Senior Endpoint Engineer
Job Description
Wave is looking for a Senior Endpoint Engineer who’s excited about consolidating and updating legacy systems with an eye for automation. You’ll be responsible for the MDM platforms, endpoint policies, device deployment pipelines, and fleet tooling that underpin how every employee at Wave interacts with their device. This role blends architectural ownership with hands-on execution, requiring you to deliver scalable, resilient, and compliant endpoint solutions in a fast growth environment.
Salary: $96,500 – $133,100 USD
Key Responsibilities
- Own and operate Wave’s MDM platforms across ChromeOS (GWS Admin Console), macOS (Jamf), Android, (and Linux environments): configuration, policy design, maintenance, and roadmap.
- Design and enforce endpoint security policies in collaboration with Information Security, including EDR integration (CrowdStrike Falcon), compliance baselines, and patch management.
- Build and maintain automated deployment pipelines for OS updates, software distribution, and configuration changes: minimizing manual intervention and maximizing consistency.
- Define and manage the device lifecycle: provisioning standards, imaging, refresh cycles, decommission processes, and fleet reporting.
- Establish cross-platform compatibility standards and tooling for a heterogeneous fleet (macOS, Linux, Android, with awareness of ChromeOS and Windows edge cases).
- Build the tooling and runbooks that Local IT teams use to execute provisioning and onboarding on the ground. You set the standard, they execute it.
- Own fleet observability: dashboards, compliance reporting, patch currency metrics, and audit-ready documentation.
- Evaluate and own vendor relationships for endpoint tooling, including MDM, patch management, and related platforms.
- Mentor junior profiles working in endpoint and device management.
Key Requirements
- BA in Computer Science, Economics, Data Analytics, or equivalent experience in the required field.
- 5+ years in endpoint engineering or systems engineering with hands-on ownership of multi-platform fleets at scale.
- Windows/Intune experience is not required, but can be considered applicable if enough strength in our existing device fleet is demonstrated.
- Strong understanding of endpoint security principles: EDR integration, compliance baselines (CIS, SOC2), certificate management, and disk encryption enforcement.
- Familiarity with identity and access tooling as it touches endpoints: SSO, certificate-based auth, conditional access policies (Okta or equivalent).
- Scripting and automation capability sufficient to build reliable deployment pipelines and reduce manual operational work.
- Fleet reporting and observability, meaning you can tell leadership the compliance posture of the fleet at any time.
