Senior IT Engineer

About the role

This position involves leading significant projects within device infrastructure services. You will be responsible for advancing endpoint management practices, managing change processes, and ensuring a positive user experience in a fast-paced security environment.

Key facts

What you'll do

• Oversee the planning and execution of large-scale device infrastructure initiatives.
• Guide IT change management for endpoint management, software updates, and fleet operations.
• Administer cloud-based Apple MDM platforms, including custom configurations and policies.
• Apply AI tools to infrastructure challenges like automated fixes and smarter alerts.
• Manage third-party software patching to maintain fleet currency with minimal disruption.
• Ensure all deployments prioritize user experience through thoughtful phasing and clear communication.
• Develop and implement best practices and procedures for the Device Infrastructure Services team.
• Collaborate with key stakeholders across the organization.
• Participate in occasional on-call rotations for incident resolution.

Requirements

• A minimum of 5 years of technical IT experience, with at least 2 years focused on cloud-first endpoint management in an engineering or systems administration capacity.
• Experience with Infrastructure as Code (IaC) and CI/CD for managing enterprise device fleets of 500+ endpoints, including meeting security compliance goals.
• Proven senior-level experience with Apple MDM platforms, such as Jamf.
• Practical experience designing and implementing automation using agentic or LLM-based components in IT or device management, with the ability to discern when existing tools are more appropriate.
• Strong scripting skills in Bash and other shell scripting languages for endpoint automation and fleet management.
• Hands-on experience implementing device trust principles, including phishing-resistant authentication, conditional access, and endpoint compliance policies at scale.

Nice to have

• Familiarity with IT change management and service management frameworks like ITIL.
• Global administrator experience with Microsoft Intune.
• Ability to script using PowerShell.
• Administrative experience with 1Password Enterprise Password Manager.

Skills & tools

• Bash scripting
• Shell scripting
• Apple MDM (Jamf)
• Infrastructure as Code (IaC)
• CI/CD workflows
• Endpoint management
• Device trust principles
• Phishing-resistant authentication
• Conditional access
• Endpoint compliance policies
• Microsoft Intune (preferred)
• PowerShell (preferred)
• 1Password Enterprise Password Manager (preferred)

Practical notes

• This is a remote position within the United States or Canada.
• Candidates are welcome to use AI tools responsibly during the application process.
• Travel for in-person engagement, such as department offsites or team meetings, is expected.
• Compensation includes an annual base salary, equity grant, and participation in benefits programs (health, dental, 401k/RRSP, PTO, and potential incentive programs).
• Background checks may be required.
• AI/ML technologies are used in initial application screening; opt-out is available.