Senior Systems Engineer

Location: Chicago, IL, USA; New York, NY, USA; San Francisco, CA, USA About the role Every Chimer’s laptop is a door into our systems, and you’d own the platform that decides whether that door opens. We’re looking for a Senior Systems Engineer to take the reins on our macOS fleet — Jamf Pro, AutoPkg, zero-touch provisioning — and to sit shoulder-to-shoulder with Security on device trust, so posture checks happen before anyone touches corporate data. We’ve built our access platform entirely in the cloud (Jamf, AutoPkg, Okta, osQuery, CrowdStrike), and there’s a lot still to define: you’ll often be the one framing the problem and getting people aligned on a direction, not waiting for a spec. You’ll report to our IT Engineering Manager and join an after-hours/on-call rotation for critical endpoint issues — we’ll walk you through exactly what that looks like during the interview process. The base salary offered for this role and level of experience will begin at $152,000 and up to $210,000. Full-time employees are also eligible for a bonus, competitive equity package, and benefits. The actual base salary offered may be higher, depending on your location, skills, qualifications, and experience In this role, you can expect to Own our Jamf Pro environment end to end — configuration profiles, smart groups, policies, MDM commands, and the change standards that keep it all sane — and set the technical direction for where it goes next. Run the AutoPkg pipeline that gets software onto the fleet: recipes, overrides, trust verification, automated import into Jamf, plus packaging, patching, and disk encryption globally. Make day one work for new Chimers through zero-touch provisioning and enrollment (ADE, Setup Assistant, bootstrap workflows) that just happens without anyone filing a ticket. Leverage AI and automation tools to accelerate script development, troubleshoot complex endpoint issues, and scale operational workflows. Write the scripts and integrations (Python, Swift, Bash, Go, plus vendor APIs) that delete manual IT work — and build them so other engineers can adopt them instead of rebuilding them. Partner with Security to push our Zero Trust model forward, wiring device posture into Okta so device health is a real factor in authentication and app access. Bring our compliance story to life — CIS-style benchmarks applied with a documented, risk-based rationale, plus the metrics and reporting that show the real inventory, health, and compliance state of every device. Lead work that crosses IT Support, Security, and People, act as Tier 3 for the gnarliest endpoint problems, and mentor the engineers and technicians around you through documentation, guidance, and example. To thrive in this role, you have 8+ years managing macOS at scale with an enterprise MDM (Jamf Pro, Kandji, Mosyle) and/or open-source tooling (Munki, Puppet, Chef). Real production experience with AutoPkg — building and operating recipes, overrides, trust controls, and automated promotion into an MDM. Familiarity with AI-assisted development and prompt engineering to drive efficiency in automation, documentation, and troubleshooting. Deep knowledge of Apple’s MDM protocol and Configuration Profile specs, including where Declarative Device Management is taking things. Command of macOS internals: installers and packages, LaunchDaemons and LaunchAgents, the preferences subsystem, system extensions, built-in security tooling (Endpoint Security Framework, SIP, XProtect, Gatekeeper, openBSM), and unified logs. Fluency in at least one scripting or general-purpose language (Python, Swift, Bash, Go) for automation and API work, and a solid grasp of Zero Trust / BeyondCorp and how endpoint posture feeds access decisions. A track record of decisions that span multiple systems, where you have to weigh scalability, compliance, cost, and what someone will have to maintain three years from now. Comfort in ambiguity and the communication skills to match — you can define a problem, bring stakeholders along, and write the kind of documentation that scales understanding across a distributed team. Bonus points if you bring Jamf Certified Admin (300/400), Terraform or other IaC for SaaS and MDM config, osQuery/CrowdStrike experience, Okta device trust integrations, or Windows endpoint management (Intune, PowerShell, MSI packaging) — Windows is a smaller slice of our fleet. #LI-Onsite #LI-WS1 Below is the base salary offered for this role and level of experience. Full-time employees may also be eligible for bonus(es), competitive equity, and benefits. For commissioned roles, the base salary listed in this job description does not include incentive/variable pay. The actual base salary offered may be higher, depending on your location, skills, qualifications, and experience. Wage Notice $152,000 — $210,000 USD A little about us At Chime, we believe that everyone can achieve financial progress. We created Chime—a financial technology company, not a bank*—on the premise that core banking services should be helpful, easy, and free. Through our user-friendly tools and intuitive platforms, we empower our members to take control of their finances and work towards their goals. Whether it's starting a savings account, purchasing a first car or home, launching a business, or pursuing higher education, we're proud to have helped millions unlock their financial potential. We're a team of problem solvers, dreamers, and builders with one shared obsession: our members. From day one, Chimers have worked tirelessly to out-hustle and out-execute competitors to bring our mission to life. Their grit and determination inspire us to work harder every day to deliver the very best experience possible. We each bring an owner's mindset to our work, refusing to be outdone and holding ourselves accountable to meet and exceed the highest bars for our teams, our company, and our members. We believe in being bold, dreaming big, and taking risks, while also working together, embracing our diverse perspectives, and giving each other honest feedback. Our culture remains deeply entrepreneurial, encouraging every Chimer to see themselves as stewards of our mission to help everyday Americans unlock their financial progress. We know that to achieve our mission, we must earn and keep people's trust—so we hold ourselves to the highest standards of integrity in everything we do. These aren't just words on a wall—our values are embedded in every aspect of our business, serving as a north star that guides us as we work to help millions achieve their financial potential. Because if we don't—who will? *Chime is a financial technology company, not a bank. Banking services provided by The Bancorp Bank, N.A. or Stride Bank, N.A., Members FDIC. What we offer for our full-time, regular employees 🏢 Our in-office work policy is designed to keep you connected - with four days a week in the office and Fridays from home for those near one of our offices, plus team and company-wide events depending on location. Whether you’re coming in regularly or are part of our fully remote program, you’ll stay engaged with your work and teammates. 💻 Benefits that support your work and life, including backup child, elder, and pet care and subsidized commuter benefits for eligible employees. ✨ Comprehensive health, financial, and wellbeing benefits designed to support you at every stage of life. 🏝 Generous vacation policy and company-wide paid days off 🫂 1% of your time off to support local community organizations of your choice 👟 Annual wellness stipend to use towards eligible wellness related expenses 👶 Up to 22 weeks of paid parental leave for birthing parents and 12 weeks of paid parental leave for non-birthing parents 👪 Access to family planning reimbursement 💚 A challenging and fulfilling opportunity to join one of the most experienced teams in FinTech and help millions unlock financial progress We know that great work can’t be done without a diverse team and inclusive environment. That’s why we specifically look for individuals of varying strengths, skills, backgrounds, and ideas to join our team. We believe this gives us a competitive advantage to better serve our members and helps us all grow as Chimers and individuals. Chime is proud to be an Equal Opportunity Employer. We consider qualified applicants without regard to race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, marital or family status, disability, genetic information, veteran status, or any other legally protected basis under provincial, federal, state, and local laws, regulations, or ordinances. We will also consider qualified applicants with criminal histories in a manner consistent with the requirements of state and local laws, including the San Francisco Fair Chance Ordinance, Cook County Ordinance, NYC Fair Chance Act, and the LA City Fair Chance Ordinance, and consistent with Canadian provincial and federal laws. If you have a disability or special need that requires accommodation during any stage of the application process, please contact: accommodations@chime.com . To learn more about how Chime collects and uses your personal information during the application process, please see the Chime Applicant Privacy Notice .