IT Engineering Manager (Endpoint Engineering)

About the Role Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compound interest. Our Client Platform Engineering (CPE) team owns affirm's endpoint platform end‑to‑end: from zero‑touch provisioning and MDM architecture to patch management, automation pipelines, and compliance posture. We enable Affimers anywhere in the world to open a laptop on day one and get straight to work.

We are looking for a hands‑on technical manager to lead the Client Platform Engineering team. This engineering‑forward leadership role will set the technical direction, establish the program operating model, and develop a team of three engineers (one L5, two L6). You will build the program scaffolding, define planning and tracking methods, establish KPIs, and create an operating rhythm that lets your engineers deliver consistently.

What You'll Do Team Leadership & Coaching Lead, coach, and develop a team of three engineers—setting clear expectations, providing regular candid feedback, and building individual growth plans tailored to each engineer’s strengths, gaps, and career goals. Establish and maintain healthy team operating rhythms: sprint cadence, backlog grooming, incident retrospectives, and async‑first communication practices that work across time zones. Build a culture of ownership, craft, and continuous improvement—where reducing toil and improving reliability is celebrated, not just expected.

Serve as an escalation point for complex technical issues and a knowledge resource for the broader IT Engineering organization. Program Management & Delivery Define and maintain the CPE roadmap in alignment with IT Engineering strategy, company‑wide security priorities, and affirm’s FY roadmap cycles. Establish a prioritization framework that balances project work, platform health (KTLO), compliance obligations, and stakeholder requests—providing transparent trade‑offs.

Build and own the KPIs and reporting that give you, your team, and leadership real visibility into endpoint compliance posture, patch currency, deployment reliability, and incident trends. Implement structured change control processes: communication, testing gates, rollback plans, and post‑deployment review for platform changes that affect a global workforce. Technical Direction & Platform Ownership Guide the architecture and long‑term strategy for affirm’s endpoint platform—macOS‑first, with Windows and mobile in scope—including MDM configuration, zero‑touch provisioning, and automation pipelines that keep the fleet healthy at scale.

Drive key technical initiatives including permission automation, third‑party patching, silent update delivery, and device lifecycle improvements. Champion infrastructure‑as‑code and automation‑first engineering practices across the team—reducing manual toil and creating durable, repeatable processes. Evaluate new tooling and approaches, run POCs, and make clear adoption recommendations grounded in security, reliability, and operational efficiency.

Cross‑Functional Partnership Build strong working relationships with Security, Identity/IAM, Developer Productivity, and IT Support—acting as a reliable partner and technical peer. Partner with Security to onboard and maintain endpoint security agents (EDR, AV, disk encryption) and enforce least‑privilege policies at scale. Represent CPE in cross‑functional planning conversations, bringing clear data and grounded recommendations to trade‑off discussions.

Work closely with Developer Productivity to understand and support the unique endpoint needs of affirm’s engineering population. What We Look For 5+ years of hands‑on experience in endpoint engineering, client platform, or corporate IT engineering at scale—an understanding of macOS device management (Jamf), MDM architecture, and endpoint security practices. Exposure to compliance frameworks relevant to endpoint security (SOC 2, CIS Benchmarks, or similar). 2+ years of people management or formal technical leadership experience, including setting direction, running 1:1s, and developing individual engineers.

Demonstrated ability to build and run a program from scratch—establishing operating cadences, KPI frameworks, and prioritization processes where none previously existed. Scripting and automation proficiency in Bash and at least one additional language (Python strongly preferred); comfort integrating with RESTful APIs (MDM, Okta, Google Workspace, etc.). Strong cross‑functional instincts—able to navigate competing priorities, build trust with partner teams, and communicate technical decisions clearly to non‑technical stakeholders.

A track record of shipping improvements reliably and iteratively, with attention to rollback safety, communication, and compliance documentation. Nice to Have Familiarity with package and software distribution pipelines (AutoPkg, Munki, or equivalent). Prior experience in a fintech, high‑growth, or regulated environment where security and compliance requirements are first‑class concerns.

Experience with infrastructure‑as‑code or configuration management tooling (Terraform, Ansible, or equivalent) in an IT or corporate engineering context. Jamf Pro experience at an enterprise level (Jamf 300 or equivalent depth preferred). Experience with Windows endpoint management (Intune, SCCM, or equivalent).

Pay Grade M Equity Grade 5 Employees new to affirm typically come in at the start of the pay range. affirm focuses on providing a simple and transparent pay structure based on location, experience, and job‑related skills. Base pay is part of a total compensation package that may include monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents). Employees may also be eligible for equity rewards offered by affirm holdings, inc. (parent company).

CAN base pay range per year: $142,000 – 192,000 CAD Please note that visa sponsorship is not available for this position. Benefits Health care coverage — affirm covers all premiums for all levels of coverage for you and your dependents. Flexible Spending Wallets — generous stipends for spending on technology, food, various lifestyle needs, and family‑forming expenses.

Time off — competitive vacation and holiday schedules allowing you to take time off to rest and recharge. ESPP — an employee stock purchase plan enabling you to buy shares of affirm at a discount. We believe it’s On Us to provide an inclusive interview experience for all, including people with disabilities.

We are happy to provide reasonable accommodations to candidates in need of individualized support during the hiring process. For U.S. positions that could be performed in Los Angeles or San Francisco, pursuant to the San Francisco Fair Chance Ordinance and Los Angeles Fair Chance Initiative for Hiring Ordinance, affirm will consider for employment qualified applicants with arrest and conviction records. #J-18808-Ljbffr