Endpoint Engineer, IT at ThinkingMachines

Department: Security & IT

Compensation

$180,000 – $360,000/yr

Setup: On-site
Location: San Francisco, California
Type: Full-time
Level: senior
Posted: Aug 4, 2026

Description

Thinking Machines is hiring a senior Endpoint Management Engineer to build and operate secure macOS endpoint systems across a large distributed fleet. The role covers configuration as code, MDM platform engineering, migration from Iru to Fleet, Santa and Rudolph, zero-trust device trust, continuous posture evaluation, patching, zero-touch provisioning, software distribution, telemetry, automation, endpoint security, and complex troubleshooting. It requires 8+ years of experience in secure IT or endpoint systems, with work based in San Francisco or New York and visa sponsorship available.

Required Skills

macOS internals
MDM engineering
GitOps
Santa authorization
Terraform
Zero Trust
Python
Swift
osquery

Additional Information

Required Previous Experiences: 8+ years building and operating secure IT or endpoint systems in complex environments
Managing a large macOS device fleet through a modern MDM platform
Managing endpoint configuration through scripted deployments, Git-based workflows, or GitOps
Designing and operating zero-touch Mac provisioning, patching, and software-distribution workflows
Using device health and security signals to evaluate endpoint compliance
Delivering complex technical projects from conception through production
Preferred Qualifications: Fleet MDM, osquery, GitOps, software management, and vulnerability management
Leading a production MDM migration with Apple Business Manager and Automated Device Enrollment
Managing macOS devices with Iru, formerly Kandji
Operating Santa at scale with rule management, binary authorization, telemetry, and Rudolph
Designing device-trust and continuous-posture-evaluation systems for Zero Trust
Operating an MDM platform as a production service
Building automated endpoint rollout systems with staging, canary groups, rollback, and telemetry-based promotion
Deploying, operating, or contributing to open-source macOS endpoint-management or security tools
Managing endpoint or cloud infrastructure with Terraform or another infrastructure-as-code framework
Operating AWS services including Lambda, API Gateway, DynamoDB, containers, managed databases, and monitoring
Building macOS endpoint tools, agents, or supporting services with Swift or Go
Using LLMs to automate operational work or applying them to endpoint engineering
Translation Company Name: Thinking Machines Lab