Endpoint and Device Specialist

About this role

With over 30,000 customers, including a third of Fortune 500 companies, Tempo is trusted by organizations across the globe to make their workflows work better.

We create a suite of integrated solutions for time management, resource planning, budget management, roadmapping, program management, reporting and more. We create the tech that enables the modern team to deliver – for every step from first vision to value.

Since our beginning in 2007 as a project to make a time-tracking tool to help a client – Tempo has expanded to become the #1 time management add-on for Jira, and we have developed and acquired a multitude of tools to become one of the most trusted names in the Atlassian ecosystem.

We want everyone to work better – but we also want to be a tech company with a heart. Join us as we continuously innovate our award-winning products, create new solutions, and help the world work smarter, not harder.

About the role:

As an Endpoint and Device Specialist, you will own the health, security, and lifecycle of the devices that Tempo staff rely on every day. From provisioning a new hire’s laptop to enforcing security posture across a global, remote-first fleet, you will make sure every endpoint is reliable, compliant, and ready to work from day one.

You will be the go-to expert for endpoint management and identity access, administering our device management and single sign-on tooling, resolving escalated endpoint issues through our IT service desk, and continuously hardening our environment against risk. You will partner closely with Information Security to translate policy into enforced, auditable controls on every device.

This role reports to the Director of Corporate IT & Information Security and sits at the intersection of IT operations, security, and staff experience. You will also help us apply AI to modern endpoint operations – using AI-assisted tooling and automation to streamline support, triage, and device management at scale.

What you'll do:

- Own the full endpoint device lifecycle – procurement, provisioning, configuration, refresh, and secure retirement/wipe – across macOS, Windows, Linux (Ubuntu) and BYOD mobile devices.

- Administer and optimize Unified Endpoint Management (UEM) tooling to enforce configuration baselines, patching, encryption, and compliance policies across a distributed, remote-first fleet.

- Administer Okta SSO – managing single sign-on, application integrations, provisioning/deprovisioning, and access policies in partnership with Information Security.

- Deliver endpoint support through Jira Service Management (JSM) – triaging, resolving, and escalating tickets while building request types, workflows, automation, and knowledge-base content that improve resolution times.

- Lead device onboarding and offboarding, ensuring new hires are equipped on day one and departing employees’ access and devices are fully reclaimed and secured.

- Enforce and monitor endpoint security posture – endpoint detection and response (EDR), disk encryption, patch compliance, and configuration hardening – and remediate gaps.

- Maintain accurate device inventory and asset management, tracking ownership, warranty, and compliance status across the fleet.

- Apply AI-assisted tooling and automation to endpoint operations – automating routine provisioning, support triage, and reporting to scale IT operations without scaling headcount.

- Partner with Information Security on audits, access reviews, and evidence collection, treating auditability and least-privilege access as first-class requirements.

- Document standards, runbooks, and self-service resources so endpoint operations are consistent, repeatable, and easy to maintain as the company scales.

- Support the Tempo Way of Working by using Tempo and Jira products to manage and instrument your work.

Who you are:

- Okta SSO experience – hands-on administration of Okta single sign-on, including application integrations, provisioning, and access policies.

- Jira Service Management (JSM) experience – delivering IT support through JSM, including workflows, request types, and automation.

- SaaS company experience – you have worked in a SaaS / technology company environment.

- Remote work environment experience - you have provided support for a remote workforce ./..

- AI experience – hands-on experience using AI tools and/or AI-assisted automation in your work.

- Time zone – must be based in North America and able to work core hours in the Eastern (EST) or Central (CT) time zone.

Also important:

- 3+ years in endpoint management, IT operations, desktop/device support, or a similar role, ideally in a remote-first environment.

- Hands-on experience administering Unified Endpoint Management (UEM) tooling (e.g., Jamf, Kandji, Microsoft Intune) across the full device spectrum — macOS, Windows, iOS/iPadOS, Android, and Linux

- Solid understanding of endpoint security – EDR, disk encryption, patch management, and configuration hardening.

- Working knowledge of identity and access management concepts and least-privilege principles.

- Strong troubleshooting and systems thinking – you naturally see dependencies, edge cases, and failure modes.

- Excellent communication and customer-service skills; you can support both technical and non-technical colleagues with patience and clarity.

- A bias toward automation and continuous improvement rather than repetitive manual work.

- Experience in high-growth environments where ambiguity and change are constant; scripting experience (e.g., Bash, PowerShell, Python) is a strong plus.

Why Join Tempo?

- Impact: Own the endpoint experience for the entire company – with the autonomy to modernize how IT operates.

- Innovation: Apply AI and automation to real endpoint and security operations, not just experiments.

- Collaboration: Join a supportive, cross-functional Corporate IT & Information Security team that values openness and a…