Senior Endpoint Engineer Jobs in California (NOW HIRING)

Role Overview
Velaura AI is seeking an experienced Senior Systems Administrator / IT Engineer to help administer, secure, and continuously improve our enterprise infrastructure while also providing Tier 2/3 desktop engineering support for our end-user computing environment.
This is a hands-on infrastructure engineering role with primary responsibility for enterprise systems administration, Linux servers, virtualization, cloud infrastructure, networking, identity management, enterprise storage, backup, endpoint management, automation, and cybersecurity. Desktop engineering and advanced end-user support are important secondary responsibilities, and successful candidates must have strong experience in both areas.
This role will work closely with the existing Systems Administrator and other members of the IT organization to support, maintain, and continuously improve Velaura's enterprise infrastructure. As a senior member of the team, this individual will share responsibility for the design, implementation, security, reliability, and evolution of the company's IT environment while helping establish operational best practices and scalable processes as the organization grows.
The ideal candidate enjoys working across the full technology stack-from servers, cloud platforms, storage, and networking to endpoint engineering and cybersecurity-and thrives in a fast-paced startup environment where ownership, collaboration, sound judgment, and continuous improvement are highly valued.
Responsibilities

• Design, administer, maintain, and continuously improve enterprise infrastructure supporting engineering and business operations.
• Administer and maintain Linux servers, including RHEL and Ubuntu, with responsibility for installation, configuration, patching, monitoring, troubleshooting, performance tuning, and lifecycle management.
• Manage VMware vCenter, Proxmox, AWS, and Google Cloud Platform infrastructure, including compute, storage, networking, virtualization, access controls, availability, and capacity planning.
• Administer Google Workspace, Microsoft 365, identity management, Single Sign-On (SSO), and Multi-Factor Authentication (MFA) using Duo Security or comparable platforms.
• Administer Cisco Meraki wireless infrastructure, VPN services, DNS, DHCP, PAN firewalls, network segmentation, SSL/TLS certificates, and enterprise networking services.
• Support NetApp enterprise storage, Rubrik backup infrastructure, disaster recovery, data protection, and business continuity operations.
• Develop and maintain Bash and Python automation scripts to improve operational efficiency and reduce repetitive administrative tasks.
• Monitor infrastructure performance, availability, capacity, reliability, and security across on-premises and cloud environments.
• Participate in infrastructure upgrades, technology evaluations, cloud initiatives, and system implementations.
• Create and maintain architecture diagrams, configuration standards, operating procedures, inventories, and technical documentation.
• Collaborate with Engineering, Security, and Operations teams to ensure infrastructure meets business, performance, availability, and security requirements.
• Implement and maintain secure configurations across Linux, Windows, macOS, cloud, networking, identity, storage, and endpoint platforms.
• Administer and monitor Endpoint Detection and Response (EDR) platforms such as SentinelOne or comparable enterprise security solutions.
• Perform vulnerability remediation, operating system hardening, patch management, endpoint compliance, and security configuration reviews.
• Enforce least-privilege access, secure account provisioning, privileged access controls, Multi-Factor Authentication, and identity lifecycle management.
• Investigate security alerts, phishing incidents, endpoint threats, suspicious activity, and potential security compromises.
• Assist with incident response activities, including triage, containment, remediation, recovery, documentation, and post-incident analysis.
• Support email security, VPN security, wireless security, cloud security, endpoint protection, certificate management, and secure remote access initiatives.
• Assist with security audits, evidence collection, policy development, and compliance initiatives supporting SOC 2, ISO 27001, CIS Controls, NIST Cybersecurity Framework, and similar standards.
• Participate in backup validation, disaster recovery testing, business continuity planning, and security preparedness activities.
• Recommend and implement improvements that strengthen security through automation, monitoring, standardization, and operational best practices.
• Provide Tier 2/3 technical support for Windows and macOS endpoints, including Apple and Dell systems.
• Manage employee onboarding and offboarding, device provisioning, imaging, software deployment, hardware lifecycle management, and endpoint configuration.
• Administer Iru MDM or comparable endpoint management platforms for macOS and Windows devices.
• Configure and support endpoint encryption, security controls, operating system updates, software deployment, and compliance requirements.
• Troubleshoot operating systems, applications, networking, VPN, conferencing platforms, printers, peripherals, authentication, and hardware issues.
• Develop and maintain desktop deployment standards, support procedures, knowledge base articles, and user documentation.

Deliver responsive, professional, and customer-focused IT support while balancing infrastructure priorities.
Required Qualifications

• Minimum 10 years of progressively responsible experience in Systems Administration, Infrastructure Engineering, or Enterprise IT, including significant hands-on desktop engineering and Tier 2/3 end-user support.
• Proven experience designing, deploying, administering, securing, and supporting enterprise infrastructure.
• Strong hands-on experience administering Linux (RHEL and Ubuntu), Windows, and macOS operating systems.
• Experience administering: Google Workspace; AWS and/or Google Cloud Platform; VMware vCenter, Proxmox, or similar virtualization platforms; Cisco Meraki or comparable enterprise networking solutions; Iru, Kandji, Jamf, Microsoft Intune, or similar endpoint management platforms; Duo Security or comparable SSO and MFA platforms
• Strong understanding of TCP/IP networking, DNS, DHCP, VPNs, VLANs, Wi-Fi, routing, firewalls, SSL/TLS certificates, and secure remote access.
• Experience supporting enterprise storage, backup, disaster recovery, and business continuity technologies.
• Experience administering endpoint security, EDR, patch management, operating system hardening, vulnerability remediation, encryption, and endpoint compliance.
• Working knowledge of Bash and Python scripting for systems administration and automation.
• Strong understanding of cybersecurity principles, including: Zero Trust, Least Privilege, Defense in Depth, Identity and Access Management, Secure Configuration Management, Vulnerability Management, Incident Response, Data Protection
• Strong troubleshooting, analytical, and problem-solving skills across infrastructure, cloud, networking, storage, desktop, identity, and security environments.
• Excellent written and verbal communication skills, with the ability to create clear technical documentation and effectively communicate with both technical and non-technical users.
• Ability to independently prioritize work, manage multiple projects, collaborate effectively with teammates, and operate successfully in a fast-paced startup environment.
• Demonstrated commitment to delivering reliable infrastructure and outstanding end-user support.

Preferred Qualifications

• Experience administering NetApp storage systems and Rubrik backup platforms.
• Experience with SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, or similar enterprise security technologies.
• Experience managing Google Workspace security, email security, phishing investigations, and secure collaboration technologies.
• Microsoft 365
• Familiarity with Infrastructure-as-Code and configuration management tools such as Terraform, Ansible, or similar technologies.
• Experience with SIEM platforms, centralized logging, vulnerability scanners, security monitoring, or security operations workflows.
• Knowledge of SOC 2, ISO 27001, CIS Controls, NIST Cybersecurity Framework, or similar security and compliance standards.
• Experience managing FileVault, BitLocker, certificate services, privileged access management, endpoint compliance, and device encryption.
• Experience with monitoring, alerting, capacity planning, and infrastructure performance management.
• Previous experience in a startup, semiconductor, AI, cloud infrastructure, or other high-growth technology environment.
• Professional certifications such as RHCSA/RHCE, AWS Certified Solutions Architect, Google Cloud Professional, Microsoft, Cisco, Security+, CISSP, or equivalent certifications are desirable.

$145,000 - $200,000 a year
Compensation & Benefits
At Velaura, we believe exceptional talent deserves exceptional rewards. Compensation for this role includes a competitive base salary, performance-based incentives, and equity participation, allowing team members to share in the company's long-term success.
Your base pay will depend on your skills, qualifications, experience, and location.
In addition to compensation, Velaura offers a comprehensive benefits package that may include medical, dental, and vision coverage; paid time off; flexible work arrangements; professional development opportunities; and other benefits designed to support the well-being and growth of our team.
Velaura is committed to pay equity and transparency and regularly benchmarks compensation to ensure we remain competitive in the market.
Why Velaura?
Velaura is building next-generation compute technology for cloud, edge, and Physical AI. Our solutions will enable robots, autonomous systems, drones, and other intelligent machines to operate efficiently in the physical world.
This is an opportunity to help build foundational technology at a time when the industry is undergoing fundamental change. You will work alongside experienced leaders, architects, engineers, and operators who have delivered industry-defining products across mobile, cloud, semiconductor, and AI platforms. If you enjoy solving difficult problems, working across disciplines, and helping shape the future of Physical AI, we would love to hear from you.
Equal Employment Opportunity and Accommodations
Velaura is an Equal Opportunity Employer that is committed to inclusion and diversity. Qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, disability or protected veteran status. We also take affirmative action to offer employment
opportunities to minorities, women, individuals with disabilities, and protected veterans.
Velaura is committed to working with qualified individuals with physical or mental disabilities. Applicants who would like to contact us regarding the accessibility of our website or who need special assistance or a reasonable accommodation for any part of the application or hiring process may contact us at: [email protected]. This contact
information is for accommodation requests only. Evaluation of requests for reasonable accommodation will be determined on a case-by-case basis.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.