IT Systems Engineer (Endpoint)

6 hours, 16 minutes ago
Full-time
Senior
DevOps and Infrastructure
SpaceX

SpaceX

SpaceX designs, manufactures, and launches advanced rockets and spacecraft with the aim of revolutionizing space technology and enabling human life on other planets.

Aerospace & Defense
10K-50K
Founded 2002

Description

  • Architect, implement, and manage Jamf, Fleet, Microsoft Intune, and Entra Conditional Access policies to enforce zero-trust and device compliance.
  • Design, deploy, and maintain endpoint configurations, compliance policies, application deployments, and security baselines for Windows 11, Windows Server, macOS, and iOS devices.
  • Develop and maintain automation using PowerShell, Bash, and AppleScript for provisioning, configuration management, patching, remediation, and reporting.
  • Integrate telemetry from endpoint platforms with Splunk to provide real-time monitoring, alerting, compliance dashboards, and support for security investigations.
  • Implement, audit, and maintain endpoint controls aligned with CIS benchmarks and regulatory requirements such as ITAR and EAR.
  • Evaluate and operationalize AI-powered workflows and tools to improve efficiency and reduce risk.
  • Collaborate with Security, Compliance, Infrastructure, and business stakeholders to define standards and support audits.
  • Create and maintain documentation, runbooks, and knowledge articles, and provide training and tier-3 escalation support.
  • Lead or contribute to major endpoint initiatives such as OS migrations, Conditional Access expansions, platform integrations, and automation improvements.
  • Continuously improve automation, monitoring, compliance posture, and operational resilience through scripting and process optimization.

Requirements

  • Bachelor's degree in Computer Science, Information Technology, or a related technical discipline, plus 5+ years of hands-on experience with Jamf, Fleet, Intune, and Entra Conditional Access in large enterprise environments; or 7+ years of equivalent experience in lieu of a degree.
  • Experience managing Apple macOS and iOS enterprise environments and Windows 11 and Windows Server operating systems.
  • Experience implementing security controls and compliance frameworks in regulated environments.
  • Hands-on experience integrating endpoint platforms with Splunk for SIEM, compliance reporting, and operational visibility (preferred).
  • Direct experience implementing CIS benchmarks and operating in ITAR/EAR-controlled environments (preferred).
  • Familiarity with AI workflows and tools, including using large language models for scripting, policy generation, log analysis, or automation (preferred).
  • Significant experience developing and maintaining production-grade scripts in PowerShell, Bash, and AppleScript (preferred).
  • Proficiency with Microsoft Graph API, advanced PowerShell module development, CI/CD practices, GitOps, DevOps tooling, and Infrastructure as Code (preferred).
  • Relevant Microsoft and Apple certifications such as MS-102, AZ-900, Jamf-200/300, or security/compliance credentials (preferred).
  • Experience leading cross-functional endpoint projects and mentoring or training IT team members (preferred).
  • Excellent written and verbal communication skills with the ability to explain complex technical topics to technical and non-technical audiences (preferred).
  • Willingness to participate in after-hours or weekend support when necessary.
  • Comfort working with mission-critical and sensitive systems in a highly regulated environment.
  • Must meet ITAR export-control eligibility requirements as a U.S. citizen, national, lawful permanent resident, refugee, asylee, or otherwise eligible for required authorization.

Benefits

  • Base salary range of $135,000 to $170,000.
  • Eligibility for long-term incentives, including company stock or long-term cash awards.
  • Potential discretionary bonuses.
  • Employee Stock Purchase Plan with the ability to buy additional stock at a discount.
  • Comprehensive medical, vision, and dental coverage.
  • 401(k) retirement plan.
  • Short- and long-term disability insurance, life insurance, and paid parental leave.
  • 3 weeks of paid vacation, 10 or more paid holidays per year, and paid sick leave per company policy.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Systems Engineer (Trading Infrastructure)

Eqvilent 11-50 Capital Markets

Systems Engineer at a globally distributed trading infrastructure team responsible for building, validating, and supporting production-ready infrastructure across regions and colocations.

Ansible Bash DNS Linux Python TCP/IP Terraform
5 hours, 31 minutes ago

Principal Systems Engineer, Air Vehicle Systems

Anduril Industries 1K-5K Aerospace & Defense

Anduril Industries is seeking a Principal Systems Engineer to lead systems engineering for a Group 5 autonomous aircraft program, driving requirements, architecture, and review milestones for complex unmanned systems.

5 hours, 46 minutes ago

Staff Systems Engineer, Mission Autonomy, Active Clearance

Anduril Industries 1K-5K Aerospace & Defense

Anduril Industries is hiring a Systems Engineer to support autonomous airpower systems by developing and maintaining systems engineering artifacts and serving as a key interface between internal teams and government customers.

Python System Design
5 hours, 46 minutes ago

Sr. Systems Engineer, Enterprise - Financial Services

Veeam Software 1K-5K Internet Software & Services

Veeam is seeking a Sr. Systems Engineer, Enterprise - Financial Services to advise large enterprise customers on secure, resilient data architectures and cyber recovery across hybrid, multi-cloud, and SaaS environments.

AWS Azure GCP Kubernetes Linux LLM Machine Learning
6 hours, 1 minute ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers