ZipRecruiter

Log In

1

Mac Endpoint Engineer Jobs in California (NOW HIRING)

ALO

Lead Endpoint Engineer

Beverly Hills, CA · On-site

$135K - $155K/yr

OVERVIEW We are seeking a highly skilled and experienced Intune and Jamf Endpoint Engineer with ... High proficiency with standard PC and Mac scripting languages such as Powershell and Bash, and must ...

ALO

Lead Endpoint Engineer

Beverly Hills, CA · On-site

$135K - $155K/yr

OVERVIEW We are seeking a highly skilled and experienced Intune and Jamf Endpoint Engineer with ... High proficiency with standard PC and Mac scripting languages such as Powershell and Bash, and must ...

Decagon

IT Engineer

San Francisco, CA · On-site

$125 - $150/hr

We're looking for an IT Engineer to be the hands‑on IT presence for our San Francisco office. You ... Own Mac endpoint management through Rippling MDM including configuration policies, OS/app patching ...

Decagon

IT Engineer

San Francisco, CA · On-site

$96K - $140K/yr

Own Mac endpoint management through Rippling MDM including configuration policies, OS/app patching ... engineering, ideally at a fast-growing company * Hands-on administration experience with Okta

iSpace, Inc

Mac Engineer

Los Angeles, CA · On-site

Mac Engineer Location: New York, NY Type: 03 - 06 plus months contract with extension Summary ... Apple endpoint management and security, hardware standards and lifecycle support, remote access ...

Virta Health

IT Engineer

San Francisco, CA · On-site

$100 - $125/hr

Manage the Mac Fleet : Lead the endpoint management strategy for a growing ecosystem of macOS ... Partner with Engineering and Security teams to roll out robust Privileged Access Management (PAM ...

Rox Data Corp

IT Engineer

San Francisco, CA · On-site

$125 - $150/hr

We're hiring an IT Support Engineer to be the hands-on presence day to day, managing the support ... Experience with Mac endpoint management (JumpCloud, Jamf, or similar MDM) * Scripting ability in ...

Rox

IT Engineer

San Francisco, CA · On-site

We're hiring an IT Support Engineer to be the hands-on presence day to day, managing the support ... Experience with Mac endpoint management (JumpCloud, Jamf, or similar MDM) * Scripting ability in ...

Western Digital

Senior Mac Engineer

Irvine, CA · On-site +1

$112K - $154K/yr

We are seeking a highly skilled Senior Mac Engineer to design, implement, and support enterprise ... Troubleshoot complex endpoint, authentication, and MDM issues across macOS/iOS environments

Western Digital

Senior Mac Engineer

Irvine, CA · On-site

$98K - $130K/yr

We are seeking a highly skilled Senior Mac Engineer to design, implement, and support enterprise ... Troubleshoot complex endpoint, authentication, and MDM issues across macOS/iOS environments

Western Digital

Senior Mac Engineer

Irvine, CA · On-site +1

$112K - $154K/yr

We are seeking a highly skilled Senior Mac Engineer to design, implement, and support enterprise ... Troubleshoot complex endpoint, authentication, and MDM issues across macOS/iOS environments

Astra

Sr Staff Infrastructure Systems Engineer

Alameda, CA · On-site

$125K - $171K/yr

They are seeking a Senior Staff Infrastructure Systems Engineer to build and manage the internal ... SAML/OAuth/SCIM) • Strong experience managing heterogeneous endpoint fleets (Mac, Windows, Linux;

Edison

IT Operations Engineer

San Francisco, CA · On-site

$150 - $200/hr

... Mac fleet management, MDM, hardware lifecycle, endpoint compliance, and collaboration platforms ... engineering, or a related role, ideally in a startup or high-growth environment. * Strong hands-on ...

next page

Showing results 1-20

All JobsMac Endpoint Engineer JobsMac Endpoint Engineer Jobs in California

Mac Endpoint Engineer information

What is a Mac Endpoint Engineer?

Mac Endpoint Engineers are IT professionals who specialize in managing, configuring, and securing Apple Mac computers within an organization. They are responsible for deploying software, ensuring system security, troubleshooting issues, and maintaining compliance with corporate policies on Mac devices. Their expertise includes using tools like Jamf, Apple Business Manager, and other device management platforms to streamline and automate Mac fleet administration. Mac Endpoint Engineers play a critical role in ensuring that all Mac endpoints are up-to-date, secure, and operating efficiently within the company’s IT environment.

What are the key skills and qualifications needed to thrive as a Mac Endpoint Engineer?

To thrive as a Mac Endpoint Engineer, you need expertise in macOS systems, device management, scripting (such as Bash or Python), and a relevant degree or certifications like Apple Certified Support Professional (ACSP). Familiarity with tools like Jamf Pro, Munki, and MDM solutions is typically required to manage and secure Apple devices at scale. Strong problem-solving, communication, and collaboration skills help you effectively support end-users and work with IT teams. These capabilities ensure the secure, efficient, and reliable operation of Mac endpoints in enterprise environments.

What are some typical challenges Mac Endpoint Engineers face when managing large-scale deployments?

Mac Endpoint Engineers often encounter challenges related to ensuring consistent configuration and security compliance across hundreds or thousands of devices. Common issues include dealing with OS compatibility, managing software updates remotely, and troubleshooting user-specific problems without direct access to the device. Effective use of Mobile Device Management (MDM) solutions, strong scripting skills, and proactive communication with end-users and IT teams are essential to overcome these challenges and keep systems secure and operational.

What is the difference between Mac Endpoint Engineer vs Mac Systems Administrator?

AspectMac Endpoint EngineerMac Systems Administrator
CertificationsApple Certified Support Professional (ACSP), MacOS certificationsApple Certified Support Professional (ACSP), MacOS certifications
Work EnvironmentFocus on endpoint device management, troubleshooting, and deploymentManage overall Mac systems, network integration, and infrastructure
Employer & Industry UsageTech companies, education, enterprise ITIT departments, corporate environments, educational institutions
Common Search/ComparisonYesYes

The Mac Endpoint Engineer primarily handles managing, troubleshooting, and deploying Mac devices at the endpoint level, focusing on device-specific issues. In contrast, the Mac Systems Administrator oversees broader Mac system management, including network integration and infrastructure. Both roles require similar certifications and are common in tech and enterprise environments, but their scope differs in focus and responsibilities.

What are popular job titles related to Mac Endpoint Engineer jobs in California?

For Mac Endpoint Engineer jobs in California, the most frequently searched job titles are:

What job categories do people searching Mac Endpoint Engineer jobs in California look for?

The top searched job categories for Mac Endpoint Engineer jobs in California are:

What cities in California are hiring for Mac Endpoint Engineer jobs?

Cities in California with the most Mac Endpoint Engineer job openings:

Mac Endpoint Engineer jobs near you
Infographic showing various Mac Endpoint Engineer job openings in California as of August 2026, with employment types broken down into 88% Full Time, 5% Part Time, 2% Temporary, and 5% Contract. Highlights an 86% Physical, 5% Hybrid, and 9% Remote job distribution.

Endpoint Engineer, IT

Thinking Machines Lab

San Francisco, CA • On-site

Full-time

Medical, Dental, Vision, PTO

Re-posted 14 days ago

Job description

About Thinking Machines
The mission of Thinking Machines is to build AI that extends human will and judgment. We are training frontier models with Inkling, developing Tinker to let people make models their own, and crafting interfaces that broaden human-AI communication. We believe the future worth building is human, and we're hiring people who want to build it.
About the Team
The IT team builds secure infrastructure and efficient processes that enable our employees to move quickly. We operate an all-Mac environment and manage our endpoint fleet as a distributed platform, applying production-engineering practices to device management and security.
Our endpoint configurations, security policies, scripts, and software deployments are increasingly managed through version-controlled workflows with testing, review, staged rollouts, and rollback capabilities. This role will work closely with IT, Security, Identity, and Infrastructure to deliver a secure and reliable employee computing experience.
What You'll Do
  • Endpoint Configuration as Code: Author, review, test, and progressively deploy macOS configuration profiles, security policies, queries, and remediation scripts. Build code review, staging, canary, validation, and rollback processes into endpoint changes.
  • MDM Platform Engineering: Operate our MDM platform as a production service, including configuration as code, observability, upgrades, reliability, incident response, and integrations with other IT and Security systems.
  • MDM Migration: Lead the evaluation, design, testing, and execution of our planned migration from Iru to Fleet. Establish functional requirements, identify configuration and security-control gaps, develop a phased migration plan, and move the fleet with minimal disruption to employees.
  • Santa and Rudolph: Own the architecture and operation of Santa and its Rudolph synchronization service. Manage binary-authorization policies, rule distribution, application approvals, telemetry, observability, infrastructure, and incident response.
  • Zero Trust and Device Trust: Partner closely with Security and Identity to make device trust a core component of our Zero Trust architecture. Integrate endpoint posture signals into authentication, authorization, and conditional-access decisions.
  • Continuous Posture Evaluation: Build systems that continuously evaluate device health and security posture, including MDM enrollment, OS version, patch status, disk encryption, endpoint protection, security-control status, and configuration compliance. Automatically identify and remediate drift or restrict access when a device no longer meets requirements.
  • Patch Management: Build and maintain automated macOS patching workflows that support rapid enforcement timelines while providing a thoughtful employee experience.
  • Zero-Touch Provisioning: Design and improve Apple Business Manager and Automated Device Enrollment workflows that turn a new Mac into a secure, fully configured, and productive machine with minimal manual intervention.
  • Software Distribution: Own application packaging, deployment, updating, and removal across the Mac fleet.
  • Fleet Telemetry and Compliance: Query live device state at scale and turn endpoint telemetry into actionable policies, dashboards, compliance reporting, and early warnings for configuration drift.
  • Automation: Build tools and AI-assisted workflows that reduce repetitive operational work and make endpoint management more reliable and scalable.
  • Endpoint Security: Partner with Security on macOS hardening, binary authorization, vulnerability management, compliance controls, detection and response, and device-based access policies.
  • Advanced Troubleshooting: Serve as the escalation point for complex macOS and endpoint-platform issues that cannot be resolved through standard IT support processes.
  • Technical Leadership: Help define the endpoint roadmap, evaluate technologies, make architecture decisions, and lead complex initiatives from conception through production.
Basic Qualifications
  • 8+ years of experience building and operating secure IT or endpoint systems in complex environments.
  • Experience managing a large fleet of macOS devices through a modern MDM platform.
  • Experience managing endpoint configuration through scripted deployments, Git-based workflows, or a full GitOps model.
  • Deep knowledge of macOS internals, enterprise deployment, security controls, and troubleshooting.
  • Experience designing and operating zero-touch Mac provisioning, patching, and software-distribution workflows.
  • Experience using device health and security signals to evaluate endpoint compliance.
  • Experience successfully delivering complex technical projects from conception through production.
  • Strong ability to solve ambiguous problems involving multiple teams and stakeholders.
  • Ability to communicate technical concepts clearly to technical and nontechnical audiences.
  • A product-engineering mindset toward IT systems, including testing, observability, reliability, and controlled change management.
  • A consistent practice of creating clear technical documentation, architecture diagrams, runbooks, and operational procedures.
  • Ability to work from either our New York or San Francisco office.
Preferred Qualifications
  • Fleet: Experience deploying, operating, or contributing to Fleet, including its MDM, osquery, GitOps, software-management, and vulnerability-management capabilities.
  • MDM Migration: Experience leading a production MDM migration, particularly in an environment using Apple Business Manager and Automated Device Enrollment.
  • Iru: Experience managing macOS devices with Iru, formerly Kandji.
  • Santa and Rudolph: Experience operating Santa at scale, including rule management, binary authorization, event telemetry, and a Rudolph synchronization service.
  • Zero Trust: Experience designing device-trust and continuous-posture-evaluation systems that integrate with identity providers, conditional access, or other Zero Trust controls.
  • MDM as a Service: Experience operating an MDM or device-management platform as a production service rather than only administering a SaaS console.
  • Progressive Delivery: Experience building automated endpoint rollout systems with staging, canary groups, rollback capabilities, and promotion decisions based on telemetry.
  • Open-Source Tooling: Experience deploying, operating, or contributing to open-source macOS endpoint-management or security tools.
  • Infrastructure as Code: Experience managing endpoint or cloud infrastructure through Terraform or another infrastructure-as-code framework.
  • Cloud Infrastructure: Experience operating AWS services such as Lambda, API Gateway, DynamoDB, containers, managed databases, and monitoring systems.
  • Endpoint Development: Proficiency in Swift or Go for building macOS endpoint tools, agents, or supporting services.
  • AI-Assisted Operations: Experience using LLMs to automate operational work or a strong interest in applying them to endpoint engineering.
Technical Skills
  • Python and shell scripting.
  • macOS internals, including launchd, configuration profiles, Transparency, Consent, and Control (TCC), system extensions, Endpoint Security, FileVault, Secure Token, and bootstrap tokens.
  • Apple Business Manager, Automated Device Enrollment, and Apple's MDM and Declarative Device Management frameworks.
  • Modern Apple MDM platforms, particularly Iru, Fleet, Jamf, or equivalent.
  • Santa binary authorization and Rudolph synchronization infrastructure.
  • Fleet-scale querying and osquery.
  • Git, pull-request workflows, GitOps, and CI/CD for endpoint configuration.
  • Terraform and infrastructure as code.
  • Public-cloud fundamentals, including serverless infrastructure, containers, managed databases, and monitoring.
  • Device lifecycle automation, including zero-touch enrollment, patching, software distribution, and secure deprovisioning.
  • Endpoint security, Zero Trust, device trust, continuous posture evaluation, compliance, and automated remediation.
Logistics
  • Location: This role is based in San Francisco, California or New York, New York.
  • Compensation: Depending on background, skills and experience, the expected annual salary range for this position is $180,000 - $360,000.
  • Visa sponsorship: We sponsor visas. While we can't guarantee success for every candidate or role, if you're the right fit, we're committed to working through the visa process together.
  • Benefits: Thinking Machines offers generous health, dental, and vision benefits, unlimited PTO, paid parental leave, and relocation support as needed.
  • As set forth in Thinking Machines' Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Apply