Staff Corporate Security Engineer

A staff engineer on GitLab's Corporate Security Engineering team, a small group that protects the laptops, identity systems and SaaS tools the all-remote workforce uses. The role leads security architecture for the endpoint fleet, mainly macOS but also iOS, Windows and Linux, setting hardening baselines, patching and software distribution, and managing configuration as code through Terraform and GitOps pipelines. It works with IT, Security Operations and Detection and Response on endpoint telemetry and detections, and acts as a senior escalation point and mentor.

GitLab wants deep Jamf Pro or FleetDM experience securing Macs, strong Terraform and infrastructure-as-code skills, scripting in languages such as Python, bash, PowerShell or Go, and familiarity with Okta, Google Workspace and LDAP.