> Markdown version of [/jobs/ext/4599778-senior-endpoint-engineer](https://www.wearedevelopers.com/jobs/ext/4599778-senior-endpoint-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Endpoint Engineer - **Company:** The Apex - **Location:** Austin, TX, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Apple Mac Systems, Systems Engineering, Microsoft Azure, Microsoft Online Services, Cloud Computing, Code Review, Cyber Security, Continuous Integration, Github, Python (Programming Language), Kerberos (Protocol), Windows API, OAuth, OpenID, Windows PowerShell, Role-Based Access Control, Ansible, Security Assertion Markup Language (SAML), Service Pack, Software Engineering, Systems Integration, Software Vulnerability Management, Policy as Code, Azure Automation, Cloud Platform System, Okta, Microsoft Power Automate, AWS Lambda, Git, Cloudformation, Microsoft InTune, Gitlab-ci, Information Technology, Deployment Automation, Apple Business Manager, Bicep, Casper Suite, CIS Benchmarks, Terraform, Serverless Computing, ServiceNow Customer Service Management, Qualys, Servicenow - **Published:** November 6, 2026 - **Apply:** https://www.careerbuilder.com/job-details/senior-endpoint-engineer-austin-tx--faecaf0f-77e4-4d69-9203-bc1b5809ec48 ## About the Role Wealth Management, Stock Market, Customer Service Software, Securities, Process Improvement, Team Player, Apple, Mac Operating System, Software Patches, Technical Leadership, Required * Bachelor's degree in computer science or related technical discipline (or equivalent work experience) required. * 6+ years in endpoint or systems engineering, with hands-on administration of both Microsoft Intune and an Apple MDM (Jamf Pro or Kandji). * Deep Intune expertise: compliance, configuration profiles, Autopilot, app protection, Scope Tags, and custom RBAC roles. * Strong Jamf Pro or Kandji experience: policies/Blueprints, configuration profiles, and zero-touch enrollment. * Apple Business Manager experience (automated enrollment, VPP, MDM server integration). * Proven policy-as-code and GitOps experience: infrastructure as code (Terraform modules and remote state, Bicep, Ansible, or CloudFormation) and CI pipelines (GitHub Actions, GitLab CI, Azure DevOps, or similar) with code review. * Strong automation background: PowerShell and Python, plus the Microsoft Graph API. * Strong Azure experience, including automation and integrations built on services such as Azure Automation, Logic Apps, and Azure Functions. * Entra ID administration (dynamic groups, app registrations, hybrid identity) and Conditional Access design in production. Okta experience a plus. * Vulnerability management and patching experience (Defender Vulnerability Management, Rapid7, Qualys, Patch My PC, Winget, or similar) and app packaging experience (PSADT, IntuneWin, PKG). * Solid grounding in Windows and macOS architecture, Kerberos, SAML, OAuth/OIDC, and certificate-based auth (SCEP/PKCS). * Strong documentation and communication skills, including the ability to explain tradeoffs to technical and non-technical audiences. Nice to Have * AWS experience, including automation and integrations built on services such as Lambda, Step Functions, and EventBridge. * Experience using AI in production to solve operational problems. * Experience applying CIS Benchmarks and NIST frameworks (such as 800-53 or CSF) to endpoint compliance baselines. * Microsoft certifications (MD-102, SC-300, AZ-104, or AZ-500), Apple certifications, or cloud certifications (AWS, Azure). * ServiceNow or similar ITSM experience. ## Description We're hiring a Senior Endpoint Engineer to own and evolve how our Windows and Mac devices are enrolled, configured, secured, patched, and retired. You'll be the technical lead for Microsoft Intune on Windows, Jamf Pro or Kandji with Apple Business Manager on macOS, and Entra ID Conditional Access or Okta to tie device trust to access. This role is for someone who treats device management as software engineering. Every policy, profile, and script is written as code, reviewed in Git, rolled out in stages, and reversible. You'll bring new ideas, integrate our MDM, identity, and cloud systems, and replace manual work with automation. What You'll Do Lead endpoint platform engineering * Own Intune end to end: compliance, configuration profiles, Autopilot, app deployment, Scope Tags, and RBAC. * Manage the Apple lifecycle through Jamf Pro or Kandji and Apple Business Manager, including zero-touch enrollment and app deployment. * Design and enforce Conditional Access (Entra ID) and Okta device-trust policies with security and identity teams. Ship policy as code * Ship MDM policy as code across macOS and Windows through a GitOps model (Terraform, Ansible, IntuneCD, or similar), with CI/CD, peer review, staged rollouts, and rollback. * Own managed browser and extension policy, keeping the control plane auditable. Automate and integrate * Build integrations and automation across Intune, Jamf/Kandji, Entra ID, and cloud platforms using PowerShell, Python, Microsoft Graph, and services such as Azure Automation, Logic Apps, Azure Functions, or AWS Lambda. * Automate patching and third-party app updates to close exposure windows without disrupting employees. * Build dashboards, drift alerts, and AI-assisted automation from fleet telemetry to cut toil. Secure and harden * Package and deploy apps (Win32, MSI, PKG/DMG) with detection, dependency, and rollback planning. * Partner with Information Security to remediate vulnerabilities and harden endpoints against CIS Benchmarks, mapped to NIST controls. Lead and innovate * Serve as the escalation point for complex endpoint incidents, driving root-cause analysis and long-term fixes. * Set technical standards, document architecture decisions, and mentor engineers. * Evaluate new tools and apply AI to real operational problems to improve security, reliability, and user experience.