Legora

Legora

Endpoint Engineer

New York City

Sponsorship not specifiedDetected 9 hours ago
PythonSwiftGitTerraformLLMsIncident ResponseDNSVPNCollaboration

> stay_score

odds of building a lasting career here

25Risky
Cap-exempt (no lottery)0
Sponsors this role35
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70

Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.

Lottery odds assume a STEM candidate.

Personalize to your clock →

> community_outcomes

No reports yet — be the first to help the next applicant.

About the role

  • The IT and AI Enablement function exists to make Legora itself run as well as the product we sell: secure, automated, and compounding over time.
  • We run an Apple-first fleet as a distributed platform: endpoint configuration, security policy, and software delivery move through version control with review, testing, staged rollout, and a way back.
  • You'll work across IT Systems, Workplace Technology, Information Security, and Engineering, and you'll set the endpoint roadmap.

Responsibilities

  • Manage endpoint configuration as code: author, review, test, and progressively deploy macOS profiles, declarations, security baselines, and remediation scripts, with staging, canary groups, telemetry-based promotion, and rollback built into every change.
  • Own the migration from legacy payloads to declarative management as Apple retires the MDM equivalents.
  • Own binary authorization: the policy model, rule distribution, application approvals, telemetry, and the synchronisation service behind it. Take a view on where macOS 27's native binary allow/deny fits against a dedicated binary-authorization stack.
  • Turn fleet telemetry into decisions: query device state at scale and drive it into dashboards, compliance reporting, and early warning on drift, feeding endpoint telemetry to Detection & Response for detection and incident work.
  • Build AI-assisted operations: put agents and LLMs on the repetitive operational work so reliability scales with the fleet. Anything manual twice a quarter gets automated.
  • Define the endpoint roadmap: evaluate technologies, make the architecture calls, and take on the macOS and endpoint-platform problems that standard support paths can't resolve.
  • We invest in our people with a comprehensive, thoughtfully designed
  • Family Support

Requirements

  • Fluent in declarative device management, not just profiles: you know where Apple has moved configuration to declarations and can plan a migration off the payloads being retired.
  • Clear with both audiences: you can take a technical stakeholder through the architecture and a non-technical colleague through what's changing on their laptop and why.

Nice to have

  • Fleet: deploying, operating, or contributing to Fleet, including its MDM, osquery, GitOps, software-management, and vulnerability-management capabilities.
  • Leading a production MDM migration, particularly with Apple Business Manager and Automated Device Enrollment in play.
  • Operating Santa at scale: rule management, binary authorization policy, event telemetry, and a Rudolph synchronisation service.
  • Managing macOS through Jamf or Kandji (now Iru), and Windows through Intune where the fleet calls for it.
  • Fleet-scale querying with osquery, and turning that data into compliance and drift reporting.
  • Declarative credentials: ACME, SCEP, and identity credentials declared once as reusable assets and referenced across network configurations, rather than embedded per profile.
  • Moving network, VPN/DNS, extensible SSO, content caching, and web content filtering onto declarative configurations.
  • Operating an MDM service against Apple's stricter TLS and App Transport Security requirements.

Compensation

  • Competitive package: Comprehensive salary, benefits, and tools for success.

Benefits

  • Multiple medical plan options through Aetna and Kaiser Permanente
  • HSA or Healthcare FSA (based on plan selection)
  • Dental plans via MetLife
  • Vision plans via Vision Care
  • Generous parental leave
  • Dependent Care FSA
  • Free One Medical membership for employees and dependents
  • Pre-tax commuter benefits
  • Life Insurance + STD/LTD
  • Robust voluntary benefits, including identity protection (via Aura), legal coverage via MetLife, pet savings programs, and more
  • Medical, Dental & Vision
  • Additional Perks

Company info

  • Legora is redefining how legal work gets done. Not built for lawyers, built with them. We work alongside the world's best legal teams, who expect excellence, precision, and speed, and we hold ourselves to the same bar.
  • Our AI-native workspace lets legal professionals move faster, think more clearly, and operate with sharper precision. By analysing thousands of documents in minutes and powering end-to-end workflows, we cut through complexity, teams can focus on what matters: judgment, strategy, and outcomes.
  • 1,000+ customers across 50+ countries trust us, including Cleary Gottlieb, Goodwin, Linklaters, White & Case, Dentons, and Barclays. We've scaled to $100M+ in ARR, with teams across Europe, North America and APAC, and continue to expand through acquisitions including Qura, Walter AI and Graceview.
  • We partner with world-class performers: including Aaron Judge and the New York Yankees, Ludvig Åberg (and his caddie), and campaigns featuring Jude Law.
  • Joining Legora means three things.
  • ownership over titles, outcomes over intentions.
  • We fight for excellence:
  • Legora is redefining how legal work gets done.
  • Not built for lawyers, built with them.
  • We work alongside the world's best legal teams, who expect excellence, precision, and speed, and we hold ourselves to the same bar.
  • Our AI-native workspace lets legal professionals move faster, think more clearly, and operate with sharper precision.
  • By analysing thousands of documents in minutes and powering end-to-end workflows, we cut through complexity, teams can focus on what matters: judgment, strategy, and outcomes.
  • 1,000+ customers across 50+ countries trust us, including Cleary Gottlieb, Goodwin, Linklaters, White & Case, Dentons, and Barclays.
  • We've scaled to $100M+ in ARR, with teams across Europe, North America and APAC, and continue to expand through acquisitions including Qura, Walter AI and Graceview.

Equal opportunity

  • Equal Opportunity Employer
  • equal opportunity employer and committed to creating an inclusive, high-performance culture where everyone can do their best work.
Apply directly at Legora →Create a free account for alerts like thisView Legora immigration profile

This listing is sourced directly from Legora's careers page and normalized into a canonical job model.