SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 100,000 - 110,000 / annual
Ibotta, a leading performance marketing platform (NYSE: IBTA) headquartered in Denver, is seeking an IT Systems Engineer to own endpoint and device management across the organization. Reporting to the Engineering Manager of IT, you will be responsible for the day-to-day build, automation, and security posture of Ibotta's Mac and Windows fleet using Jamf Pro and Microsoft Intune.
Key responsibilities include administering Jamf Pro (macOS/iOS) and Microsoft Intune (Windows) for enrollment, configuration profiles, compliance policies, and OS update cycles. You will implement zero-touch provisioning across both platforms (Apple Business Manager, Platform SSO, Windows Autopilot) and support authentication workflows with Security/Identity teams using Managed Apple IDs, Okta Verify, Windows Hello, and hardware MFA keys.
You will build and maintain security baselines and hardening configurations, remediate findings against internal and CIS/SCUBA benchmarks, and drive the Windows endpoint patch automation program to parity with the macOS pipeline. Development work includes creating and maintaining scripts in Bash, Python, Swift, and PowerShell for patch deployment, packaging, self-remediation, and lifecycle automation. All infrastructure and automation code will be maintained in Git with branching standards, pull requests, and peer review as standard practice.
Additional duties include packaging and deploying third-party applications across the fleet, managing full fleet lifecycle operations (enrollment, provisioning, refreshes, recovery, secure offboarding), and serving as Tier 3 escalation for endpoint incidents with root-cause analysis. You will manage endpoint-adjacent services such as PaperCut print/badging and device access control, work Jira Service Management tickets with SLA discipline, and create knowledge base articles and runbooks to enable Desktop Support teams.
Required qualifications: 4+ years in endpoint engineering, systems administration, or IT operations in mixed Mac/Windows environments; hands-on production experience with both Jamf Pro and Microsoft Intune (depth in one with competence in the other acceptable); proficiency in at least one scripting language (PowerShell, Bash, Python, or Swift); working knowledge of enterprise IdP (Okta preferred); experience with patch management, OS update strategy, and device provisioning at scale; Kanban/Agile working style; strong written and verbal communication; ability to meet deadlines and adjust to changing priorities. Bachelor's degree in Computer Science, Information Technology, or Information Systems preferred; equivalent experience accepted.
The role is hybrid, requiring 3 days in office (Tuesday, Wednesday, Thursday) in Denver. Relocation assistance available for candidates outside the Denver area.
