We are looking for a dedicated Device Management Specialist to own the security, and user experience of our global fleet of hardware. In this role, you will be the primary architect and administrator for our endpoint management platforms—specifically Jamf Pro for our MacBooks, and Microsoft Intune for our Windows and IOS devices.
You will build zero-touch deployment workflows, automate application patching, enforce security baselines, and ensure our end-users have a seamless, secure experience from day one.
Our team currently includes nationals from Japan, the Netherlands, and Italy. You will be joining a vibrant, multicultural group responsible for managing devices across Japan and India.
Technology Stack
- Intune
- Jamf Pro
Tools Used
- Intune
- Jamf Pro
- Github
Responsibilities
- Endpoint Architecture & Administration: Design, configure, and maintain our MDM environments using Jamf Pro (macOS) and Microsoft Intune (Windows 10/11 and IOS).
- Zero-Touch Deployment: Manage and optimize automated device provisioning pipelines utilizing Apple Business Manager (ABM/DEP) and Windows Autopilot.
- Application Lifecycle Management: Package, test, and deploy applications, updates, and OS patches to all endpoints via Jamf Self Service and Intune Company Portal without disrupting end-user productivity.
- Security & Compliance: Enforce CIS/NIST security baselines. Manage full-disk encryption (FileVault and BitLocker), conditional access policies, and remote wipe capabilities for lost or compromised devices.
- Scripting & Automation: Write and maintain custom scripts (Bash, Zsh, PowerShell) to automate complex configurations, remediate issues, and gather custom extension attributes.
- Tier 3 Support & Escalation: Act as the final point of escalation for complex endpoint issues that the IT Helpdesk cannot resolve.
- Asset Reporting: Work with our asset manager to update asset records via API scripting (already functioning).
Requirements
- Experience: 3+ years of dedicated experience in IT Engineering, Systems Administration, or Endpoint Management.
- Apple Ecosystem (Jamf Pro): Proven experience managing macOS and iOS devices at scale. Familiarity with configuration profiles, custom policies, and Apple Business Manager. (flexible on this as long as you are willing to expand)
- Windows Ecosystem (Intune): Strong knowledge of Microsoft Intune, Windows Autopilot, Azure AD (Entra ID), and Windows 11 management. (strong requirement)
- Scripting Skills: Proficiency in writing operational scripts in PowerShell (for Windows) and Bash/Zsh (for macOS). Flexible in the age of AI.
- Security Mindset: Understanding of endpoint security principles, identity management, and how to balance strict security policies with end-user friction.
- Communication: Ability to write clear, concise documentation for both IT team members and non-technical end-users.
Language Requirements
- English: Business level (equivalent to TOEIC score of 700 or above)
- Japanese: Basic level
Nice to haves
While not specifically required, tell us if you have any of the following.
- Certifications: Jamf Certified Admin (Jamf 300) or higher, Microsoft Certified: Endpoint Administrator Associate.
- Experience integrating MDM platforms with identity providers (Okta, Google Workspace, Azure AD) and HRIS systems.
- Familiarity with API integrations to automate tasks between IT platforms (e.g., Jira, Slack, Jamf, Intune).
- Experience in AI development and/or experience in using AI tools to improve development processes.
- Money Forward is at a major turning point, shifting “from Cloud to AI.” We are currently driving “AX (AI Transformation)”—the next step beyond DX—with the goal of providing “Digital Workers,” where AI agents autonomously execute tasks. As we enter a phase of evolving into Japan’s No. 1 back-office AI company by integrating AI agents into all of our products in the future, we are looking for individuals who can contribute to AI-driven development and value creation.
Compensation
¥5,808,000 ~ ¥11,004,000 annually.
