📋 Description

• Own endpoint lifecycle for macOS fleet: purchasing, issuance, zero-touch setup, management
• Complete MDM migration across the endpoint fleet
• Own identity and access across SaaS vendor stack; automate joiner-mover-leaver (SSO, SCIM)
• Build automation and tooling to remove routine work
• Define IT infrastructure as code with config provisioning in version control
• Provide on-site support in Freiburg and remote support for SF

🎯 Requirements

• Hands-on IT/corporate engineering in a fast-growing startup
• macOS fleet management, MDM (Iru, Jamf, or similar), Apple Business Manager / ADE
• Identity and access admin with IdP; SSO/SAML and SCIM lifecycle automation
• Scripting and automation (Python, shell) and IaC (Terraform)
• Security mindset for workforce systems and endpoints

🎁 Benefits

• Distributed team with Freiburg and SF offices; travel for in-person weeks
• Flexible work arrangement with in-person collaboration
• Values-driven culture focused on collaboration and impact