Senior Endpoint Engineer

At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused on compliance and ethics, supportive user-centric technology, and customized financial solutions, we've helped over 1 million clients on their path to a brighter future.

While we're proud of what we've already accomplished, we're searching for new collaborators to help us get to the next level! If you're looking to join a forward-thinking, rapidly growing organization with helping people as its number one goal, we want to hear from you.

You will be the technical lead across our End User Computing and Workplace Technology teams, setting the bar for how we build, deploy, and maintain systems at scale across a 5,000+ device fleet — a large, complex environment spanning Windows, Mac, and cloud-managed device platforms. This is a hands-on role for someone who wants to own design decisions and solve hard problems, not manage people. When a project is at risk or a design needs a harder look, you're who the team leans on.

Key Responsibilities

• Own the design and implementation of major initiatives across device management, identity, and workplace technology


• Provide technical leadership for the IT Engineering team, raising the bar on execution and quality


• Unblock complex problems, review high-risk changes, and raise the quality floor across the team


• Evaluate new tooling and platforms with a clear view of tradeoffs, security posture, and operational cost


• Turn ambiguous business problems into well-scoped technical solutions, making sound decisions with incomplete information


• Participate in incident response for issues affecting user systems or workplace platforms — own technical response, drive resolution, and ensure problems are fully closed


• Represent the team's technical direction to cross-functional stakeholders and senior leadership without the director in the room when needed

Skill Requirements

• 5+ years in IT engineering with a background in desktop engineering, end user computing, or device management at large or mid-sized enterprise scale


• Hands-on scripting experience with Python, PowerShell, or Bash for automation and orchestration


• Deep operational experience with MDM tooling across Windows and Mac device fleets


• Identity and access governance: SSO, SAML, SCIM, conditional access policies, and access lifecycle management


• Experience with Git-based version control workflows, including pull requests and code review

Desirable Skills

• Experience with Zero Trust security frameworks and compliance practices


• Actively uses AI tools as part of their engineering workflow; brings an AI-forward mindset to solving problems at scale


• Experience working in SASE/SSE environments


• Experience with logging, SIEM integrations, auditing, monitoring, and device telemetry


• Network fundamentals: DNS, DHCP, TLS/SSL, and Zero Trust/VPN architecture


• Familiarity with endpoint security tooling (EDR, DLP)

#LI-AW1

Why Join Us?

While you make a difference for others, we’ll work to make a difference for you, providing an uplifting, collaborative work environment and benefits that reflect your value to us. For eligible full-time employees, we offer:

• Considerable employer contributions for health, dental, and vision programs


• Generous PTO, paid holidays, and paid parental leave


• 401(k) matching program


• Merit advancement opportunities


• Career development & training

And finally, our team spirit and culture! We cultivate an environment of community, connection, and belonging across our entire organization.

Beyond Finance does not accept unsolicited resumes from individual recruiters or third-party recruiting agencies in response to job positions.  No fee will be paid to their parties who submit unsolicited candidates directly to Beyond Finance employees or the Beyond Finance HR team.  No placement fee will be paid to any third party unless such a request has been made by the Beyond HR team.