Harvey Senior Systems Engineer at Harvey responsible for end-to-end client engineering including device management and automation. Own the lifecycle and security posture of Macs and Windows devices across global offices.
Responsibilities
Harvey runs on a fleet of Macs and Windows devices, and every one of them is the front door to how each Harvey employee does their work. We're seeking a Senior Systems Engineer to own client engineering end to end - Jamf, Intune, Autopilot, Okta device trust, and more, and the automation that ties them together. This is the person who decides how a laptop gets built, secured, patched, recovered, and retired, and who makes those decisions hold up as we scale across offices globally.
The ideal candidate has run a production device management environment at scale and can move between writing the deployment tooling, debugging a broken enrollment, and pushing for improvements to policy, process, and systems along the way.
Own the endpoint platform. Jamf Pro for macOS, Intune and Autopilot for Windows, and the mobile fleet alongside them. You set configuration standards, patching cadence, and compliance baselines in partnership with Security, and you're accountable for the fleet actually meeting them.
Engineer the device lifecycle. Zero-touch provisioning through Apple Business Manager and Autopilot, automated onboarding and offboarding, hardware refreshes, DLP, and forensics. Where the lifecycle still depends on someone remembering to do something, replace that with code.
Build the automation the fleet runs on. Most of this role's leverage comes from tooling - Python and scripts against Jamf, Intune, and Okta APIs, event-driven workflows, and self-service that lets employees fix their own problems.
Partner with Security on endpoint posture. Work directly with Security on endpoint policies, EDR coverage, device trust and Okta FastPass, disk encryption and key escrow, browser management, and more.
Be the final escalation for endpoint issues. IT Operations handles tier 1 and 2 globally; the problems that reach you are the strange ones. You'll fix them, and then fix the class of problem so the next person doesn't file the ticket.
Support a global, in-person-heavy company. Harvey has offices across the US, EMEA, and APAC. You'll build for time zones you aren't in, and document and train the team well enough that someone in each location can resolve issues independently.
Minimum 5 years in endpoint, client, or IT systems engineering, including direct ownership of a macOS MDM environment at 1000+ devices.
Deep hands-on Jamf experience, plus real Windows management experience via Intune, Autopilot, and Entra.
Strong scripting and automation ability in Python, Bash, or Swift, with a track record of building tooling against vendor APIs rather than clicking through admin consoles.
Working fluency with an IdP, Okta preferred, covering SSO, MFA, device trust, and how identity and endpoint policy interact.
Qualification
Experience with JamfStrong scripting skills in Python
Required
Experience running a production device management environment at scale
Ability to write deployment tooling and debug enrollment issues
Experience with Jamf, Intune, Autopilot, Okta device trust
Strong scripting skills in Python
Preferred
Experience running endpoint security tooling in a production environment - CrowdStrike or equivalent EDR, managed Chrome Enterprise, DLP.
Endpoint work inside a compliance program (SOC 2, ISO 27001).
