Who We AreAtlan is building the missing context layer for data and AI, helping enterprises close the AI value chasm and finally move AI pilots into production. Today, 95% of AI pilots fail because AI systems don’t understand the context behind data: what it means, how it’s governed, and how it should be used.Atlan unifies this context by connecting to every part of the data and AI stack, enabling teams to build, collaborate on, and activate shared context across data, business, and AI workflows, including for AI agents.Trusted by global enterprises like Mastercard, Workday, General Motors, Unilever, Ralph Lauren, FOX, Nasdaq, and Medtronic, we’re backed by world-class investors including GIC, Insight Partners, Meritech, Peak XV, and Salesforce VenturesAbout The RoleWe’re hiring a Senior Systems Engineer to be a cornerstone of our Endpoint Engineering function. This role will own and mature our endpoint management strategy across macOS (Jamf Pro) and Windows (Intune), drive endpoint security and compliance, and contribute as a generalist across cloud infrastructure and network security. They will also help build automated, self-service IT experiences and lay the groundwork for a Zero Trust endpoint architecture.What You’ll Do? 🤔Endpoint Management (Jamf & Intune):Own the end-to-end Jamf Pro environment—enrollment workflows, configuration profiles, patch management, App Catalog, Self Service, and macOS compliance baselines.Manage and mature Microsoft Intune for the Windows fleet: device enrollment, compliance policies, application deployment, and conditional access integration.Design and enforce endpoint compliance frameworks (CIS benchmarks, encryption, OS patching) across macOS and Windows.Lead the evaluation and implementation of Endpoint Detection & Response (EDR) solutions, ensuring seamless integration with MDM.Build automated onboarding and offboarding workflows for endpoints, integrating with Okta and employee lifecycle tooling.Endpoint & Network Security:Drive endpoint security posture: disk encryption enforcement, firewall policies, secure boot configurations, and application allowlisting/blocklisting.Contribute to Zero Trust network architecture: VPN management and migration strategy, DNS security (DNS filtering, DoH/DoT), and secure remote access.Hands-on experience with Network Security tools like Palo Alto Prisma, Twingate, Cloudflare, etc.Collaborate with SRE/Infrastructure teams on network segmentation, firewall rules, and security monitoring.Cloud Infrastructure & Access Governance:Assist in cloud infrastructure operations across AWS/GCP, including IAM policy reviews, SSO integrations, and access governance.Support the design and implementation of Zero Trust access controls for production and customer cloud environments.Partner with IT and security to ensure MDM-to-IdP integration is robust, enabling device trust as a factor in conditional access policies.Automation & Self-Service IT:Automate repetitive IT workflows using scripting (Bash, Python, PowerShell) and low-code/no-code platforms.Build dashboards and reporting for endpoint health, compliance posture, and SLA metrics.Strategic & Cross-Functional Leadership:Serve as the Subject Matter Expert for endpoint engineering within the IT/Systems Engineering function.Build scalable endpoint architecture aligned with the company’s growth trajectory toward 800–1,000 employees.Document standards, architectures, runbooks, and processes for internal enablement.Mentor junior team members as the Systems Engineering function expands.What makes you a great match for us? 😍4+ years in IT Systems/Endpoint Engineering with experience across endpoint management, security, cloud infrastructure, and networking.Deep, hands-on expertise with Jamf Pro (configuration profiles, Smart Groups, patch management, Self Service, PreStage Enrollment). Jamf certification is a strong plus.Solid experience with Microsoft Intune—device enrollment, compliance policies, conditional access, and application deployment.Strong understanding of macOS internals, the Apple MDM framework, and Windows endpoint management.Conceptual and practical understanding of Zero Trust, endpoint compliance frameworks, and CIS benchmarks.Working knowledge of cloud platforms (AWS or GCP): IAM, networking, security groups, and access governance.Hands-on experience with network security fundamentals: VPN (WireGuard, IPSec, or ZTNA solutions), DNS security, and firewall management.Strong scripting skills in at least two of: Bash, Python, PowerShell, or Swift/AppleScript.Experience integrating MDM with Identity Providers (Okta, Azure AD/Entra ID) for device trust and conditional access.Exposure to EDR platforms (CrowdStrike, SentinelOne, Microsoft Defender for Endpoint) is a strong plus.Strong project leadership: runbooks, testing/rollback plans, stakeholder comms, phased rollouts.Security-first mindset with excellent documentation and cross-functional collaboration skills.Why Atlan?Joining Atlan means being part of a global movement to help data teams do their life’s best work. Here’s what you can expect:Competitive Compensation: We benchmark at the top of the market and keep compensation simple: strong base salary, performance‑based variable pay, and impact‑driven equity, so your total rewards grow in step with the value you create over time.Health & Wellness: From Day‑1 health, dental, vision, and mental health to pet‑care perks and flexible health stipends, we design benefits offerings that lead in each country we're in.Flexible Time Off & Leave Policies: We trust you to own your energy: flexible time off and modern leave so you can unplug properly, support yourself and your loved ones, and come back ready to drive an impact.Accelerated Growth & Learning: Develop at an uncommon velocity through cutting-edge tech, complex implementations, and an experienced team that values mastery.AI Native Culture: Atlan is where AI-native builders come to build the systems the future of work will run on. AI isn’t an add-on, it’s woven into how we build, think, and work every day, empowering every Atlanian to move faster and create a bigger impact.Global, Remote-First, High-Trust: Work from anywhere with a diverse team across 15+ countries, in a trust-first, async environment that gives you true flexibility and ownership over how you work.Equal Opportunity EmployerAtlan is committed to building an inclusive, diverse, and authentic workplace. We do not discriminate based on race, color, religion, national origin, age, disability, sex, gender identity or expression, sexual orientation, marital status, military or veteran status, or any other legally protected characteristic.