Endpoint Security Engineer

About the Company

Crusoe is on a mission to accelerate the abundance of energy and intelligence. As the only vertically integrated AI infrastructure company built from the ground up, we own and operate each layer of the stack to power the world's most ambitious AI workloads.

Responsibilities

• Administer and improve Jamf and Microsoft Intune environments across macOS, Windows, iOS, and Android
• Build automated enrollment workflows including Apple Business Manager and Windows Autopilot
• Own a structured patch management program for OS and application updates
• Define and enforce device compliance baselines aligned with CIS Benchmarks and SOC 2
• Partner with Security on device trust policies, Conditional Access, and certificate-based authentication
• Build automation scripts in Bash, Python, or PowerShell to reduce manual workload
• Maintain MDM runbooks, device policy documentation, and asset records
• Serve as the MDM escalation point in the IT on-call rotation

Requirements

• 3–6 years of experience with Jamf/Kandji and Microsoft Intune
• Demonstrated experience with OSQuery and CrowdStrike (XDR/EDR)
• Deep understanding of Okta (Device Trust/FastPass) and Entra ID (Conditional Access)
• Proficiency in Bash, Python, or PowerShell for automation
• Strong understanding of certificate infrastructure (SCEP, PKCS)
• Bachelor’s degree in IT, Computer Science, or equivalent practical experience

Preferred Qualifications

• Jamf Pro administration experience (Smart Groups, Jamf Connect)
• Experience with Jamf Protect or Microsoft Defender for Endpoint
• Familiarity with Linux endpoint management via Fleet or Puppet
• Apple Certified Support Professional (ACSP) or equivalent MDM certification
• Exposure to SIEM tooling and endpoint log pipelines