Senior Endpoint Engineer (JAMF 400 Certified)

Be the one building AI-powered experiences where they matter most. At Genesys, we help organizations create better customer experiences through AI-powered experience orchestration. Our platform connects people, systems, data and AI to help organizations deliver more personalized service, improve operational efficiency and build stronger customer relationships. Help build, support and operate technology used by more than 8,000 organizations in over 100 countries – moving AI from possibility to production in real-world enterprise environments every day. Senior Endpoint Engineer — JAMF Endpoint Management | IT End User Services ROLE OVERVIEW We are seeking a highly skilled Senior Endpoint & JAMF Engineer to join our global Endpoint Management / End User Services team. This role combines broad expertise in managing cross-platform endpoints (macOS, Windows, Ubuntu, iOS, Android) with deep specialization in JAMF and Apple macOS device management. You will design, deploy, and maintain enterprise-scale endpoint solutions, ensuring optimal performance, security, and user experience across 10,000+ devices worldwide. As a trusted subject matter expert, you will drive automation, AI-powered workflows, compliance, and integration initiatives, collaborating with Security, Identity, and Infrastructure teams to deliver secure, scalable, and user-centric endpoint environments at global scale. KEY RESPONSIBILITIES Endpoint Engineering & Management • Engineer, configure, and optimize endpoint environments across Windows, macOS, Ubuntu, iOS, and Android platforms. • Manage enterprise MDM platforms including JAMF Pro, Microsoft Intune, Autopilot, Entra ID, and Active Directory. • Lead endpoint patching strategies for OS and third-party applications, minimizing downtime while ensuring compliance. • Champion ITIL-aligned process improvement, embedding AI and agentic automation to drive continuous operational efficiency. • Serve as a subject matter expert during audits, incident response, and vulnerability remediation exercises. JAMF & Apple Ecosystem • Architect, deploy, and administer JAMF Pro across a complex enterprise environment of 3,000+ macOS endpoints. • Build automated workflows for device provisioning, application deployment, patch management, and compliance reporting. • Develop and maintain scripts in Bash, Python, AppleScript, and PowerShell to extend and automate JAMF functionality. • Manage JAMF configuration profiles, policies, smart groups, and operational dashboards. • Partner with Security to enforce FileVault encryption, CIS benchmark hardening, and Zero Trust policy controls. • Maintain Apple Business Manager (ABM/DEP), VPP licensing, APNs certificates, and MDM enrollment pipelines. AI, Agents & Endpoint Automation • Design and deploy AI-assisted endpoint automation pipelines to reduce manual operational overhead and accelerate response times. • Build and maintain autonomous agents (LangChain, AutoGen, or custom LLM integrations) to handle routine endpoint tasks including compliance checks, self-healing workflows, and incident triage. • Integrate LLM APIs into endpoint tooling for natural-language policy authoring, log analysis, and intelligent alert summarization. • Develop event-driven automation using JAMF Pro webhooks, Microsoft Power Automate, or custom Python/API pipelines to trigger remediation workflows without manual intervention. • Evaluate and adopt AIOps platforms to predict device health issues, proactively surface compliance drift, and optimize patch scheduling. • Define an AI automation roadmap for endpoint operations, establishing governance, testing, and rollback standards for agentic workflows. • Continuously assess emerging AI tooling and agent frameworks for applicability to endpoint management use cases. Security & Compliance • Integrate endpoint tooling with SIEM and SOAR platforms for proactive threat monitoring and automated incident response. • Design and enforce Conditional Access policies, identity frameworks, and data loss prevention controls. • Ensure endpoint posture meets regulatory requirements including GDPR, HIPAA, and PCI-DSS. • Participate in Zero Trust architecture reviews, risk assessments, and compliance audits. • Implement and validate encryption standards across platforms (BitLocker for Windows, FileVault for macOS). Collaboration & Leadership • Mentor junior engineers through knowledge sharing, code reviews, and coaching, including upskilling the team on AI-assisted and agentic operations. • Serve as the escalation point for complex endpoint and macOS issues across global teams. • Partner with Security, Networking, and Identity teams to integrate MDM platforms with tools such as Okta and AWS VDI. • Produce and maintain technical documentation, architecture decision records, and end-user guides. • Strong communication skills for both technical and non-technical audiences; able to clearly convey complex concepts to stakeholders at all levels. EXPECTED OUTCOMES • Maintain endpoint compliance of 95%+ across all managed platforms. • Reduce provisioning and onboarding time through streamlined automation and self-service workflows. • Deliver measurable improvements in endpoint security posture and end-user satisfaction scores. • Reduce manual endpoint management tasks through scripting, automation, and agentic AI workflows. • Align endpoint strategies with organizational goals and evolving industry best practices. REQUIRED QUALIFICATIONS & EXPERIENCE • Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent professional experience. • 5+ years of IT experience with at least 3 years in endpoint engineering or EUC roles. • Demonstrated expertise managing large-scale endpoint environments (10,000+ devices). • JAMF 400 Certification (JAMF Certified Expert) or equivalent expert-level hands-on experience. • Proficiency in scripting: Bash, Python, AppleScript, and PowerShell. • Deep knowledge of the Apple ecosystem: ABM/DEP, VPP, MDM protocol, APNs. • Strong understanding of endpoint compliance, encryption (BitLocker, FileVault), and Zero Trust frameworks. • Experience with vulnerability remediation, patch lifecycle management, and endpoint security tooling. • Excellent written and verbal communication and cross-team collaboration skills. • Available to work until 1:00 PM EST. PREFERRED QUALIFICATIONS • Experience working in regulated industries such as finance, healthcare, or government. • Hands-on experience with AWS VDI image creation and deployment pipelines. • Familiarity with modern identity and access management frameworks (Zero Trust, Conditional Access, Okta). • Practical experience building AI agents or LLM-integrated workflows (LangChain, AutoGen, Claude, OpenAI API, or similar). • Understanding of prompt engineering, retrieval-augmented generation (RAG), or fine-tuning for IT operations use cases. #LI-Remote #LI-GR1 Working at Genesys AI at enterprise scale – Build, support and operate AI-powered technology used by more than 8,000 organizations worldwide. 150+ new AI features were released in the last fiscal year. A flexible-first culture – Join a global team of nearly 7,000 employees with flexible ways of working designed to help people do their best work. Growth in the AI era – Build future-ready skills through mentorship, learning programs, leadership development and education support. Time to recharge and give back – Benefits include paid volunteer time, August Free Fridays, well-being resources and regionally tailored programs for employees and their families. Recognized globally – Genesys is Great Place to Work® certified in 17 countries and 94% of employees are proud to tell others they work at Genesys. Learn more about our culture, AI innovation and sustainability commitments through our Careers site and Sustainability Report. What Happens After You Apply After you apply, here's what you can typically expect: Our Talent Acquisition team reviews your application with the hiring team. A Talent Acquisition Partner will review your application and, if your background is aligned, schedule a Zoom interview. Next, you'll meet the hiring manager and other members of the interview team. We aim to keep the process focused and respectful of your time, with no more than five interviews in most cases. After interviews are complete, our team will follow up with the final steps. Every application is reviewed by a person. Response times may vary by role and location, but our team will keep you informed throughout the process. Stay Connected Stay connected to learn more about how we're applying AI to customer and employee experience challenges and get notified when relevant opportunities become available. Get notified about relevant opportunities. Be the one building what's next - where AI, experience and impact come together. Employee Referral If a Genesys employee referred you, please apply using the link they shared so we can connect your application to their referral. About Genesys: Genesys® empowers more than 8,000 organizations worldwide to create the best customer and employee experiences. With agentic AI at its core, Genesys Cloud™ is the AI-Powered Experience Orchestration platform that connects people, systems, data and AI across the enterprise. As a result, organizations can drive customer loyalty, growth and retention while increasing operational efficiency and teamwork across human and AI workforces.accommodations@genesys.com. You can expect a response within 24–48 hours. To help us provide the best support, click the email link above to open a pre-filled message and complete the requested information before sending. If you have any questions, please include them in your email. This email is intended to support job seekers requesting accommodations. Messages unrelated to accommodation—such as application follow-ups or resume submissions—may not receive a response. Genesys is an equal opportunity employer committed to fairness in the workplace. We evaluate qualified applicants without regard to race, color, age, religion, sex, sexual orientation, gender identity or expression, marital status, domestic partner status, national origin, genetics, disability, military and veteran status, and other protected characteristics. Please note that recruiters will never ask for sensitive personal or financial information during the application phase. Our AI-powered platform connects people, systems, data and AI to help businesses work smarter, respond faster and create more meaningful interactions. Stay connected to learn how we're applying AI to real customer experience challenges and hear about future opportunities. Sign up here. If a Genesys employee referred you, please apply using the link they shared so we can connect your application to their referral.