Senior IT Engineer - Endpoint Engineering

About Nu

Nu is the leading digital bank in Latin America, serving 135 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services.

Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns.

Nu’s impact has been recognized in multiple awards, including Time 100 Most Influential Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Banks.

Visit our Institutional Page

About the role

We are looking for a Senior IT Engineer to own the device management and inventory operations in Mexico — someone who knows our systems deeply, builds and improves them, and helps scale them globally. This is a hands-on engineering role: you will develop features, build automations, and act as the DevOps backbone for our MDM and inventory platforms.

Because you'll be based in Mexico City and will know these systems better than anyone on the ground, you'll also be the natural technical reference when regulatory conversations arise.

You'll be responsible for

Platform Engineering & Development

• Own EE platforms in Mexico: Lead the development, maintenance, and continuous improvement of Endpoint Engineering platforms that power the device lifecycle in MX (e.g., Jamf Pro, Apple Business Manager/ADE, SnipeIT/Jira Assets, Assets inventory ecosystem, Zero Touch tooling, internal APIs).
• Build features & integrations: Design and implement features, APIs, and data flows that connect MDM, inventory, Jira Service Management, NuEx App, vendor systems, and other internal platforms.
• Automation & self-service: Create automations and self-service experiences that eliminate manual work, reduce ticket load, and increase reliability for onboarding, replacements, and everyday device workflows.
• DevOps ownership: Act as the DevOps owner for these platforms in MX: manage infrastructure-as-code (Terraform/Ansible/Puppet or similar), CI/CD pipelines, configuration management, observability, and incident hooks.
• Metrics & outcomes: Define and track key platform and experience metrics (e.g., ZTD success rate, Time-to-Productivity, ticket deflection, inventory correctness, audit readiness) and iterate based on data.

Operational Ownership

• Day-to-day operations in MX: Be the technical owner of the daily health, performance, and SLOs of Endpoint Engineering platforms and device fleets in Mexico.
• Incidents & on-call: Lead incident response within the MX scope for EE platforms, coordinate with the global on-call rotation, and drive high-quality post-mortems and follow-ups.
• Lifecycle runbooks: Maintain and continuously improve runbooks and documentation for key device lifecycle journeys: onboarding, day-to-day support, replacements, offboarding, and panic/lost-stolen flows.
• Cross-team execution: Partner closely with TechCenter, Global Security Operations, Global Services Platforms, REWS, Finance, and HR to ensure asset lifecycle processes are executed consistently and safely.
• Operational excellence: Proactively analyze observability signals (logs, metrics, alerts) to identify risks, bottlenecks, and opportunities for automation before they become incidents.

Global Scale & Cross-functional Collaboration

• Partner across NuEx and BAs: Collaborate with global Endpoint Engineering, NuEx, BA product/ops, Security, and infra/office tech teams on initiatives like NuEx App, Jira governance, Atlas, and security foundations.
• Scale MX learnings: Turn lessons learned in Mexico into reusable patterns—playbooks, automations, data models, and dashboards—that can be adopted by Brazil, Colombia, and other regions.
• Hiring & bar-raising: Participate in hiring loops (interviews, exercises, leveling feedback) for Endpoint Engineering roles, helping maintain and raise the engineering bar at Nubank.
• Mentorship: Mentor and pair with IC3/IC4 engineers (and contractors where appropriate), reviewing designs and pull requests, and fostering a strong engineering culture in Endpoint Engineering.

Regulatory & Compliance Support

• As the deepest technical expert on the ground, serve as the reference point when regulatory bodies require explanations of our systems and processes.
• Ensure platform documentation and configurations are audit-ready as a byproduct of good engineering hygiene.

We are looking for a person who has Must-have

• Education: Degree in Computer Science, Engineering, Information Systems, or equivalent practical experience.
• Operating systems: Strong hands-on experience administering and troubleshooting macOS, Windows, and Linux in production environments.
• Programming & scripting: Proficiency in at least one modern programming language (e.g., Python, Clojure, Go, Java) and in scripting (e.g., Shell Script); comfortable building services, tools, and automations.
• Cloud & backend: Experience designing and operating cloud-based services on AWS (e.g., Lambda, RDS, CloudWatch, Workspaces or similar) or another major cloud provider.
• DevOps & IaC: Strong DevOps fundamentals—Git and CI/CD, containers (Docker), configuration management and infrastructure-as-code (Terraform, Ansible, Puppet or similar), and solid observability practices.
• Databases: Experience with relational databases (PostgreSQL, MariaDB, MySQL/SQL Server or similar) as part of building or integrating services.
• Language & location: Native or near-native Spanish, fluent English; legally authorized to work and resident in Mexico City, with willingness to work on-site multiple days per week.
• Device Management
• MDM expertise: Production experience with Apple-focused MDM solutions (Jamf Pro, Apple Business Manager/ADE) and Zero Touch Deployment flows at scale.
• Policy & compliance: Ability to design, implement, and maintain endpoint security and compliance policies via MDM and related tooling (e.g., certificates, identity agents, Zscaler or similar).
• Troubleshooting: Proven track record of debugging complex device setup and connectivity issues (authentication, VPN, certificates, agents, network restrictions) across macOS, Windows, and mobile.

Inventory & Asset Management

• Inventory platforms: Hands-on experience with IT inventory/asset management and CMDB platforms (e.g., SnipeIT, Jira Assets, ServiceNow, Device42 or similar).
• Lifecycle modeling: Ability to model and operate end-to-end device lifecycle workflows (procurement, onboarding, day-to-day, replacements, leasing, returns, offboarding, panic/lost-stolen) in tools like Jira Service Management and internal services.
• Integrations & data quality: Experience integrating inventory data with HR, vendors, finance, and internal platforms, and driving data quality and governance to keep inventory audit-ready.

AI Native

• AI fluency: Ease in using AI tools as part of day-to-day work—exploring logs and metrics, prototyping automations, generating or refining runbooks and documentation, and improving support experiences.
• Experimentation mindset: Willingness to experiment with AI/ML-powered approaches to observability, incident response, and operational automation, while keeping security and compliance requirements in mind.

Nice to Have

• Regulated environments: Experience working in financial services, fintech, or other regulated industries, including exposure to audits or regulatory reviews.
• Endpoint Eng stack: Familiarity with Clojure microservices, Zscaler or similar secure access solutions, and Zero Trust-style endpoint/identity architectures.
• Certifications: Relevant certifications such as Linux (RHCE/LPIC), AWS, Jamf Pro, or security-related certifications.
• Product & UX mindset: Experience partnering with product, UX, and operations to run discoveries, talk to internal users, and instrument user experience metrics (e.g., CSAT, Time-to-Productivity, ticket deflection).

Location for this opportunity

• Mexico City, Mexico

Our Benefits

• Chance of earning equity at Nu
• Extended maternity and paternity leaves
• Health and life insurance
• Dental and Vision Insurance
• NuCare - Our mental health and wellness assistance program
• Nucleo - Our learning platform of courses
• NuLanguage - Our language learning program
• Holiday Bonus ("Aguinaldo") of 30 days of pay per year
• 17 days of paid vacation with 25% vacation bonus
• Gym partnership
• Food card
• Work-from-home Allowance
• Parental Consultancy
• Relocation Assistance Package, if applicable

Work Model for this Role

• Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/

Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.