{"version":"0.1","company":{"name":"YubHub","url":"https://yubhub.co","jobsUrl":"https://yubhub.co/jobs/skill/cis-level-1-controls"},"x-facet":{"type":"skill","slug":"cis-level-1-controls","display":"Cis Level 1 Controls","count":1},"x-feed-size-limit":100,"x-feed-sort":"enriched_at desc","x-feed-notice":"This feed contains at most 100 jobs (the most recently enriched). For the full corpus, use the paginated /stats/by-facet endpoint or /search.","x-generator":"yubhub-xml-generator","x-rights":"Free to redistribute with attribution: \"Data by YubHub (https://yubhub.co)\"","x-schema":"Each entry in `jobs` follows https://schema.org/JobPosting. YubHub-native raw fields carry `x-` prefix.","jobs":[{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_a94481ee-795"},"title":"IT Administrator - Endpoint Platforms","description":"<p><strong>About the role</strong></p>\n<p>We are seeking an IT Administrator - Endpoint Management to own the enterprise endpoint strategy with primary responsibility for administering Replit’s MDM platforms, enforcing secure baseline configurations aligned to CIS Level 1 benchmarks and ensuring all corporate endpoints (primarily macOS) are properly patched, compliant, and securely configured.</p>\n<p><strong>What You&#39;ll Do</strong></p>\n<ul>\n<li>Own and administer enterprise endpoint management platforms with primary responsibility for Iru/Kandji configuration, policy design, and lifecycle management</li>\n</ul>\n<ul>\n<li>Establish and enforce enterprise endpoint standards aligned to CIS Level 1 benchmarks</li>\n</ul>\n<ul>\n<li>Design, implement, and maintain secure baseline configurations for macOS endpoints ensuring systems are hardened and secure by default</li>\n</ul>\n<ul>\n<li>Ensure all endpoints remain compliant with patching policies, minimum OS requirements, and approved software versions through automated enforcement</li>\n</ul>\n<ul>\n<li>Administer and maintain an internal approved application catalog including packaging, version control, testing and secure deployment</li>\n</ul>\n<ul>\n<li>Ensure endpoint detection and response (EDR) tooling is properly deployed, configured and monitored (SentinalOne preferred)</li>\n</ul>\n<ul>\n<li>Implement and enforce appropriate data loss prevention (DLP) measures across endpoints to protect corporate data and intellectual property</li>\n</ul>\n<ul>\n<li>Develop compliance dashboards and reporting to track endpoint posture, remediation timelines and risk exposure</li>\n</ul>\n<ul>\n<li>Partner closely with Security Operations (SecOps) to investigate, contain, and remediate endpoint-related security incidents</li>\n</ul>\n<ul>\n<li>Participate in incident response activities including forensic coordination, containment actions and post-incident remediation</li>\n</ul>\n<ul>\n<li>Contribute to internal and external audits, ensuring endpoint controls meet SOC 2 and ISO 27001 requirements; prepare evidence and support auditor walkthroughs</li>\n</ul>\n<ul>\n<li>Own licensing strategy across administered platforms, ensuring appropriate license assignment, cost optimization, feature alignment, renewal management and utilization reporting</li>\n</ul>\n<ul>\n<li>Continuously evaluate new endpoint features, security capabilities, and OS updates</li>\n</ul>\n<ul>\n<li>Create and maintain technical documentation, configuration standards and operational runbooks</li>\n</ul>\n<p><strong>Required Skills &amp; Experience</strong></p>\n<ul>\n<li>6+ years of experience in endpoint administration, device management, and enterprise IT operations in a cloud-first environment</li>\n</ul>\n<ul>\n<li>Hands-on expertise administering Iru/Kandji or comparable Apple-focused MDM solutions</li>\n</ul>\n<ul>\n<li>Understanding of MDM solutions for Microsoft Windows and Linux (Jump Cloud preferred)</li>\n</ul>\n<ul>\n<li>Strong understanding of CIS Level 1 controls and endpoint hardening principles</li>\n</ul>\n<ul>\n<li>Experience deploying and administering EDR solutions and coordinating with security teams on alert triage and remediation</li>\n</ul>\n<ul>\n<li>Experience managing OS patching strategies, update enforcement policies and compliance reporting</li>\n</ul>\n<ul>\n<li>Familiarity with DLP technologies and endpoint-based data protection controls</li>\n</ul>\n<ul>\n<li>Experience participating in compliance programs aligned to SOC 2 and ISO 27001 frameworks supporting audit evidence collection and control validation processes</li>\n</ul>\n<ul>\n<li>Strong troubleshooting skills with the ability to diagnose complex endpoint configuration and policy conflicts</li>\n</ul>\n<ul>\n<li>Clear documentation and communication skills with the ability to articulate technical risk and remediation strategies</li>\n</ul>\n<p><strong>Bonus Qualifications</strong></p>\n<ul>\n<li>Active Replit user and passionate about making software creation more accessible</li>\n</ul>\n<ul>\n<li>Been part of a rapid growth SaaS startup</li>\n</ul>\n<p><strong>Full-Time Employee Benefits Include</strong></p>\n<ul>\n<li>Competitive Salary &amp; Equity</li>\n</ul>\n<ul>\n<li>401(k) Program with a 4% match</li>\n</ul>\n<ul>\n<li>Health, Dental, Vision and Life Insurance</li>\n</ul>\n<ul>\n<li>Short Term and Long Term Disability</li>\n</ul>\n<ul>\n<li>Paid Parental, Medical, Caregiver Leave</li>\n</ul>\n<ul>\n<li>Commuter Benefits</li>\n</ul>\n<ul>\n<li>Monthly Wellness Stipend</li>\n</ul>\n<ul>\n<li>Autonomous Work Environment</li>\n</ul>\n<ul>\n<li>In Office Set-Up Reimbursement</li>\n</ul>\n<ul>\n<li>Flexible Time Off (FTO) + Holidays</li>\n</ul>\n<ul>\n<li>Quarterly Team Gatherings</li>\n</ul>\n<ul>\n<li>In Office Amenities</li>\n</ul>\n<p><strong>Want to learn more about what we are up to?</strong></p>\n<ul>\n<li>Meet the Replit Agent</li>\n</ul>\n<ul>\n<li>Replit: Make an app for that</li>\n</ul>\n<ul>\n<li>Replit Blog</li>\n</ul>\n<ul>\n<li>Amjad TED Talk</li>\n</ul>\n<p><strong>Interviewing + Culture at Replit</strong></p>\n<ul>\n<li>Operating Principles</li>\n</ul>\n<ul>\n<li>Reasons not to work at Replit</li>\n</ul>\n<p><strong>Compensation Range</strong></p>\n<p>$95K - $175K</p>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">XML job scraping automation by <a href=\"https://yubhub.co\">YubHub</a></p>","url":"https://yubhub.co/jobs/job_a94481ee-795","directApply":true,"hiringOrganization":{"@type":"Organization","name":"Replit","sameAs":"https://jobs.ashbyhq.com","logo":"https://logos.yubhub.co/replit.com.png"},"x-apply-url":"https://jobs.ashbyhq.com/replit/8ef821bf-087f-412a-85dc-177dff04d184","x-work-arrangement":"hybrid","x-experience-level":"senior","x-job-type":"full-time","x-salary-range":"$95K - $175K","x-skills-required":["endpoint administration","device management","enterprise IT operations","Iru/Kandji configuration","policy design","lifecycle management","CIS Level 1 controls","endpoint hardening principles","EDR solutions","DLP technologies","endpoint-based data protection controls","compliance programs","SOC 2 and ISO 27001 frameworks"],"x-skills-preferred":["SentinalOne","Jump Cloud","Microsoft Windows","Linux","OS patching strategies","update enforcement policies","compliance reporting"],"datePosted":"2026-03-07T15:20:07.138Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Foster City, CA"}},"employmentType":"FULL_TIME","occupationalCategory":"Engineering","industry":"Technology","skills":"endpoint administration, device management, enterprise IT operations, Iru/Kandji configuration, policy design, lifecycle management, CIS Level 1 controls, endpoint hardening principles, EDR solutions, DLP technologies, endpoint-based data protection controls, compliance programs, SOC 2 and ISO 27001 frameworks, SentinalOne, Jump Cloud, Microsoft Windows, Linux, OS patching strategies, update enforcement policies, compliance reporting","baseSalary":{"@type":"MonetaryAmount","currency":"USD","value":{"@type":"QuantitativeValue","minValue":95000,"maxValue":175000,"unitText":"YEAR"}}}]}