Crusoe
Senior Endpoint Security Engineer
San Francisco, CA - US · Senior
Sponsorship not specified$170k-$205kDetected 12 days ago
PythonBashPowerShelliOSAndroidLinuxCybersecuritySIEMMicrosoft DefenderDetection EngineeringComplianceVPNProblem Solving
About the role
- Crusoe is seeking a Security Engineer to join the Security Engineering team as the primary driver for implementing security defaults and endpoint visibility.
- You will be responsible for security architecture, endpoint visibility, and maintaining our security posture across a rapidly growing global fleet of macOS, Windows, iOS, and Android devices.
- This role is onsite in San Francisco, CA, Sunnyvale, CA or Denver CO.
Responsibilities
- maintain configuration profiles, compliance policies, app deployment packages, and OS update enforcement across all platforms.
- Build and maintain automated enrollment workflows including Apple Business Manager (ABM) and Windows Autopilot for zero-touch provisioning at scale.
- Own a structured patch management program with clear SLAs for OS and application updates across all device platforms.
- Partner with Security on device trust policies, Conditional Access enforcement, certificate-based authentication rollout (SCEP/PKCS), and network-level access control for certificate-based Wi-Fi and VPN authentication.
- Build and maintain scripts and automation in Bash, Python, or PowerShell to reduce manual IT workload; develop self-service tooling that puts routine fixes and software requests directly in employees' hands.
- Own MDM runbooks, device policy documentation, and asset records; contribute to the standardization of enrollment workflows, naming conventions, and configuration baselines across all platforms.
- Serve as the MDM escalation point in the IT on-call rotation; partner with People Operations on seamless device provisioning and deprovisioning; mentor junior IT team members on endpoint management practices.
Requirements
- Demonstrated experience with OSQuery and CrowdStrike (XDR/EDR) for endpoint visibility and threat detection.
- 3-6 years of experience with Jamf/Kandji and Microsoft Intune (Autopilot, Compliance Policies, App Protection).
- Proficiency in Bash, Python, or PowerShell for device policy automation, packaging, and remediation.
- Experience with Jamf Protect, Microsoft Defender for Endpoint, or equivalent EDR tooling.
- Familiarity with Linux endpoint management via Fleet, Puppet, or similar.
- Experience at a high-growth technology company through a period of rapid headcount scaling.
- Foundational Security Experience: Demonstrated experience with OSQuery and CrowdStrike (XDR/EDR) for endpoint visibility and threat detection.
- MDM/Endpoint Management: 3-6 years of experience with Jamf/Kandji and Microsoft Intune (Autopilot, Compliance Policies, App Protection).
- Scripting & Automation: Proficiency in Bash, Python, or PowerShell for device policy automation, packaging, and remediation.
- Infrastructure Knowledge: Strong understanding of certificate infrastructure (SCEP, PKCS) and experience with Absolute for Windows persistence.
Skills
- Crusoe is on a mission to accelerate the abundance of energy and intelligence.
- The demand for AI compute is boundless, and power is a bottleneck.
Compensation
- Compensation will be paid in the range of up to $170,000 - $205,000 + Bonus.
- Compensation to be determined by the applicants knowledge, education, and abilities, as well as internal equity and alignment with market data.
Benefits
- Competitive compensation and equity packages
- Restricted Stock Units
- Paid time off, paid holidays & leave of absence programs
- Comprehensive health, dental & vision insurance
- Employer contributions to HSA account
- Paid parental leave
- Paid life insurance, short-term and long-term disability
- Professional development & tuition reimbursement
- Mental health & wellness support
- Commuter benefits (parking & transit)
- Cell phone stipend
- 401(k) Retirement plan with company match up to 4% of salary
Equal opportunity
- Crusoe is an Equal Opportunity Employer.
Visa & Work Authorization
- Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran st
This listing is sourced directly from Crusoe's careers page and normalized into a canonical job model.