Device Management Specialist, Global IT Division, Tokyo

Overview We are looking for a dedicated Device Management Specialist to own the security, and user experience of our global fleet of hardware. In this role, you will be the primary architect and administrator for our endpoint management platforms specifically Jamf Pro for our MacBooks, and Microsoft Intune for our Windows and IOS devices. You will build zero-touch deployment workflows, automate application patching, enforce security baselines, and ensure our end-users have a seamless, secure experience from day one. Our team currently includes nationals from Japan, the Netherlands, and Italy. You will be joining a vibrant, multicultural group responsible for managing devices across Japan, Vietnam and India. Responsibilities and Duties Endpoint Architecture & Administration: Design, configure, and maintain our MDM environments using Jamf Pro (macOS) and Microsoft Intune (Windows 10/11 and IOS). Zero-Touch Deployment: Manage and optimize automated device provisioning pipelines utilizing Apple Business Manager (ABM/DEP) and Windows Autopilot. Application Lifecycle Management: Package, test, and deploy applications, updates, and OS patches to all endpoints via Jamf Self Service and Intune Company Portal without disrupting end-user productivity. Security & Compliance: Enforce CIS/NIST security baselines. Manage full-disk encryption (FileVault and BitLocker), conditional access policies, and remote wipe capabilities for lost or compromised devices. Scripting & Automation: Write and maintain custom scripts (Bash, Zsh, PowerShell) to automate complex configurations, remediate issues, and gather custom extension attributes. Tier 3 Support & Escalation: Act as the final point of escalation for complex endpoint issues that the IT Helpdesk cannot resolve. Asset Reporting: Work with our asset manager to update asset records via API scripting (already functioning). Required Skills and Experience Experience: 3+ years of dedicated experience in IT Engineering, Systems Administration, or Endpoint Management. Apple Ecosystem (Jamf Pro): Proven experience managing macOS and iOS devices at scale. Familiarity with configuration profiles, custom policies, and Apple Business Manager. (flexible on this as long as you are willing to expand) Windows Ecosystem (Intune): Strong knowledge of Microsoft Intune, Windows Autopilot, Azure AD (Entra ID), and Windows 11 management. (strong requirement) Scripting Skills: Proficiency in writing operational scripts in PowerShell (for Windows) and Bash/Zsh (for macOS). Flexible in the age of AI. Security Mindset: Understanding of endpoint security principles, identity management, and how to balance strict security policies with end-user friction. Communication: Ability to write clear, concise documentation for both IT team members and non-technical end-users. Preferred Skills and Experience Certifications: Jamf Certified Admin (Jamf 300) or higher, Microsoft Certified: Endpoint Administrator Associate. Experience integrating MDM platforms with identity providers (Okta, Google Workspace, Azure AD) and HRIS systems. Familiarity with API integrations to automate tasks between IT platforms (e.g., Jira, Slack, Jamf, Intune). Experience in AI development and/or experience in using AI tools to improve development processes. Money Forward is at a major turning point, shifting "from Cloud to AI." We are currently driving "AX (AI Transformation)" the next step beyond DX with the goal of providing "Digital Workers," where AI agents autonomously execute tasks. As we enter a phase of evolving into Japan's No. 1 back-office AI company by integrating AI agents into all of our products in the future, we are looking for individuals who can contribute to AI-driven development and value creation. Language Requirements English: Business level (equivalent to TOEIC score of 700 or above) Japanese: Basic level Technology Stack Intune Jamf Pro Anything else can be learned from fellow team members. Tools Used Intune Jamf Pro Github Work Environment At Money Forward, we provide an environment where we can create world-class services together, and we are looking forward to welcoming you. Provided PC Specs: We provide PCs equipped with the latest CPUs (MacOS or Windows). Custom-made PCs tailored to business requirements and replacements with the latest OS are also possible. Systems to Enhance the Development Environment: Peripheral devices necessary for work (such as displays, mice, keyboards) can be purchased as office supplies. Generally, you can choose from standard products (catalog), and if conditions are met, you can apply for non-standard products as well. (*Excluding certain group companies) Money Forward Library: We have a library system where you can freely borrow books, ranging from technical books to management books. Desired books can be purchased at the company's expense. Referral Driven: We cover the cost of recruitment meals. There is a referral reward system. Conference Participation Support: The company partially covers participation in domestic and international conferences, such as RubyKaigi and Google I/O.