Senior Endpoint Security Engineer

Crusoe
San Francisco, Sunnyvale, Denver
Workplace: OnsiteFull timeUSD 170,000 - 205,000 annuallyFunction: CybersecurityExperience: 3-6 yearsEducation: bachelorsSkills: ["Documentation","Ownership","Communication","Independent execution","Problem-solving"]

Build secure-by-default endpoint security for a global fleet of macOS, Windows, iOS, and Android devices. Administer Jamf and Microsoft Intune, automate zero-touch enrollment, and run patch management with clear SLAs. Define compliance baselines aligned to CIS Benchmarks and SOC 2, integrating MDM telemetry with EDR/SIEM. Partner with Security on trust, conditional access, and certificate-based authentication, while scripting automation and mentoring junior team members.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Crusoe
Crusoe
1 month ago

Senior Endpoint Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 15 hours agoStatus: Live

Job Summary

Build secure-by-default endpoint security for a global fleet of macOS, Windows, iOS, and Android devices. Administer Jamf and Microsoft Intune, automate zero-touch enrollment, and run patch management with clear SLAs. Define compliance baselines aligned to CIS Benchmarks and SOC 2, integrating MDM telemetry with EDR/SIEM. Partner with Security on trust, conditional access, and certificate-based authentication, while scripting automation and mentoring junior team members.
Location: San Francisco, Sunnyvale, Denver
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Administer and continuously improve Jamf and Microsoft Intune across macOS, Windows, iOS, and Android, including configuration profiles, compliance policies, app deployment, and OS update enforcement.
  • •Build automated enrollment workflows using Apple Business Manager and Windows Autopilot for zero-touch provisioning at scale.
  • •Own patch management and define/enforce device compliance baselines aligned to CIS Benchmarks and SOC 2, integrating MDM telemetry with EDR/SIEM for compliance drift visibility.
  • •Partner with Security on device trust policies, Conditional Access enforcement, and certificate-based authentication rollout (SCEP/PKCS) for Wi-Fi and VPN.
  • •Create scripts and automation in Bash/Python/PowerShell, maintain MDM runbooks and documentation, and serve as the MDM escalation point while mentoring junior IT team members.

Pay and Benefits

Salary: USD 170,000 - 205,000 annually
Equity and Bonus:Equity
Perks:EquityHealth InsuranceDentalVisionPaid LeavePaid Parental401kLife InsuranceDisabilityHsa ContributionsPaid HolidaysCell PhoneVolunteer TimeTravel Allowance

Key Requirements

  • •3–6 years of endpoint/MDM experience with Jamf/Kandji and Microsoft Intune, including Autopilot, Compliance Policies, and App Protection.
  • •Demonstrated endpoint visibility and threat detection experience with OSQuery and CrowdStrike (XDR/EDR).
  • •Strong identity and access management knowledge, including Okta (Device Trust/FastPass) and Entra ID (Conditional Access).
  • •Proficiency scripting and automation in Bash, Python, or PowerShell to automate device policy, packaging, and remediation.
  • •Strong understanding of certificate infrastructure (SCEP, PKCS) and ability to communicate technical policies to non-technical stakeholders.
Experience:3-6 years
Education:Bachelor's
Skills:DocumentationOwnershipCommunicationIndependent executionProblem-solving
Certifications:Apple Certified Support Professional (ACSP)
Tech Stack:JamfMicrosoft IntuneMacOSWindowsIOSAndroidApple Business Manager (ABM)Windows AutopilotCIS BenchmarksSOC 2MDMEDRSIEMOSQueryCrowdStrikeOktaEntra IDConditional AccessSCEPPKCS

Company Brief

Crusoe
Builds vertically integrated, energy-first AI infrastructure and purpose-built AI data centers (Crusoe Cloud), leveraging clean/stranded energy to power large-scale GPU compute for AI training and inference.
Industry: Data Centers
Company Size: Enterprise (1,001+ employees)
Growth: Scaleup
Valuation: Decacorn (USD 10B+)
Funding: Series E+
Headquarters: Denver, United States
Founded: 2018
Glassdoor
Glassdoor: 3.7
WebsiteLinkedInGlassdoor