IT Systems Engineer, Client Platform Engineer, macOS

The Endpoint team (Client Platform Engineering) treats Anthropic's device fleet as a platform we build and run. We run our own MDM as a production service and manage every piece of device configuration as code. Policies, configuration profiles, queries, remediation scripts, and software all ship through pull requests, CI, a staging environment, and a canary group before they reach the fleet. The fleet is mostly macOS, plus a small number of Linux machines and a growing mobile footprint.

Responsibilities

Own endpoint configuration as code: author, review, test, and progressively roll out MDM policies, configuration profiles, and remediation scripts across macOS and mobile, with canary stages and rollback built in; Operate the MDM platform itself as a production service, including infrastructure as code, observability, upgrades, and incident response; Build patch management automation with rapid enforcement timelines while maintaining good user experience; Design zero touch provisioning that turns a sealed box into a productive machine on day one; Support a small number of Linux machines alongside the Mac fleet; Turn fleet telemetry into policy, dashboards, and early drift warnings, and use Claude to automate manual ops work; Partner with Corporate Security on endpoint hardening, binary authorization, and compliance controls; Take shifts on the team's rotation for incoming requests and escalations, and serve as the deep escalation tier for endpoint issues IT Operations can't resolve

Requirements

Have 8+ years building secure IT systems in complex environments, including leading projects across multiple teams; Have managed endpoint fleets of thousands of macOS devices through a modern MDM; Treat endpoint configuration as code that is version controlled and peer reviewed, rather than clicking in consoles; Go deep on macOS internals such as launchd, configuration profiles, TCC, and system extensions; Write Python and shell scripts; Write design docs and runbooks so teammates can review and support what you build; Minimum education: Bachelor's degree or an equivalent combination of education, training, and/or experience; Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience; Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position

Nice to have

Have operated an MDM or device management platform as a service, not only consumed one as SaaS; Have worked with open source endpoint and device management tooling (Munki, osquery, AutoPkg); Have built automated, progressive rollout systems with promotion gated on telemetry; Have experience running infrastructure as code in a public cloud; Have working knowledge of Linux administration (packaging, systems, config management); Have used LLMs to automate ops work

Benefits

Competitive compensation and benefits; optional equity donation matching; generous vacation and parental leave; flexible working hours; office space to collaborate with colleagues