IT Administrator - Endpoint Platforms

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide and over 500,000 business users, Replit is democratizing software development by removing traditional barriers to application creation.About the roleWe are seeking an IT Administrator - Endpoint Management to own the enterprise endpoint strategy with primary responsibility for administering Replit’s MDM platforms, enforcing secure baseline configurations aligned to CIS Level 1 benchmarks and ensuring all corporate endpoints (primarily macOS) are properly patched, compliant, and securely configured. The successful candidate will manage the approved application catalog, enforces EDR and DLP controls, develops compliance reporting and partners closely with SecOps on incident response and remediation. Additionally, the administrator will support audit readiness for SOC 2 and ISO 27001, balance security guardrails with developer productivity in an engineering environments and drive continuous improvement through automation, policy standardization and proactive endpoint risk management.What You'll DoOwn and administer enterprise endpoint management platforms with primary responsibility for Iru/Kandji configuration, policy design, and lifecycle managementEstablish and enforce enterprise endpoint standards aligned to CIS Level 1 benchmarksDesign, implement, and maintain secure baseline configurations for macOS endpoints ensuring systems are hardened and secure by defaultEnsure all endpoints remain compliant with patching policies, minimum OS requirements, and approved software versions through automated enforcementAdminister and maintain an internal approved application catalog including packaging, version control, testing and secure deploymentEnsure endpoint detection and response (EDR) tooling is properly deployed, configured and monitored (SentinalOne preferred)Implement and enforce appropriate data loss prevention (DLP) measures across endpoints to protect corporate data and intellectual propertyDevelop compliance dashboards and reporting to track endpoint posture, remediation timelines and risk exposurePartner closely with Security Operations (SecOps) to investigate, contain, and remediate endpoint-related security incidentsParticipate in incident response activities including forensic coordination, containment actions and post-incident remediationContribute to internal and external audits, ensuring endpoint controls meet SOC 2 and ISO 27001 requirements; prepare evidence and support auditor walkthroughsOwn licensing strategy across administered platforms, ensuring appropriate license assignment, cost optimization, feature alignment, renewal management and utilization reportingContinuously evaluate new endpoint features, security capabilities, and OS updatesCreate and maintain technical documentation, configuration standards and operational runbooksRequired Skills & Experience6+ years of experience in endpoint administration, device management, and enterprise IT operations in a cloud-first environmentHands-on expertise administering Iru/Kandji or comparable Apple-focused MDM solutionsUnderstanding of MDM solutions for Microsoft Windows and Linux (Jump Cloud preferred)Strong understanding of CIS Level 1 controls and endpoint hardening principlesExperience deploying and administering EDR solutions and coordinating with security teams on alert triage and remediationExperience managing OS patching strategies, update enforcement policies and compliance reportingFamiliarity with DLP technologies and endpoint-based data protection controlsExperience participating in compliance programs aligned to SOC 2 and ISO 27001 frameworks supporting audit evidence collection and control validation processesStrong troubleshooting skills with the ability to diagnose complex endpoint configuration and policy conflictsClear documentation and communication skills with the ability to articulate technical ri ... (truncated, view full listing at source)