Staff IT Systems Engineer, Endpoints

Lila Sciences • Cambridge, MA

23d

About The Position

Lila Sciences is hiring a Staff IT Systems Engineer, Endpoints to own the architecture and roadmap for endpoint management across the company. The role sits within IT & Security and supports laptops, mobile devices, specialized research compute, endpoint security, and device trust. Endpoint management is treated as a software engineering discipline, with configuration, policy, remediation, and fleet operations managed through code, CI/CD, staged rollouts, observability, and automated rollback.

This is a hands-on staff-level position for someone who can set technical standards, build tooling, mentor engineers, and lead cross-functional initiatives across IT, Security, Research Computing, and Lab Operations. The role will help make endpoint systems more automated, secure, auditable, and seamless as Lila grows, enabling employees and scientists to become productive faster while reducing device risk, operational noise, and manual work.

Requirements

• Deep experience in IT systems engineering, endpoint engineering, infrastructure, or platform engineering, with staff-level technical ownership.
• Strong experience with modern MDM or UEM platforms such as Jamf, Intune, Workspace ONE, or similar tools.
• Experience managing endpoint configuration through code, automation, version control, staged rollout, or CI/CD practices.
• Strong systems knowledge across macOS and Windows endpoint environments.
• Ability to build and maintain automation using Python, Bash, PowerShell, APIs, or similar tooling.
• Experience using AI-assisted engineering, LLM APIs, internal copilots, or agentic automation to reduce operational toil in IT, endpoint, infrastructure, or platform operations.
• Experience partnering with Security on endpoint hardening, device trust, vulnerability management, EDR, or Zero Trust initiatives.
• Strong troubleshooting ability across endpoint, identity, network, application, and user-experience boundaries.
• Track record mentoring engineers, setting technical standards, and leading cross-functional technical initiatives.
• Clear written and verbal communication skills, with the ability to influence technical decisions across teams.

Nice To Haves

• Experience supporting scientific, research, lab, OT, or high-performance computing environments.
• Familiarity with Okta, SAML, SCIM, device trust, SASE, EDR, or cloud access patterns.
• Experience with AWS, GCP, cloud-native infrastructure, or cloud-based endpoint telemetry workflows.
• Experience with open-source endpoint tooling such as osquery, Fleet, Munki, or similar tools.
• Experience building VDI, managed browser, call center, or contact center computing environments.
• Proficiency in Go, Swift, or another language used for custom endpoint tooling.
• Experience in a regulated, IP-sensitive, biotech, life-sciences, or research environment.

Responsibilities

• Own the architecture and roadmap for the endpoint fleet across macOS, Windows, Linux, mobile devices, and specialized research or lab computing endpoints.
• Define endpoint configuration, policy, remediation, observability, and rollout standards across the IT & Security team.
• Drive configuration-as-code adoption for MDM policies, profiles, scripts, staged rollouts, canary groups, and automated rollback.
• Design zero-touch provisioning workflows so devices arrive encrypted, configured, compliant, and ready for use.
• Partner with Security to integrate endpoint posture, device trust, vulnerability data, EDR, and Zero Trust access controls.
• Build automation and internal tooling using scripts, APIs, CI/CD, and AI-assisted engineering practices to reduce manual work.
• Improve vulnerability and patch management through telemetry, dashboards, drift detection, and auditable compliance workflows.
• Support specialized computing environments, including research workstations, lab-adjacent systems, VDI, managed browsers, and remote-access patterns where appropriate.
• Serve as a technical escalation point for complex endpoint issues and mentor engineers across IT and Security.
• Partner with Security, Legal, HR, Research Computing, and Lab Operations to protect sensitive intellectual property while maintaining a seamless employee experience.

Benefits

• Competitive base compensation with bonus potential and generous early-stage equity.
• Medical, dental, and vision coverage for full-time U.S. employees.
• Employer-paid life and disability insurance for full-time U.S. employees.
• Flexible time off with generous company-wide holidays for full-time U.S. employees.
• Paid parental leave for full-time U.S. employees.
• Educational assistance program for full-time U.S. employees.
• Commuter benefits, including bike-share memberships for office-based employees.
• Company-subsidized lunch program for full-time U.S. employees.
• Comprehensive benefits tailored to the employee's region for full-time employees outside the U.S.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed