IT Systems Engineer, Client Platform Engineer, macOS

Details

The Endpoint team treats Anthropic's device fleet as a platform that it builds and operates. The team runs its own MDM as a production service and manages device configuration as code. Policies, configuration profiles, queries, remediation scripts, and software are delivered through pull requests, CI, staging, and canary groups before reaching the fleet. The fleet is primarily macOS, with a small number of Linux machines and a growing mobile footprint.

The successful candidate will own the endpoint platform end to end, including the infrastructure underneath the MDM, device configuration, patching and software pipelines, fleet telemetry, and automation. The role partners with Security on hardening, compliance controls, detection, and response, and with developer and infrastructure teams to ensure security controls support their work.

Responsibilities

• Own endpoint configuration as code by authoring, reviewing, testing, and progressively rolling out MDM policies, configuration profiles, and remediation scripts across macOS and mobile, with canary stages and rollback.
• Operate the MDM platform as a production service, including infrastructure as code, observability, upgrades, and incident response.
• Build patch management automation with rapid enforcement timelines while maintaining a good user experience.
• Design zero-touch provisioning that turns a sealed device into a productive machine on the first day.
• Support a small number of Linux machines alongside the Mac fleet.
• Turn fleet telemetry into policies, dashboards, and early drift warnings, and use Claude to automate manual operations work.
• Partner with Corporate Security on endpoint hardening, binary authorization, and compliance controls.
• Participate in the team's rotation for incoming requests and escalations, and serve as the deep escalation tier for endpoint issues that IT Operations cannot resolve.
• Help define the endpoint roadmap, make architecture decisions, and own the platform used by Anthropic employees.

Requirements

• 8+ years of experience building secure IT systems in complex environments, including leading projects across multiple teams.
• Experience managing endpoint fleets of thousands of macOS devices through a modern MDM.
• Experience treating endpoint configuration as code that is version controlled and peer reviewed rather than managed solely through administrative consoles.
• Deep knowledge of macOS internals, including launchd, configuration profiles, TCC, and system extensions.
• Proficiency writing Python and shell scripts.
• Ability to write design documents and runbooks for team review and operational support.
• Bachelor's degree or an equivalent combination of education, training, and experience. The field of study should be relevant to the role as demonstrated through coursework, training, or professional experience.

Additional Qualifications

• Experience operating an MDM or device management platform as a service rather than only consuming an MDM SaaS product.
• Experience with open-source endpoint and device management tools such as Munki, osquery, and AutoPkg.
• Experience building automated, progressive rollout systems with promotion gated on telemetry.
• Experience running infrastructure as code in a public cloud.
• Working knowledge of Linux administration, including packaging, systems, and configuration management.
• Experience using large language models to automate operations work.

Compensation and Work Policy

• Annual salary: $285,000-$325,000 USD.
• Staff are currently expected to work from one of Anthropic's offices at least 25% of the time; some roles may require more office time.
• Visa sponsorship is available, although sponsorship cannot be guaranteed for every role or candidate.
• Benefits include competitive compensation and benefits, optional equity donation matching, generous vacation and parental leave, flexible working hours, and office collaboration space.