IT Systems Engineer (Endpoint)

About the role

SpaceX is seeking an experienced IT Systems Engineer to join the Endpoint team. This multi-disciplinary role is responsible for designing, implementing, and operating modern endpoint management infrastructure with deep expertise in Jamf, Fleet, Intune, and Entra Conditional Access, while providing strong cross-platform support across Apple macOS, iOS, and Windows 11 / Windows Server environments. The position requires building secure, compliant, and highly automated solutions at scale in a fast-paced environment supporting mission-critical systems.

Responsibilities

• Architect, implement, and manage Jamf, Fleet, Microsoft Intune, and Entra Conditional Access policies to enforce zero-trust principles and device compliance across the fleet
• Design, deploy, and maintain endpoint configurations, compliance policies, application deployments, and security baselines for Windows 11, Windows Server, macOS, and iOS devices
• Develop and maintain advanced automation using PowerShell, Bash, and AppleScript to handle provisioning, configuration management, patching, remediation, and reporting at enterprise scale
• Integrate telemetry from Intune, Jamf, and other endpoint platforms with Splunk to deliver real-time monitoring, alerting, compliance dashboards, and support for security investigations
• Implement, audit, and maintain endpoint controls aligned with CIS benchmarks while ensuring strict adherence to ITAR and EAR regulatory requirements for devices, configurations, and data handling
• Evaluate, pilot, and operationalize AI-powered workflows and tools (including LLM-assisted scripting, intelligent policy analysis, and automated remediation) to increase efficiency and reduce risk
• Collaborate closely with Security, Compliance, Infrastructure, and business stakeholders to define endpoint standards, drive configuration and patch compliance across endpoint platforms, and support audits involving endpoint platforms and systems
• Create and maintain high-quality documentation, runbooks, and knowledge articles; provide training and tier-3 escalation support to IT and support teams
• Lead or significantly contribute to major endpoint projects such as OS migrations, Entra Conditional Access expansions, new platform integrations, and automation platform improvements
• Continuously improve the team’s automation, monitoring, compliance posture, and operational resilience through scripting, policy refinement, and process optimization

Requirements

• Bachelor's Degree in Computer Science, Information Technology, or related technical discipline and 5+ years of hands-on experience designing, implementing, and managing Jamf, Fleet, Intune, and Entra Conditional Access in large enterprise environments; OR 7+ years of hands-on experience in lieu of a degree
• Experience with Apple macOS and iOS enterprise management as well as Windows 11 and Windows Server operating systems
• Experience implementing security controls and compliance frameworks in regulated environments
• Able and willing to participate in after-hours or weekend support when necessary to resolve unplanned outages or perform maintenance during planned downtime windows
• Must be comfortable working with mission-critical and sensitive systems in a highly regulated environment
• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C.1157, or (iv) Asylee under 8 U.S.C.1158, or be eligible to obtain the required authorizations from the U.S. Department of State

Preferred Skills and Experience

• Hands-on experience integrating endpoint platforms with Splunk for SIEM, compliance reporting, and operational visibility
• Direct experience implementing CIS benchmarks and operating in ITAR/EAR-controlled environments
• Familiarity with AI workflows and tools, such as using large language models for script development, policy generation, log analysis, or operational automation
• Significant experience developing and maintaining production-grade scripts in PowerShell, Bash, and AppleScript
• Proficiency with Microsoft Graph API, advanced PowerShell module development, modern automation/CI-CD practices, GitOps, DevOps tooling, and Infrastructure as Code (IaC)
• Relevant Microsoft and Apple certifications (e.g., MS-102 Endpoint Administrator, AZ-900 Microsoft Azure Fundamentals, Jamf-200/300, or security/compliance credentials)
• Experience leading cross-functional endpoint projects and mentoring or training other IT team members
• Excellent written and verbal communication skills, with the ability to explain complex technical topics to technical and non-technical audiences

Pay

Pay Range: $135,000.00 - $170,000.00. Your actual level and base salary will be determined on a case-by-case basis and may vary based on job-related knowledge and skills, education, and experience.

Benefits

• Comprehensive medical, vision, and dental coverage
• Access to a 401(k) retirement plan
• Short and long-term disability insurance
• Life insurance
• Paid parental leave
• Various discounts and perks
• Employee Stock Purchase Plan with stock discount
• Long-term incentives in the form of company stock or long-term cash awards
• Potential discretionary bonuses
• 3 weeks of paid vacation and 10 or more paid holidays per year
• Paid sick leave pursuant to Company policy