Staff Enterprise Security Engineer, Gemini

• This role requires deep technical expertise in macOS security internals, strong software development skills to build production services, and systems engineering experience with MDM and configuration management
• Strong software development skills in Go, Python, Swift, or Objective-C with experience building production services
• Deep expertise securing macOS environments including Endpoint Security framework, System Extensions, Network Extensions, and TCC
• Proven experience with MDM platforms such as Jamf Pro or Fleet, including policy management and deployment at scale
• Strong configuration management experience with Salt, Puppet, or similar tools
• Experience with software packaging and deployment systems like Munki or AutoPkg
• Knowledge of cloud infrastructure (AWS) and container orchestration (Kubernetes)
• Demonstrated ability to build, deploy, and maintain security tools and services in production
• Experience with infrastructure-as-code using Terraform or similar tools

Desirable

• The Platform Security team secures Gemini's infrastructure through service hardening and by developing and supporting a suite of foundational tools. We provide secure-by-default infrastructure, consumable security services, and expert consultation to engineering teams for secure cloud and non-cloud infrastructure
• The Platform Security team builds and delivers security foundations and paved paths for Gemini's corporate endpoints and workforce. As a Staff Corporate Security Engineer focused on client platforms, you will build security services, tools, and automation while hardening our macOS fleet, securing endpoint management platforms, and implementing configuration-as-code security guardrails
• This is a hands-on engineering role where you'll write production code daily using Go, Swift, Objective-C, and Python—not just configuration management
• You'll design and build endpoint security platforms that scale across our organization
• You will partner closely with IT, Engineering, and GRC teams to enable secure device management while maintaining least-privilege access and zero-standing-privilege models for endpoints
• Build and maintain security services, tools, and automation using Go, Swift, Objective-C, and Python
• Design and implement endpoint security controls for macOS environments using system extensions, network extensions, and native security frameworks
• Create reusable libraries, frameworks, and platforms that enable secure-by-default patterns for client devices
• Develop automated security monitoring, scanning, and remediation services for endpoint events
• Build CI/CD pipelines for security software deployment and configuration-as-code validation
• Implement and manage MDM platforms (Jamf, Fleet) and configuration management systems (Salt, Munki)
• Architect binary authorization, DNS filtering, and application control solutions at scale
• Partner with Engineering, IT, and GRC teams on architecture decisions and provide security consultation
• Participate in on-call rotation for critical security incidents and endpoint security issues