Crusoe
Senior Endpoint Security Engineer
San Francisco, CA - US. Posted 4 months ago
The role
This person will implement security defaults and endpoint visibility. They will manage security architecture and maintain security posture across a global fleet of macOS, Windows, iOS, and Android devices.
What you will do
- Administer and improve Jamf and Microsoft Intune environments across all managed device types
- Build and maintain automated enrollment workflows including Apple Business Manager and Windows Autopilot
- Own a structured patch management program with clear SLAs
- Define and enforce device compliance baselines aligned with CIS Benchmarks and SOC 2
- Partner with Security on device trust policies, Conditional Access, and certificate-based authentication
- Build and maintain scripts and automation in Bash, Python, or PowerShell
- Own MDM runbooks, device policy documentation, and asset records
- Serve as the MDM escalation point in the IT on-call rotation
- Partner with People Operations on device provisioning and deprovisioning
- Mentor junior IT team members on endpoint management practices
Required qualifications
- Demonstrated experience with OSQuery and CrowdStrike (XDR/EDR)
- Deep understanding of Okta (Device Trust/FastPass) and Entra ID (Conditional Access)
- 3–6 years of experience with Jamf/Kandji and Microsoft Intune (Autopilot, Compliance Policies, App Protection)
- Proven ability to drive R&D initiatives from planning through implementation independently
- Proficiency in Bash, Python, or PowerShell
- Strong understanding of certificate infrastructure (SCEP, PKCS)
- Experience with Absolute for Windows persistence
- Strong documentation habits, ownership mindset, and ability to communicate technical policies to non-technical stakeholders
- Bachelor’s degree in IT, Computer Science, or equivalent practical experience
- OSQuery and CrowdStrike expertise
Nice to have
- Jamf Pro administration experience: Smart Groups, configuration profiles, or Jamf Connect
- Experience with Jamf Protect, Microsoft Defender for Endpoint, or equivalent EDR tooling
- Familiarity with Linux endpoint management via Fleet, Puppet, or similar
- Apple Certified Support Professional (ACSP) or equivalent MDM certification
- Exposure to SIEM tooling and endpoint log pipelines
- Experience at a high-growth technology company through a period of rapid headcount scaling
Benefits
- Competitive compensation and equity packages
- Restricted Stock Units
- Paid time off, paid holidays & leave of absence programs
- Comprehensive health, dental & vision insurance
- Employer contributions to HSA account
- Paid parental leave
- Paid life insurance, short-term and long-term disability
- Professional development & tuition reimbursement
- Mental health & wellness support
- Commuter benefits (parking & transit)
- Cell phone stipend
- 401(k) Retirement plan with company match up to 4% of salary
About the company
Crusoe is a vertically integrated AI infrastructure company that owns and operates each layer of the stack to power AI workloads. They use an energy-first approach to make AI infrastructure better for the world.