IT Systems Engineer, Mobile Client Platform Engineer

Role overview An Endpoint / Client Platform Engineering team is responsible for the laptops, handsets, and supporting infrastructure used across the company, treating the fleet as a distributed platform where every configuration change ships through pull requests, CI, staging, and canary rollouts. This role leads the build-out of a new corporate-issued mobile device program, taking it from early design through global production and replacing the current BYOD model. The team is lean and operates with high autonomy, so the hire will define the standards, tooling, and lifecycle that govern how managed phones and managed Apple accounts are issued worldwide.

Responsibilities - Design a corporate-issued mobile program covering device standards, eligibility for who receives which hardware, and a rollout plan that scales from a first region to all operating regions. - Own global logistics for hardware issuance, including procurement partners, regional coverage, spares pools, and refresh cycles. - Bring mobile configuration into the existing config-as-code pipeline so mobile policies are reviewed, tested, and progressively rolled out with the same rigor as the laptop fleet. - Build zero-touch enrollment flows: Apple Business Manager and ADE with managed Apple accounts on iOS, plus the zero-touch equivalent on Android, so new phones work out of the box. - Own policy, compliance, and the full device lifecycle for the corporate fleet, from issue to remote wipe. - Build telemetry for the corporate fleet, including device check-in, OS and patch state, and drift detection between reported and actual state. - Manage the end-to-end app distribution pipeline for mobile, from approval through staged update rollouts. - Partner with Corporate Security on device posture, device trust signals, and travel-device programs for international trips. - Define the boundary between corporate-issued devices and BYOD, and own that boundary as the program scales.

Requirements - 8+ years managing corporate mobile device fleets at multi-thousand-device scale, with end-to-end ownership of at least one global or multi-region program. - Hands-on experience with mobile device lifecycle automation across enrollment, policy, patching, and app distribution. - Practical knowledge of GitOps and CI for configuration management. - Solid endpoint security fundamentals, including posture, trust signals, and compliance. - Bachelor's degree or equivalent combination of education, training, and professional experience in a field relevant to the role. - Strong communication skills and the ability to drive decisions in a small, autonomous team.

Nice to have - Experience rolling out a managed Apple account program alongside Apple Business Manager and ADE. - Familiarity with zero-touch enrollment on Android and cross-platform MDM tooling. - Background partnering with security teams on international travel device programs.

Benefits and work setup - Annual salary range: $285,000–$325,000 USD. - Location: Boston, MA; San Francisco, CA; Seattle, WA; New York, NY; or Washington, DC, with remote-friendly options; hybrid expectation of at least 25% in-office time. - Visa sponsorship available, with immigration legal support offered when an offer is made. - Competitive compensation, generous vacation and parental leave, flexible working hours, and optional equity donation matching. - Applications reviewed on a rolling basis.