Passionate about precision medicine and advancing the healthcare industry?
Recent advancements in underlying technology have finally made it possible for AI to impact clinical care in a meaningful way. Tempus' proprietary platform connects an entire ecosystem of real-world evidence to deliver real-time, actionable insights to physicians, providing critical information about the right treatments for the right patients, at the right time.
Position Overview:
We are seeking a highly skilled and strategic Senior Endpoint Systems Engineer to join our IT team. In this role, you will serve as the primary architect and technical lead for the health, security, compliance, and lifecycle management of our global endpoint fleet.
Our environment features a balanced mix of both Windows and macOS devices. We need a senior professional with deep, dual-platform expertise who can design scalable deployment workflows, architect robust endpoint security configurations, and optimize our enterprise toolset—specifically Microsoft Intune, Jamf Pro, and Workspace ONE. As a senior member of the team, you will drive technical strategy, lead complex integration projects, and mentor junior IT staff to ensure a seamless and secure digital employee experience.
Key Responsibilities:
- Enterprise MDM Architecture: Architect, optimize, and maintain our global Unified Endpoint Management (UEM) infrastructure using Microsoft Intune, Jamf Pro, and VMware Workspace ONE.
- Strategic Fleet Engineering: Design and scale automated deployment, provisioning, and configuration management workflows for a balanced fleet of Windows 10/11 and macOS hardware.
- Modern Provisioning & Lifecycle: Standardize and evolve modern deployment frameworks utilizing Windows Autopilot, Apple Business Manager (ABM), and Automated Device Enrollment to achieve zero-touch provisioning.
- Advanced Scripting & Automation: Develop, test, and maintain robust code repositories (PowerShell for Windows; Bash/Zsh/Python for macOS) to automate complex administrative tasks, custom reporting, and API integrations.
- Security & Compliance Governance: Partner closely with the Security team to engineer and enforce endpoint security baselines (e.g., CIS Benchmarks), disk encryption protocols (BitLocker, FileVault), and EDR/antivirus agent deployments.
- Identity & Access Architecture: Lead the integration of endpoint platforms with enterprise identity and access management (IAM) systems (e.g., Entra ID, Okta), including modern single sign-on (SSO) extensions.
- Tier 3/4 Escalation & Mentorship: Act as the highest tier of technical escalation for complex endpoint, OS, and software issues. Provide mentorship, guidance, and technical training to Tier 1/2 service desk and junior systems administrators.
- Roadmapping & Documentation: Maintain a forward-looking roadmap for endpoint technologies, evaluate emerging tools, and author authoritative architectural diagrams and standard operating procedures (SOPs).
- Experience: 5–8+ years of dedicated experience in endpoint engineering, systems administration, or infrastructure architecture within an enterprise environment.
- Dual-Platform Mastery: Comprehensive, expert-level knowledge of both Windows and macOS operating systems, system internals, and enterprise deployment methodologies.
- Enterprise Tooling Expertise: Deep hands-on engineering experience configuring and managing Microsoft Intune, Jamf Pro, and Workspace ONE at scale.
- Advanced Scripting: Strong proficiency in PowerShell and Bash/Zsh (Python or Swift is a significant plus) for advanced automation, custom scripts, and utilizing MDM APIs.
- Leadership & Communication: Proven ability to lead projects independently, collaborate across multi-functional engineering teams, and explain complex technical concepts to non-technical stakeholders.
$130,000-$145,000 annually
The expected salary range above is applicable if the role is performed from Illinois and may vary for other locations (California, Colorado, New York). Actual salary may vary based on qualifications and experience. Tempus offers a full range of benefits, which may include incentive compensation, restricted stock units, medical and other benefits depending on the position.
We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
Skills Required
- 5-8+ years of dedicated experience in endpoint engineering, systems administration, or infrastructure architecture within an enterprise environment.
- Expert-level knowledge of both Windows and macOS operating systems and enterprise deployment methodologies.
- Hands-on experience configuring and managing Microsoft Intune, Jamf Pro, and Workspace ONE at scale.
- Experience designing and implementing Windows Autopilot, Apple Business Manager, and Automated Device Enrollment for zero-touch provisioning.
- Proficiency in PowerShell for Windows automation.
- Proficiency in Bash or Zsh for macOS automation.
- Experience with Python or Swift for scripting and automation.
- Experience implementing endpoint security baselines, disk encryption (BitLocker, FileVault), and EDR/antivirus deployments.
- Experience integrating endpoint platforms with identity providers (Entra ID, Okta) and SSO.
- Proven leadership, ability to act as Tier 3/4 escalation, mentor junior staff, and communicate with non-technical stakeholders.
What the Team is Saying
Tempus AI Compensation & Benefits Highlights
-
Healthcare Strength — The package includes medical, dental, vision, life and disability coverage, FSA/HSA options, mental health/EAP, and pet insurance. Wellness programs, gym discounts, and commuter benefits complement the core coverage.
-
Parental & Family Support — Paid parental leave and an onsite mother’s room are explicitly highlighted, alongside family medical leave. These offerings extend support for new parents beyond standard medical benefits.
-
Wellbeing & Lifestyle Benefits — On‑site cafeteria meals, stocked snacks, and an on‑site barista in some offices enhance daily convenience. Hybrid/remote options and flexible schedules add meaningful lifestyle flexibility.
Tempus AI Insights
What We Do
We bring together one of the world’s largest libraries of multimodal clinical and molecular data with a robust suite of AI tools to help physicians personalize care in real time, connect patients with therapies and clinical trials, and enable partners to accelerate discovery and development of new treatments. With ~8 million de-identified research records and 350+ petabytes of data, Tempus partners with more than half of U.S. oncologists and the majority of the top 20 global pharma companies. Our teams are pioneering work across oncology, neurology, psychiatry, cardiology, and beyond—transforming how care is delivered and therapies are developed. At Tempus, every role contributes to our mission: to help each patient benefit from the experiences of those who came before. For more information, visit tempus.com.
Why Work With Us
We’re looking for people who can change the world. People who question the status quo and refuse to shy away from tough problems. For builders who are never done building, and the learners who are never done learning. Passionate individuals with undying curiosity who want to take on one of the greatest challenges humanity has ever faced—head on.
Gallery
Tempus AI Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
Most of the team follows a hybrid policy, with some roles allowing for a fully remote arrangement and some roles being onsite only.
