SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Legora is an AI-native legal workspace used by 1,000+ customers including major law firms and enterprises across 50+ countries. The company has scaled to $100M+ ARR and operates teams globally.
The Endpoint Engineer owns Legora's Apple-first endpoint platform, serving as the final escalation point for all macOS fleet management and security. This is a senior individual contributor role with significant technical scope and influence over the endpoint roadmap.
Key responsibilities include:
- Manage endpoint configuration as code: author, review, test, and progressively deploy macOS profiles, declarations, security baselines, and remediation scripts with staging, canary groups, telemetry-based promotion, and rollback. Lead the migration from legacy MDM payloads to Apple's declarative management as the platform evolves.
- Run MDM as a production service: handle configuration as code, observability, reliability, upgrades, incident response, and integrations with identity, security, and IT systems. Evaluate and lead platform migrations end-to-end when tooling changes.
- Automate the device lifecycle: zero-touch provisioning through Apple Business Manager, declarative software update enforcement, software packaging and distribution, and secure deprovisioning.
- Own binary authorization: policy model, rule distribution, application approvals, telemetry, and synchronization services. Evaluate where native macOS binary allow/deny fits against dedicated stacks.
- Build continuous posture evaluation: assess device health in real-time (enrollment, OS/patch state, encryption, endpoint protection, configuration drift), remediate automatically where possible, and produce posture signals for Corporate Security access gates.
- Turn fleet telemetry into decisions: query device state at scale, drive insights into dashboards and compliance reporting, and feed endpoint telemetry to Detection & Response teams.
- Build AI-assisted operations: use agents and LLMs to automate repetitive operational work so reliability scales with fleet growth.
- Define the endpoint roadmap: evaluate technologies, make architecture decisions, and solve macOS and endpoint-platform problems beyond standard support.
You'll work across IT Systems, Workplace Technology, Information Security, and Engineering teams, setting the technical direction for the endpoint platform.
