Endpoint Engineer – MacOS

Overview

HubSpot is looking for an experienced engineer with endpoint provisioning and security automation experience to help us re-imagine and implement mission-critical asset management systems and processes that will power us through our next 5-10X growth in scale. This role sits in our Business Technology team, which comprises both technical IT experts and systems engineers as well as roles focused on improving end-user experience and productivity.

HubSpot has more than 7,000 employees across 13 offices. In the two years since the Endpoint team was created, we have been able to solve a lot of the “quick win” problems. The challenges we’re focused on now are complex and either don’t have obvious solutions, or we’ve decided the conventional wisdom isn’t good enough for our employees.

We’re looking for someone who is excited about scaling and automation and has the vision and knowledge to implement the best solutions for HubSpot, our employees, and our customers.

In this role, you’ll get to:

• Maintain our current JAMF Pro management platform infrastructure, as well as architect improvements based on HubSpot’s growth and security requirements.
• Partner with Corporate Security to maintain our endpoint security baseline, add additional automation to our patching schedules and ensure quick response to critical vulnerabilities.
• Act as macOS and Jamf Pro subject matter expert and, as a final escalation, field questions from technical support teams.
• Engineer and implement upgrades and improvements to endpoint provisioning workflows.
• Oversee a fast and frictionless setup process for new laptops
• Design a laptop refresh/swap process that employees can perform remotely on their own
• Help design, select and build out software solutions that will power HubSpot’s internal growth
• Be a technical decision maker among a group of cross-functional peers and collaborators.
• Work with IT leaders and executives regularly.
• Balance your creativity with your passion for delivering tangible value.
• Make our employees more productive by creating employee-first technology experiences.
• Grow and nourish a function from early days through a phase of expansion.

We are looking for someone who has:

• JAMF Certified Administrator or Expert certification
• Experience with JAMF Connect
• 3 years of experience supporting MacOS user environments
• Deep knowledge of system extensions, PPPC, configuration profiles, security context, login / boot process, file system, permissions, SIP etc.
• Experience with the analysis, development, and deployment of process and desktop automation across complex IT enterprise environments.
• General knowledge of Azure Active Directory or On-Premises Active Directory
• Experience with administering and deploying on MacOS, Linux, and Windows systems
• High level of proficiency in Bash, Python, Shell, and/or Powershell
• Experience with asset management platforms

Even better if you have:

• Apple Certified System Administrator
• Security endpoint and patch management experience leveraging technologies such as Crowdstrike, Netskope, Thycotic, etc.
• AWS/GCP Experience