Senior Security Engineer, Endpoint

About the role

Ramp is looking for a Senior Security Engineer to own the endpoint security posture across its macOS, Windows, and BYOD mobile fleet. You will design secure‑by‑default controls, automate device lifecycles, and partner with IT, SecOps, and engineering to elevate low‑friction security.

Key responsibilities

• Write and ship MDM policy as code (configuration profiles, remediation scripts, enforcement rules) with staged rollouts and rollbacks.
• Build patch automation that quickly closes exposure windows while preserving employee experience.
• Manage software distribution and fleet telemetry, creating dashboards, drift alerts, and AI‑assisted automation.
• Own managed browser and extension policy, ensuring auditable control as the surface expands.
• Act as the final line of defense on endpoint escalations that IT Operations cannot resolve.

Required profile

• Deep macOS security experience with large‑scale MDM solutions such as Jamf Pro or FleetDM.
• Strong Infrastructure‑as‑Code fundamentals and a GitOps delivery model using Terraform, remote state, and CI pipelines.
• Solid working knowledge of Google Workspace in a managed enterprise, including Chrome Browser Cloud Management and extension policy enforcement.
• Thought leadership on how agentic AI reshapes corporate security.

Required skills

• macOS, Windows, and mobile device management (MDM)
• Jamf Pro, FleetDM or equivalent
• Terraform, GitOps, CI/CD pipelines
• Google Workspace, Chrome Browser Cloud Management
• AI‑driven security automation

What we offer

• Flexible PTO and home‑office equipment ordering
• Comprehensive health, dental, and vision coverage
• 401(k) with employer match
• Parental leave up to 16 weeks at 100% pay
• Relocation assistance to NYC or SF