IT Endpoint Engineer
Panthalassa
$120,000 - $180,000 / year
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
About the Company
We are a renewable energy and ocean technology company committed to rapidly developing and deploying technologies that will ensure a sustainable future for Earth by unlocking the vast energy potential of its oceans. Our focus is on capturing civilizational levels of ultra-low-cost renewable energy for applications including computing and affordable renewable fuels delivered to shore.
The company is a public benefit corporation headquartered in Portland, Oregon, and backed by leading venture capitalists, philanthropic investors, university endowments, and private investment offices. We operate as an idea meritocracy in which the best ideas change the company’s direction on a regular basis.
Our staff have worked at organizations such as SpaceX, Blue Origin, Boeing, Tesla, Apple, Virgin Orbit, Astra, Google, Amazon, Microsoft, New Relic, Bridgewater, Raytheon, Disney Imagineering, and the US Army and Air Force, as well as research universities, startups, and small companies across a range of industries.
About the Job
Our core technology is the node, a device that produces energy in the ocean’s harshest conditions for years at a time without human maintenance or intervention.
We're looking for an Endpoint Engineer to own how every laptop, phone, and piece of office technology at Panthalassa is deployed, secured, and kept healthy. This is a hands-on, high-ownership role sitting alongside our IT Support function. You'll lead the initiatives that let us scale device management without scaling headcount: zero touch deployment for Windows and macOS, BYOD support for mobile devices, endpoint security baselines, and the device compliance posture our access policies depend on. You'll also serve as an escalation point and mentor for our IT Support Specialists, and act as our subject matter expert in physical office technology, from access control to printers to patch panels.
Our IT Support team runs the day to day of the physical office: badge issuance, printer break/fix, conference room checks, and desk moves. You own the design, standards, and escalations behind all of it, and you get your hands dirty on build-outs and the hard problems. One day you're writing configuration profiles to automate workstation security, the next you're installing A/V equipment and running patch cables.
Candidates should have strong interpersonal skills and be able to thrive in a creative, scrappy, and collaborative environment in which the best ideas change the company’s direction on a regular basis.
Responsibilities
Endpoint Management and Zero Touch Deployment
- Administer our MDM platforms (Microsoft Intune, JumpCloud) for Windows and macOS devices, including enrollment, configuration profiles, compliance policies, and application delivery.
- Architect and execute our zero touch provisioning rollout (Windows Autopilot and Apple Business Manager / Automatic Device Enrollment), eliminating manual imaging for new device deployments.
- Drive device enrollment to full coverage and keep it there through regular audit.
- Design and implement BYOD policies and enrollment workflows that enable secure access from personal devices.
- Own the device lifecycle: procurement standards, refresh cadence, repair, and secure decommissioning.
Endpoint Security and Compliance
- Build and enforce endpoint security baselines, patch management cadences, and device health policies.
- Deliver the device compliance signals our Conditional Access policies rely on, working with our IAM Engineer to keep policy and posture in sync.
- Monitor and respond to endpoint telemetry and security alerts, driving remediation with the relevant owners.
- Translate compliance framework requirements (NIST or equivalent) into concrete endpoint controls and documentation.
Escalation and Mentorship
- Serve as the primary escalation point for our IT Support Specialists on complex hardware, OS, and device issues.
- Mentor the support team and transfer knowledge deliberately so fixes land at tier 1 the next time.
- Write and maintain runbooks and knowledge base content in Confluence.
Required Qualifications
- Experience administering endpoint management including MDM, device compliance, and application deployment.
- Experience building or running zero touch deployment at scale (Autopilot, Apple Business Manager / ADE, or equivalent).
- Ability to write clear documentation and turn written policy into enforceable technical controls.
- Comfort working across abstraction layers, designing systems one day and swapping hardware the next.
Desired Qualifications
- Experience administering a modern MDM solution such as Intune, Jamf, JumpCloud, or Kandji.
- Comfort with scripting for endpoint automation (PowerShell, bash, Python).
- Familiarity with zero trust concepts and how device posture feeds access decisions.
- Experience supporting or implementing a security or compliance framework (NIST, ISO 27001, SOC 2, or equivalent).
- Experience with endpoint telemetry and security alert response, including triage, remediation, and root cause.
The above qualifications are desired, not required. We encourage you to apply if you are a strong candidate with only some of the desired skills and experience listed.
Additional Requirements
- Available for occasional evening and weekend work to support deployments, maintenance windows, and office moves.
- Travel to vendor sites and other company locations as needed.
- Intermittently able to work longer hours to support critical needs. While we expect a lot of each other, we also offer a high degree of autonomy and work-life balance, including flexible PTO and flexible working hours.
Compensation and Benefits
If hired for this full-time role, you will receive:
- Cash compensation of $120,000 - $180,000.
- Equity in the company. We’re all owners and if we’re successful, this equity should be far and away the most valuable component of your compensation.
- A benefits package that helps you take care of yourself and your family, including:
- Flexible paid time off
- Health insurance (the company pays 100% of gold-level PPO plan for full-time employees, their partners, and dependents)
- Dental insurance (the company pays 100% for full-time employees, their partners, and dependents)
- Vision insurance (the company pays 100% for full-time employees, their partners, and dependents)
- Disability insurance (the company pays 100% for a policy to provide long-term financial support if you become disabled)
- Ability to contribute to tax-advantaged accounts, including 401(k), health FSA, and dependent care FSA
- Relocation assistance to facilitate your move to Portland (if needed).
Location
This is an on-site position. Our offices, lab, and shop are located in Portland, Oregon.
Benefits
- Cash compensation of $120,000 - $180,000.
- Equity in the company. We’re all owners and if we’re successful, this equity should be far and away the most valuable component of your compensation.
- A benefits package that helps you take care of yourself and your family, including: Flexible paid time off
- Health insurance (the company pays 100% of gold-level PPO plan for full-time employees, their partners, and dependents)
- Dental insurance (the company pays 100% for full-time employees, their partners, and dependents)
- Vision insurance (the company pays 100% for full-time employees, their partners, and dependents)
- Disability insurance (the company pays 100% for a policy to provide long-term financial support if you become disabled)
- Ability to contribute to tax-advantaged accounts, including 401(k), health FSA, and dependent care FSA
- Relocation assistance to facilitate your move to Portland (if needed).
About this role
Panthalassa is building ocean energy technology, and they need someone to own the complete lifecycle of how their team works with devices—from the moment a laptop arrives through secure decommissioning years later. This role sits at the intersection of hands-on infrastructure work and strategic system design. You'll architect zero touch deployment for Windows and macOS using Intune and JumpCloud, build endpoint security baselines that feed into access policies, and handle the full spectrum of device management, from writing configuration profiles to installing A/V equipment and running cables when needed.
The position combines technical depth with mentorship and escalation leadership. You'll work alongside the IT Support team, serving as their subject matter expert and escalation point while deliberately transferring knowledge so the team solves more problems at tier one. You'll also translate compliance requirements into concrete controls, monitor endpoint telemetry for security issues, and maintain the documentation that keeps everything running. This is genuinely hands-on—one day you're designing BYOD policies, the next you're troubleshooting physical office technology or supporting a build-out.
You'll need solid experience with MDM platforms, zero touch provisioning at scale, and the ability to move fluidly between abstraction layers and hardware. Scripting skills, familiarity with zero trust concepts, and experience with endpoint security and compliance frameworks are valuable. The role is based in Portland and requires in-office presence, occasional evening or weekend availability for deployments and maintenance, and flexibility around critical needs. Compensation ranges from $120,000 to $180,000, plus equity and a benefits package including flexible PTO.
How this employer is doing
solid
- Recently Raised Funding
This role's local market on JobMinglr
Pay for this role
$120,000 to $180,000 per year
That is the employer's posted range, and where you land in it is usually decided in one conversation. Before that conversation, run the numbers: analyze an offer for this role.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.