About this role.
Jamf is seeking a Software Engineer II to build secure production systems for autonomous and agentic AI workflows. The engineer will develop deterministic controls, audit trails, evaluation tooling, and observability for AI agents that make changes to real code. The role requires at least three years of commercial Java or Python experience, practical LLM API and agentic-framework experience, and a security-first approach to least privilege and vulnerability management. This is a collaborative greenfield role within a mature platform, working closely with security engineering and product development teams. The position is remote for candidates based in Poland or eligible to work there.
Role DNA
A quick view of the complexity, pace, ownership and collaboration implied by the job description.
Job Complexity
4/5Pace & Pressure
4/5Autonomy Level
4/5Communication Load
4/5Salary analysis
Estimated compensation compared with the broader US market for similar roles.
Core skills
Skills and capabilities most closely associated with this opportunity.
Sample interview questions
I would constrain the agent with narrowly scoped permissions, approved tools, protected branches, and deterministic policy gates. Every change would require structured plans, automated tests, security scanning, independent verification, and an immutable audit record; higher-risk changes would require human approval.
I would measure task success rate, test pass rate, policy-violation rate, rollback rate, time to verified change, reviewer acceptance rate, and the frequency of unsafe or unsupported tool calls. I would also monitor these metrics by repository, task type, model version, and prompt or policy version to detect regressions.
Trust boundaries define what the agent may access and which actions it may take, while blast radius defines the potential impact if it fails or is misused. I minimize both through least-privilege credentials, isolated execution, scoped repositories and environments, rate limits, reversible actions, and escalation paths for sensitive operations.
I would first use versioned telemetry to compare recent performance against a stable baseline, examining model, prompt, tool, retrieval, and dependency changes. I would replay representative evaluations, segment failures by task category, identify the causal change, and either roll back or deploy a targeted mitigation with additional monitoring.
I would retain a tamper-evident record of the triggering request, agent identity, authorization scope, model and policy versions, tool calls, generated diff, test and scan results, approvals, deployment event, and verification evidence. The evidence should be searchable, linked to the relevant control, and sufficient to demonstrate not only that a change occurred but that required safeguards worked.
At Jamf, we believe in an open, flexible culture based on respect and trust. Our track record and thriving work environment all stem from the freedom we grant ourselves to get the job done right. We take pride in helping tens of thousands of customers around the globe succeed with Apple.
The secret to our success lies in our connectivity, while operating with a high degree of flexibility. Work-life balance remains our priority while feeling connected is important to maintain our strong culture, achieve our goals, and thrive as #OneJamf.
This role is offered as a remote in Poland. We are only able to accept applications for those based in Poland or who have sponsorship to live and work in Poland.
You may be required to work periodically at a Jamf office or collaborative work location with other Jamf employees in your area for certain events or moments that matter.
What you’ll do at Jamf:
At Jamf, we empower people to be their best selves and do their best work. As a Software Engineer II on a new team enabling secure, governed adoption of autonomous and agentic workflows, you’ll help build production systems where AI agents do real work on real code – authoring changes inside deterministic gates, with independent verification and a full audit trail. This is a greenfield build inside a mature platform, starting with Security.
What you can expect to do in this role:
- Build the production systems where AI agents do real work on real code – authoring changes that run inside deterministic gates, with independent verification and a full audit trail behind every one.
- Take customer and platform problems, break them into workable pieces with your agile team, and own most of them end to end.
- Draw the line on autonomy: design the trust boundaries, blast radius, and least-privilege model for the automation itself, which holds elevated access to production.
- Build the evaluation and observability that keeps non-deterministic systems honest – measuring accuracy and catching silent degradation before anyone else does.
- Make the systems answer the auditor’s “show me” – producing evidence that a control worked, not just the claim that it did.
- Work shoulder to shoulder with security engineering and PDD developers, and explain the tricky parts clearly to the rest of the organization.
- Bring engineering best practices to the table: ask the sharp questions, solve the hard problems, and help others level up.
#LI-Remote
What we are looking for:
Must-have:
- 3+ years building enterprise-grade software commercially, with a solid grasp of testing and QA.
- 3+ years of commercial experience in Java or Python.
- Hands-on experience building with LLM APIs and agentic frameworks – tool calling, multi-step execution, structured output – well beyond using AI coding assistants.
- Hands-on experience with AI-driven coding assistants (GitHub Copilot, Cursor, Claude Code) to speed up your own work.
- Sound judgment about where automation should and shouldn’t act on its own – and the ability to articulate exactly where that line sits.
- You think in trust boundaries, blast radius, and least privilege by default.
- You treat vulnerability management as a discipline: severity and exploitability, SLAs, and exception handling.
- Experience in an agile organization and with build systems like Jenkins or Bamboo.
- You build trust and rapport across all levels, and do your best work collaboratively in a fast-paced environment.
Nice-to-have:
- Software supply chain security – SBOMs, provenance and attestation, image signing and verification, policy-as-code.
- Experience running AI coding agents at repository scale, and building the harness that makes their output trustworthy.
- Familiarity with AI governance in a security context – model-use policy, data handling, and the audit questions that follow an agent-initiated production change.
- Experience in a regulated environment (SOC 2, FedRAMP, or similar) and a feel for what auditors actually ask for.
Why Jamf?
- We are progressive but laid back. You are free to be yourself and work how you work best. Here, you manage your own day and your own work style.
- You will have the opportunity to work with a small and empowered team where the culture is based on trust, ownership, and respect.
- We encourage you to simply be you. We constantly seek and value different perspectives to ensure Jamf is a place where everyone feels comfortable and can be successful.
- Benefits are a critical part of the “whole employee experience”. Our benefits package includes 30 days of paid time off, 3 paid days to volunteer, Multisport Card, Luxmed packages and more.
- Visit our Jamf Engineering blog to learn more about the innovative projects our team is working on and what we learn from each challenge we solve. A blog written by engineers, for engineers at medium.com/jamf-engineering
What it means to be a Jamf?
We are a team of free-thinkers, can-doers, and problem-crushers. We value humility and the relentless pursuit of knowledge. Our culture flows from a spirit of selflessness and relentless self-improvement – driving both personal growth and collective progress throughout our company. We unite around common goals while respecting personal approaches, believing that fulfilled individuals create a thriving, vibrant workplace.
Our aim is simple: hire exceptionally good people who are incredibly good at what they do and let them do it. We provide the support and resources to let everyone be their authentic, best selves at work, at rest, and at play. We are committed to supporting the continual improvement of Apple in the workplace, the organizations that rely on them and the people who keep it all running smoothly.
Above it all, waves our banner of #OneJamf – and the knowledge that when we stand together, we accomplish so much more than we could alone. We seek individuals who share this unwavering journey toward growth to join us in our quest for constant improvement.
What does Jamf do?
Jamf extends the legendary Apple experience people enjoy in their personal lives to the workplace. We believe the experience of using a device at work or school should feel the same, and be as secure as, using a personal device. With Jamf, customers are able to confidently automate Mac, iPad, iPhone and Apple TV deployment, management, and security – anytime, anywhere – to protect the data and applications used by employees in the workplace, students learning in the classroom, and streamline communications in healthcare between patients and providers. More than 2,500 Jamf strong worldwide, we are free-thinkers, can-doers, and problems crushers who are encouraged to bring their whole selves to work each and every day.
Get social with us and follow the conversation at #OneJamf
Jamf is committed to creating an inclusive & supportive work environment for all candidates and employees. Candidates with disabilities or religious beliefs are encouraged to reach out if they need additional support or alternative options to our recruiting processes to accommodate their disability or religious belief. If you need an accommodation, please contact your Recruiter or Recruiting Coordinator directly. Requests for accommodation will be handled confidentially by Recruiting and will not be shared with the hiring manager. Jamf is an equal opportunity employer and does not discriminate against individuals who request reasonable accommodation for disability or religious beliefs. To request accommodations please email us at recruiting@jamf.com
Annual salary information is not provided for this position. Explore salary ranges for similar roles in our Salary Directory ›
Upload your resume now
- To unlock remote work opportunities and be discovered by global employers.
This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.
