:** https://inabia.applytojob.com/apply/E47iYxmPy2/Endpoint-Engineer-MDM?source=GS

## About the Role

* 3-5+ years in an Endpoint Engineering or MDM-focused role
 * Proven experience managing macOS and iOS at scale via Jamf Pro
 * Experience managing Windows environments through Microsoft Endpoint Manager/Intune
 * Hands-on Amazon WorkSpaces administration
 * Experience deploying and managing a BYOD program for personal mobile devices (iOS/Android)
 * Ability to write and debug Bash and PowerShell scripts from scratch
 * Understanding of Okta or Azure AD (Entra ID) as it relates to device enrollment and SSO
 * Bachelor's degree in Computer Science, IT, or equivalent experience; Jamf 200/300, Microsoft MD-102, or AWS Certified Cloud Practitioner is a plus

## Description

Rubrik needs a strong Endpoint Engineer to backfill support for Jamf-based deployments and scripting on its Palo Alto-based device fleet. The existing team has two resources in India but needs additional onsite support. The client is specifically looking for someone with true end-to-end ownership of deployment and configuration - a prior candidate was passed over for relying on an engineering team to execute policies rather than implementing them directly. The role covers a ~90% Mac environment, plus Jamf, Intune, and Amazon WorkSpaces (VDI) for the remaining Windows-based endpoints, with responsibility for architecting and maintaining the Jamf Pro environment, leading Intune administration for Windows/Android, managing zero-touch provisioning (Apple Business Manager, Windows Autopilot), and building automation and reporting for the endpoint fleet.
KEY RESPONSIBILITIES

 * Perform daily upkeep, system maintenance, and patch management across all managed endpoints
 * Serve as the final escalation point and subject matter expert for complex endpoint issues
 * Architect and maintain the Jamf Pro environment for macOS/iOS: configuration profiles, policies, and patching
 * Lead Microsoft Intune administration for Windows and Android: policy application, security baselines, and app delivery
 * Manage Apple Business Manager (ABM) and Windows Autopilot for zero-touch deployment
 * Administer Amazon WorkSpaces (VDI)
 * Develop and maintain PowerShell/Bash scripts to automate manual tasks and integrate system APIs
 * Build and maintain a library of packaged software (dmg, pkg, msi) for silent deployment
 * Implement automated reporting for hardware inventory, license compliance, and security auditing
 * Enforce endpoint security standards (FileVault/BitLocker, EDR agent health) and partner with Security on vulnerability remediation


## Related Videos

- [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies)
- [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks)
- [Xcode development redefAIned](https://www.wearedevelopers.com/videos/100195-xcode-development-redefained)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [MCP doesn’t suck — your agent does](https://www.wearedevelopers.com/videos/100202-mcp-doesn-t-suck-your-agent-does)
- [Harnessing Apple Intelligence: Live Coding with Swift for iOS](https://www.wearedevelopers.com/videos/1515-harnessing-apple-intelligence-live-coding-with-swift-for-ios)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)