Senior Endpoint Engineer (Jamf/Intune)

Airtable•San Francisco, CA

40d•Remote

About The Position

Airtable is seeking a Senior Endpoint Engineer to design, manage, and continuously improve our global endpoint and SaaS integration ecosystem. You'll oversee a fleet of ~1,000 macOS devices and under 100 Windows devices, ensuring the environment is secure, reliable, and automated - while bridging the gap between endpoint management, identity, and cloud applications. This role goes beyond traditional MDM administration. You'll engineer integrations and automations between tools like Jamf, Intune, Okta, Google Workspace, Slack, CrowdStrike, Airtable, and other core SaaS platforms - creating a connected, intelligent, and adaptive IT environment that scales with the company. If you're passionate about building modern, automated client platforms and leveraging data and APIs to make IT smarter, this is your role.

Requirements

5+ years of experience managing macOS and Windows endpoints in enterprise or high-growth environments.
Deep, hands-on expertise with Jamf Pro (certifications at 300/400 level preferred).
Solid experience with Microsoft Intune, Windows Autopilot, and compliance policies.
Proficient in scripting and automation using Bash, Zsh, or Python (PowerShell a plus).
Strong understanding of API-based integrations and automation frameworks (e.g., REST, Graph API, Okta Workflows, Workato).
Familiarity with Okta, Google Workspace, Slack, CrowdStrike, and SaaS admin APIs.
Excellent troubleshooting, documentation, and communication skills.
Comfortable operating autonomously in a distributed, fast-moving environment.

Nice To Haves

Experience with Swift or Python for building internal tools or lightweight agent applications.
Exposure to configuration-as-code and GitOps practices for infrastructure and MDM management.
Understanding of Zero Trust architecture and device identity principles.
Startup or high-growth SaaS environment experience.

Responsibilities

Own and manage Jamf Pro for macOS and Microsoft Intune for Windows device management.
Design, build, and maintain zero-touch provisioning workflows (Apple Business Manager, Windows Autopilot).
Develop and maintain scripts, policies, and configuration profiles to enforce compliance and automate device setup.
Implement configuration-as-code and version control practices for MDM configurations.
Drive continuous improvement through automation, telemetry, and integration.
Integrate MDM platforms (Jamf & Intune) with core SaaS and infrastructure tools - including Okta, Google Workspace (GSuite), Slack, CrowdStrike, Airtable, and Security platforms.
Leverage APIs, webhooks, and automation platforms (e.g., Workato, Okta Workflows, custom Python/Bash scripts) to create seamless data flows and automated remediation.
Build and maintain visibility dashboards for device posture, compliance, and provisioning metrics.
Partner with IT and Security teams to align device management with broader identity and access management strategies.
Collaborate closely with the Security team to implement and maintain endpoint security controls (e.g., encryption, EDR, patching, compliance enforcement).
Integrate CrowdStrike and other security telemetry into MDM and IT workflows.
Ensure devices meet compliance requirements (SOC 2, ISO 27001, internal policies).
Maintain vulnerability management processes and patch cadence across platforms.
Build self-service automation and tools that improve the employee technology experience.
Partner with IT Support to troubleshoot and resolve advanced endpoint or identity-related issues.
Document workflows, policies, and best practices for scalability and knowledge sharing.
Define the long-term Client Platform vision that connects endpoint management, SaaS integration, and identity infrastructure.
Develop metrics for endpoint compliance, user experience, and automation coverage.
Evaluate emerging tools and frameworks to advance Airtable's client platform maturity.
Mentor peers and contribute to IT engineering standards and architecture.