Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Thinking Machines is building AI that extends human will and judgment. The IT team is responsible for secure infrastructure and efficient processes that enable employees to move quickly, operating an all-Mac environment and managing their endpoint fleet as a distributed platform using production-engineering practices for device management and security.

Responsibilities

• Author, review, test, and deploy macOS configuration profiles, security policies, queries, and remediation scripts.
• Build code review, staging, canary, validation, and rollback processes into endpoint changes.
• Operate the MDM platform as a production service, including configuration as code, observability, upgrades, reliability, incident response, and integrations.
• Lead the evaluation, design, testing, and execution of the MDM migration from Iru to Fleet.
• Establish functional requirements, identify configuration and security-control gaps, and develop a phased migration plan.
• Own the architecture and operation of Santa and its Rudolph synchronization service.
• Manage binary-authorization policies, rule distribution, application approvals, telemetry, observability, infrastructure, and incident response.
• Partner with Security and Identity to make device trust a core component of the Zero Trust architecture.
• Integrate endpoint posture signals into authentication, authorization, and conditional-access decisions.
• Build systems that continuously evaluate device health and security posture.
• Automatically identify and remediate drift or restrict access when a device no longer meets requirements.
• Build and maintain automated macOS patching workflows.
• Design and improve Apple Business Manager and Automated Device Enrollment workflows for zero-touch provisioning.
• Own application packaging, deployment, updating, and removal across the Mac fleet.
• Query live device state at scale and turn endpoint telemetry into actionable policies, dashboards, compliance reporting, and early warnings.
• Build tools and AI-assisted workflows to reduce repetitive operational work and enhance scalability.
• Partner with Security on macOS hardening, vulnerability management, compliance controls, detection and response, and device-based access policies.
• Serve as the escalation point for complex macOS and endpoint-platform issues.
• Help define the endpoint roadmap, evaluate technologies, make architecture decisions, and lead complex initiatives.

Requirements

• 8+ years of experience building and operating secure IT or endpoint systems in complex environments.
• Experience managing a large fleet of macOS devices through a modern MDM platform.
• Experience managing endpoint configuration through scripted deployments, Git-based workflows, or a full GitOps model.
• Deep knowledge of macOS internals, enterprise deployment, security controls, and troubleshooting.
• Experience designing and operating zero-touch Mac provisioning, patching, and software-distribution workflows.
• Experience using device health and security signals to evaluate endpoint compliance.
• Experience successfully delivering complex technical projects from conception through production.
• Strong ability to solve ambiguous problems involving multiple teams and stakeholders.
• Ability to communicate technical concepts clearly to technical and nontechnical audiences.
• A product-engineering mindset toward IT systems, including testing, observability, reliability, and controlled change management.
• A consistent practice of creating clear technical documentation, architecture diagrams, runbooks, and operational procedures.
• Ability to work from either our New York or San Francisco office.

Skills

• Python and shell scripting
• macOS internals, including launchd, configuration profiles, Transparency, Consent, and Control (TCC), system extensions, Endpoint Security, FileVault, Secure Token, and bootstrap tokens.
• Apple Business Manager, Automated Device Enrollment, and Apple’s MDM and Declarative Device Management frameworks.
• Modern Apple MDM platforms, particularly Iru, Fleet, Jamf, or equivalent.
• Santa binary authorization and Rudolph synchronization infrastructure.
• Fleet-scale querying and osquery.
• Git, pull-request workflows, GitOps, and CI/CD for endpoint configuration.
• Terraform and infrastructure as code.
• Public-cloud fundamentals, including serverless infrastructure, containers, managed databases, and monitoring.
• Device lifecycle automation, including zero-touch enrollment, patching, software distribution, and secure deprovisioning.
• Endpoint security, Zero Trust, device trust, continuous posture evaluation, compliance, and automated remediation.
• Experience deploying, operating, or contributing to Fleet.
• Experience leading a production MDM migration.
• Experience managing macOS devices with Iru.
• Experience operating Santa at scale.
• Experience designing device-trust and continuous-posture-evaluation systems.
• Experience operating an MDM or device-management platform as a production service.
• Experience building automated endpoint rollout systems with staging, canary groups, rollback capabilities, and promotion decisions based on telemetry.
• Experience deploying, operating, or contributing to open-source macOS endpoint-management or security tools.
• Experience managing endpoint or cloud infrastructure through Terraform or another infrastructure-as-code framework.
• Experience operating AWS services such as Lambda, API Gateway, DynamoDB, containers, managed databases, and monitoring systems.
• Proficiency in Swift or Go for building macOS endpoint tools, agents, or supporting services.
• Experience using LLMs to automate operational work or a strong interest in applying them to endpoint engineering.

Location

• San Francisco, California
• New York, New York

Work Type

• Onsite

Experience Level

• 8+ years of experience

Salary/Compensations

• $190,000 - $300,000

Benefits

• Generous health, dental, and vision benefits
• Unlimited PTO
• Paid parental leave
• Relocation support as needed

About the Company

• The mission of Thinking Machines is to build AI that extends human will and judgment.
• We sponsor visas. While we can't guarantee success for every candidate or role, if you're the right fit, we're committed to working through the visa process together.

Equal Opportunity

• As set forth in Thinking Machines' Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.