Senior Security Engineer, Endpoint

Ramp

Senior Security Engineer shaping Ramp's endpoint security posture across macOS, Windows, and mobile devices. Building secure controls with Terraform and collaborating with IT, SecOps, and engineering teams.

Posted 7/8/2026full-timeNew York City • New York • 🇺🇸 United StatesSenior💰 $172,000 - $236,000 per yearWebsite

Tech Stack

Tools & technologies

CloudJamfMacOSOpen SourceTerraform

About the role

Key responsibilities & impact

Write and ship MDM policy as code — configuration profiles, remediation scripts, and enforcement rules across macOS, Windows, and mobile — with staged rollouts and rollback from day one
Build patch automation that closes exposure windows fast without making employees' lives worse
Manage software distribution across the fleet
Mine fleet telemetry for signal — build dashboards, drift alerts, and AI-assisted automation that cuts toil before it compounds
Own managed browser and extension policy: enforce what's allowed, block what isn't, and keep the control plane auditable as the surface grows
Be the last line of defense on endpoint escalations that IT Operations can't crack

Requirements

What you’ll need

Deep macOS security experience — Jamf Pro, FleetDM, or equivalent MDM at scale
Strong IaC fundamentals and a GitOps delivery model — Terraform modules, remote state, and CI pipelines shipped through MRs and code review, not tickets and manual steps
Solid working knowledge of Google Workspace in a managed enterprise environment, including Chrome Browser Cloud Management and extension policy enforcement
A point of view on how agentic AI changes the corporate security surface
Have shipped real work with open source endpoint and device management tooling (Nice-to-Haves)
Have built automated, progressive rollout systems based on fleet telemetry (Nice-to-Haves)
Have managed a mixed fleet — macOS, Windows, and mobile — with real depth on at least one platform (Nice-to-Haves)
Have put AI to work on real operational problems, not just prototyped (Nice-to-Haves)

Benefits

Comp & perks

Flexible PTO
Unlimited AI token usage
Centralized home-office equipment ordering
Health and wellness stipend
Budget for intra-office travel
Weekly coffee stipend
100% medical, dental & vision insurance coverage for you, with partial coverage for dependents
One Medical annual membership
401(k), including employer match on contributions made while employed by Ramp
Fertility HRA (up to $10,000 per year)
Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay
Pet insurance
In-office perks: lunch, snacks, drinks, and more
Group medical, dental, and vision coverage through Sun Life
Life, AD&D, and disability coverage
Fertility drug coverage (up to $4,000 lifetime)
Group Retirement Plan with employer match (RRSP + DPSP)
Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay
Employee Assistance Program and virtual care through Lumino Health
Private medical insurance through Freedom Elite
Virtual GP and at-home care via eMed x Livi
Workplace pension through Penfold, with salary sacrifice option

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Configuration ProfilesRemediation ScriptsTerraform ModulesCI PipelinesEndpoint ManagementFleet Telemetry AnalysisDrift AlertsAI-Assisted AutomationMixed Fleet ManagementChrome Browser Cloud Management