Ramp - Senior Security Engineer, Endpoint
Requirements
• Deep macOS security experience — Jamf Pro, FleetDM, or equivalent MDM at scale • Strong IaC fundamentals and a GitOps delivery model — Terraform modules, remote state, and CI pipelines shipped through MRs and code review, not tickets and manual steps • Solid working knowledge of Google Workspace in a managed enterprise environment, including Chrome Browser Cloud Management and extension policy enforcement • A point of view on how agentic AI changes the corporate security surface • Nice-to-Haves • Nice-to-Haves • Have shipped real work with open source endpoint and device management tooling • Have built automated, progressive rollout systems based on fleet telemetry. • Have managed a mixed fleet — macOS, Windows, and mobile — with real depth on at least one platform • Have put AI to work on real operational problems, not just prototyped • Benefits available to all full-time Ramp employees (Global) • Centralized home-office equipment ordering • Health and wellness stipend • Budget for intra-office travel • Weekly coffee stipend • United States • United States • 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents • One Medical annual membership • 401(k), including employer match on contributions made while employed by Ramp • Fertility HRA (up to $10,000 per year) • Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay • In-office perks: lunch, snacks, drinks, and more • Relocation support to NYC or SF (as needed) • Canada • Canada • Group medical, dental, and vision coverage through Sun Life • Life, AD&D, and disability coverage • Fertility drug coverage (up to $4,000 lifetime) • Group Retirement Plan with employer match (RRSP + DPSP) • Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay • Employee Assistance Program and virtual care through Lumino Health • United Kingdom • United Kingdom • Private medical insurance through Freedom Elite • Virtual GP and at-home care via eMed x Livi • Workplace pension through Penfold, with salary sacrifice option • Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay • Referral Instructions • If you are being referred for the role, please contact that person to apply on your behalf. • Other notices • Other notices • Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. • Beware of recruiting scams: Ramp will only contact you through official @Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process. • Ramp Applicant Privacy Notice
Responsibilities
• Write and ship MDM policy as code — configuration profiles, remediation scripts, and enforcement rules across macOS, Windows, and mobile — with staged rollouts and rollback from day one • Build patch automation that closes exposure windows fast without making employees' lives worse • Manage software distribution across the fleet • Mine fleet telemetry for signal — build dashboards, drift alerts, and AI-assisted automation that cuts toil before it compounds • Own managed browser and extension policy: enforce what's allowed, block what isn't, and keep the control plane auditable as the surface grows • Be the last line of defense on endpoint escalations that IT Operations can't crack
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT