Lead architecture and engineering for global endpoint fleet across Windows and macOS. Design UEM infrastructure, automate provisioning (Autopilot, ABM), build scripts and API integrations, enforce security baselines (BitLocker, FileVault, EDR), integrate with identity providers, act as Tier 3/4 escalation, and mentor junior staff while driving roadmap and documentation.
Passionate about precision medicine and advancing the healthcare industry?
Recent advancements in underlying technology have finally made it possible for AI to impact clinical care in a meaningful way. Tempus' proprietary platform connects an entire ecosystem of real-world evidence to deliver real-time, actionable insights to physicians, providing critical information about the right treatments for the right patients, at the right time.
Location: Hybrid: Chicago (3 days on-site)
Position Overview:
Position Overview:
We are seeking a highly skilled and strategic Senior Endpoint Systems Engineer to join our IT team. In this role, you will serve as the primary architect and technical lead for the health, security, compliance, and lifecycle management of our global endpoint fleet.
Our environment features a balanced mix of both Windows and macOS devices. We need a senior professional with deep, dual-platform expertise who can design scalable deployment workflows, architect robust endpoint security configurations, and optimize our enterprise toolset—specifically Microsoft Intune, Jamf Pro, and Workspace ONE. As a senior member of the team, you will drive technical strategy, lead complex integration projects, and mentor junior IT staff to ensure a seamless and secure digital employee experience.
Key Responsibilities:
- Enterprise MDM Architecture: Architect, optimize, and maintain our global Unified Endpoint Management (UEM) infrastructure using Microsoft Intune, Jamf Pro, and VMware Workspace ONE.
- Strategic Fleet Engineering: Design and scale automated deployment, provisioning, and configuration management workflows for a balanced fleet of Windows 10/11 and macOS hardware.
- Modern Provisioning & Lifecycle: Standardize and evolve modern deployment frameworks utilizing Windows Autopilot, Apple Business Manager (ABM), and Automated Device Enrollment to achieve zero-touch provisioning.
- Advanced Scripting & Automation: Develop, test, and maintain robust code repositories (PowerShell for Windows; Bash/Zsh/Python for macOS) to automate complex administrative tasks, custom reporting, and API integrations.
- Security & Compliance Governance: Partner closely with the Security team to engineer and enforce endpoint security baselines (e.g., CIS Benchmarks), disk encryption protocols (BitLocker, FileVault), and EDR/antivirus agent deployments.
- Identity & Access Architecture: Lead the integration of endpoint platforms with enterprise identity and access management (IAM) systems (e.g., Entra ID, Okta), including modern single sign-on (SSO) extensions.
- Tier 3/4 Escalation & Mentorship: Act as the highest tier of technical escalation for complex endpoint, OS, and software issues. Provide mentorship, guidance, and technical training to Tier 1/2 service desk and junior systems administrators.
- Roadmapping & Documentation: Maintain a forward-looking roadmap for endpoint technologies, evaluate emerging tools, and author authoritative architectural diagrams and standard operating procedures (SOPs).
Required Skills & Qualifications:
- Experience: 5–8+ years of dedicated experience in endpoint engineering, systems administration, or infrastructure architecture within an enterprise environment.
- Dual-Platform Mastery: Comprehensive, expert-level knowledge of both Windows and macOS operating systems, system internals, and enterprise deployment methodologies.
- Enterprise Tooling Expertise: Deep hands-on engineering experience configuring and managing Microsoft Intune, Jamf Pro, and Workspace ONE at scale.
- Advanced Scripting: Strong proficiency in PowerShell and Bash/Zsh (Python or Swift is a significant plus) for advanced automation, custom scripts, and utilizing MDM APIs.
- Leadership & Communication: Proven ability to lead projects independently, collaborate across multi-functional engineering teams, and explain complex technical concepts to non-technical stakeholders.
$130,000-$145,000 annually
The expected salary range above is applicable if the role is performed from Illinois and may vary for other locations (California, Colorado, New York). Actual salary may vary based on qualifications and experience. Tempus offers a full range of benefits, which may include incentive compensation, restricted stock units, medical and other benefits depending on the position.
We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
Tempus AI Redwood, California, USA Office
Tempus AI Bay Area - Tempus Office Office
Our Redwood City office is located in a waterfront neighborhood at the heart of Silicon Valley, providing convenient access to tech hubs and boasting a thriving business scene. With excellent transport options and a range of dining choices, it's a dynamic hub for professionals and tech enthusiasts.
Similar Jobs at Tempus AI
Artificial Intelligence • Big Data • Healthtech • Machine Learning • Analytics • Biotech • Generative AI
Manage specimen tracking and status in the laboratory information management system (LIMS), support pharma/partner ops projects, communicate with stakeholders, monitor high-priority orders, audit sample status, and respond to inquiries to ensure timely, accurate lab processing.
Top Skills:
LimsSlack
Artificial Intelligence • Big Data • Healthtech • Machine Learning • Analytics • Biotech • Generative AI
Design and implement scalable backend services and distributed data systems. Build and maintain ETL pipelines and data warehousing, enforce data contracts, and manage cloud infrastructure (primarily GCP). Lead system architecture, mentor engineers, own operational on-call responsibilities, and collaborate with product, bioinformatics, and ML teams to enable secure, compliant data and compute workflows for research and clinical use.
Top Skills:
Amazon S3AvroBigQueryCi/CdCloud SpannerContainer OrchestrationDataflowGCPGkeGoogle Cloud Storage (Gcs)JavaScriptJson SchemaKubernetesNode.jsPythonTypescript
Artificial Intelligence • Big Data • Healthtech • Machine Learning • Analytics • Biotech • Generative AI
Own the data partnerships and integrations roadmap for Tempus' data platform: prioritize sources, lead cross-functional squads to onboard and normalize data, define standards (FHIR/HL7/OMOP), ensure quality and compliance (HIPAA), make data discoverable for product and research teams, and measure coverage, freshness, and adoption.
Top Skills:
APIsCloud Data PlatformsEltETLFhirHl7IcdLoincOmopRwdRweScriptingSnomedSQL
What you need to know about the San Francisco Tech Scene
San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.
Key Facts About San Francisco Tech
- Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Google, Apple, Salesforce, Meta
- Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
- Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
- Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine
