IT Engineering Manager (Endpoint Engineering)

About This RoleAI processing…

Key Responsibilities

• 1
  Lead, coach, and develop a team of three engineers — setting clear expectations, providing regular candid feedback, and building individual growth plans tailored to each engineer's strengths, gaps, and career goals.
• 2
  Establish and maintain healthy team operating rhythms: sprint cadence, backlog grooming, incident retrospectives, and async-first communication practices that work across time zones.
• 3
  Build a culture of ownership, craft, and continuous improvement — where reducing toil and improving reliability is celebrated, not just expected.
• 4
  Serve as an escalation point for complex technical issues and a knowledge resource for the broader IT Engineering organization.
• 5
  Define and maintain the CPE roadmap in alignment with IT Engineering strategy, company-wide security priorities, and Affirm's FY roadmap cycles.
• 6
  Establish a prioritization framework that balances project work, platform health (KTLO), compliance obligations, and stakeholder requests — with enough transparency that tradeoffs are visible and defensible.
• 7
  Build and own the KPIs and reporting that give you, your team, and leadership real visibility into endpoint compliance posture, patch currency, deployment reliability, and incident trends.
• 8
  Implement structured change control processes: communication, testing gates, rollback plans, and post-deployment review for platform changes that affect a global workforce.
• 9
  Guide the architecture and long-term strategy for Affirm's endpoint platform — macOS-first, with Windows and mobile in scope — including MDM configuration, zero-touch provisioning, and the automation pipelines that keep the fleet healthy at scale.
• 10
  Drive key technical initiatives including permission automation, third-party patching, silent update delivery, and device lifecycle improvements.
• 11
  Champion infrastructure-as-code and automation-first engineering practices across the team — reducing manual toil and creating durable, repeatable processes.
• 12
  Evaluate new tooling and approaches, run POCs, and make clear adoption recommendations grounded in security, reliability, and operational efficiency.
• 13
  Build strong working relationships with Security, Identity/IAM, Developer Productivity, and IT Support — acting as a reliable partner and technical peer, not just a fulfillment queue.
• 14
  Partner with Security to onboard and maintain endpoint security agents (EDR, AV, disk encryption) and enforce least-privilege policies at scale.
• 15
  Represent CPE in cross-functional planning conversations, bringing clear data and grounded recommendations to tradeoff discussions.
• 16
  Work closely with Developer Productivity to understand and support the unique endpoint needs of Affirm's engineering population.

Requirements

• Familiarity with package and software distribution pipelines (AutoPkg, Munki, or equivalent).
• Prior experience in a fintech, high-growth, or regulated environment where security and compliance requirements are first-class concerns.
• Experience with infrastructure-as-code or configuration management tooling (Terraform, Ansible, or equivalent) in an IT or corporate engineering context.
• Jamf Pro experience at an enterprise level (Jamf 300 or equivalent depth preferred).
• Experience with Windows endpoint management (Intune, SCCM, or equivalent).
• Health care coverage - Affirm covers all premiums for all levels of coverage for you and your dependents
• Flexible Spending Wallets - generous stipends for spending on Technology, Food, various Lifestyle needs, and family forming expenses
• Time off - competitive vacation and holiday schedules allowing you to take time off to rest and recharge
• ESPP - An employee stock purchase plan enabling you to buy shares of Affirm at a discount

Perks & Benefits