Senior Endpoint Engineer

Stack

Responsibilities

• ▹Own and operate Wave's MDM platforms across ChromeOS (Google Workspace Admin Console), macOS (Jamf), Android and Linux: configuration, policy design, maintenance and roadmap
• ▹Manage ChromeOS device policy in Google Workspace: enrollment, org unit structure, security policies, extension management and OS version enforcement
• ▹Design and enforce endpoint security policies with Information Security, including EDR integration (CrowdStrike Falcon), compliance baselines and patch management
• ▹Build and maintain automated deployment pipelines for OS updates, software distribution and configuration changes
• ▹Define and manage the device lifecycle: provisioning standards, imaging, refresh cycles, decommissioning and fleet reporting
• ▹Establish cross-platform compatibility standards and tooling for a heterogeneous fleet (macOS, Linux, Android, plus ChromeOS and Windows edge cases)
• ▹Build the tooling and runbooks that local IT teams use for provisioning and onboarding
• ▹Own fleet observability: dashboards, compliance reporting, patch currency metrics and audit-ready documentation
• ▹Evaluate and own vendor relationships for endpoint tooling, including MDM and patch management
• ▹Mentor junior team members in endpoint and device management

Requirements

• ▹5+ years in endpoint or systems engineering with hands-on ownership of multi-platform fleets at scale
• ▹Strong understanding of two of the platforms in the existing fleet (Windows/Intune experience is not required)
• ▹Strong understanding of endpoint security principles: EDR integration, compliance baselines (CIS, SOC2), certificate management and disk encryption enforcement
• ▹Familiarity with identity and access tooling as it touches endpoints: SSO, certificate-based auth, conditional access (Okta or equivalent)
• ▹Scripting and automation skills sufficient to build reliable deployment pipelines
• ▹Fleet reporting and observability: you can tell leadership the compliance posture of the fleet at any time

Nice to have

• ▹Having owned an endpoint function through growth or organizational change
• ▹Experience with CrowdStrike Falcon or an equivalent EDR platform
• ▹Work in fintech or a regulated industry with compliance-driven endpoint requirements
• ▹French language skills or an interest in learning French
• ▹Experience managing device fleets in multi-country markets, ideally including emerging markets

Soft skills

What we offer

• ▹Fully remote role
• ▹Yearly travel to one of Wave's African operating countries, plus a $1,200 yearly stipend to meet coworkers
• ▹Salary range of $96,500 to $133,100 USD (paid in local currency equivalent) plus an equity package
• ▹Subsidized health insurance for you and your dependents and retirement contributions (vary by country)
• ▹6 months fully paid parental leave and subsidized fertility assistance
• ▹Unlimited vacation with a 20-day minimum
• ▹$10,000 annual charitable donation matching

About the company

Wave's mission is to make Africa the first cashless continent by building financial services with no account fees that are instantly available and accepted everywhere. Launched in Senegal in 2017, it now has millions of users across 9 countries.