设备管理专员，全球IT部门，东京

About Us At Money Forward, we are dedicated to transforming financial services using advanced technology. With over 50 services for individuals and businesses, including popular products like Money Forward ME and Money Forward Cloud, we help make managing money easier. We use cutting-edge “account aggregation” technology to gather user data, turning it into useful insights for our customers. As announced in "Money Forward AI Vision 2026(https://www.linkedin.com/pulse/full-transcript-money-forward-announced-ai-strategy-vision-phwoc/?trackingId=sl33ZIGRFzkBJJv7wI9qsg%3D%3D)," we view AI utilization not as an option, but as a prerequisite for sustainable enterprise growth. Guided by executive leadership, we are accelerating an all-in AI shift across the entire company. Rather than treating AI merely as an efficiency tool for existing tasks, we fundamentally ask, "How should this process exist in the first place?" to reconstruct products and workflows optimized for the AI era. Powered by a rich, active user base and vast datasets, we strictly practice AI-driven development engineered backward from maximum user value. Internally, we actively integrate generative AI tools into our development environments, driving radical productivity gains and rapid product iterations. We are looking for motivated engineers who want to embrace new technologies without fear of failure in this period of global trial and error—and who are truly passionate about building high-impact AI services grounded in massive real-world data. Overview We are looking for a dedicated Device Management Specialist to own the security, and user experience of our global fleet of hardware. In this role, you will be the primary architect and administrator for our endpoint management platforms specifically Jamf Pro for our MacBooks, and Microsoft Intune for our Windows and IOS devices. You will build zero-touch deployment workflows, automate application patching, enforce security baselines, and ensure our end-users have a seamless, secure experience from day one. Our team currently includes nationals from Japan, the Netherlands, and Italy. You will be joining a vibrant, multicultural group responsible for managing devices across Japan, Vietnam, and India. Responsibilities and Duties Endpoint Architecture & Administration: Design, configure, and maintain our MDM environments using Jamf Pro (macOS) and Microsoft Intune (Windows 10/11 and IOS). Zero-Touch Deployment: Manage and optimize automated device provisioning pipelines utilizing Apple Business Manager (ABM/DEP) and Windows Autopilot. Application Lifecycle Management: Package, test, and deploy applications, updates, and OS patches to all endpoints via Jamf Self Service and Intune Company Portal without disrupting end-user productivity. Security & Compliance: Enforce CIS/NIST security baselines. Manage full-disk encryption (FileVault and BitLocker), conditional access policies, and remote wipe capabilities for lost or compromised devices. Scripting & Automation: Write and maintain custom scripts (Bash, Zsh, PowerShell) to automate complex configurations, remediate issues, and gather custom extension attributes. Tier 3 Support & Escalation: Act as the final point of escalation for complex endpoint issues that the IT Helpdesk cannot resolve. Asset Reporting: Work with our asset manager to update asset records via API scripting (already functioning). Required Skills and Experience Experience: 3+ years of dedicated experience in IT Engineering, Systems Administration, or Endpoint Management. Apple Ecosystem (Jamf Pro): Proven experience managing macOS and iOS devices at scale. Familiarity with configuration profiles, custom policies, and Apple Business Manager. (flexible on this as long as you are willing to expand) Windows Ecosystem (Intune): Strong knowledge of Microsoft Intune, Windows Autopilot, Azure AD (Entra ID), and Windows 11 management. (strong requirement) Scripting Skills: Proficiency in writing operational scripts in PowerShell (for Windows) and Bash/Zsh (for macOS). Flexible in the age of AI. Security Mindset: Understanding of endpoint security principles, identity management, and how to balance strict security policies with end-user friction. Communication: Ability to write clear, concise documentation for both IT team members and non-technical end-users. Preferred Skills and Experience Certifications: Jamf Certified Admin (Jamf 300) or higher, Microsoft Certified: Endpoint Administrator Associate. Experience integrating MDM platforms with identity providers (Okta, Google Workspace, Azure AD) and HRIS systems. Familiarity with API integrations to automate tasks between IT platforms (e.g., Jira, Slack, Jamf, Intune). Experience in AI development and/or experience in using AI tools to improve development processes. Money Forward is at a major turning point, shifting "from Cloud to AI." We are currently driving "AX (AI Transformation)" the next step beyond DX with the goal of providing "Digital Workers," where AI agents autonomously execute tasks. As we enter a phase of evolving into Japan's No. 1 back-office AI company by integrating AI agents into all of our products in the future, we are looking for individuals who can contribute to AI-driven development and value creation.(More information here(https://www.linkedin.com/pulse/full-transcript-money-forward-announced-ai-strategy-vision-phwoc/?trackingId=sl33ZIGRFzkBJJv7wI9qsg%3D%3D)) Language Requirements English: Business level (equivalent to TOEIC score of 700 or above) Japanesec: Basic level Technology Stack Intune Jamf Pro Anything else can be learned from fellow team members. Tools Used Intune Jamf Pro Github Work Environment At Money Forward, we provide an environment where we can create world-class services together, and we are looking forward to welcoming you. Provided PC Specs: We provide PCs equipped with the latest CPUs (MacOS or Windows). Custom-made PCs tailored to business requirements and replacements with the latest OS are also possible. Systems to Enhance the Development Environment: Peripheral devices necessary for work (such as displays, mice, keyboards) can be purchased as office supplies. Generally, you can choose from standard products (catalog), and if conditions are met, you can apply for non-standard products as well. (*Excluding certain group companies) Money Forward Library: We have a library system where you can freely borrow books, ranging from technical books to management books. Desired books can be purchased at the company's expense. Referral Driven: We cover the cost of recruitment meals. There is a referral reward system. Conference Participation Support: The company partially covers participation in domestic and international conferences, such as RubyKaigi and Google I/O. 【職種 / 募集ポジション】 Device Management Specialist, Global IT Division, Tokyo 【雇用形態】 正社員 【給与】 年収 5,808,000円 〜 11,004,000円 Monthly salary system ※Includes fixed allowances for up to 45 hours of legal overtime, legal holiday work, and 40 hours of late-night work. 【勤務地】 108-0023 21F Tamachi Station Tower S, msb Tamachi, 3-1-21 Shibaura, Minato-ku, Tokyo 【Salary System】 Min 484,000 JPY / month（5,808,000 JPY / year）〜917,000 JPY / month（11,004,000 JPY / year） Each including fixed allowances of 140,914 JPY〜266,988 JPY / month. 【Bonus】 A「High Performance Bonus」may be paid to employees who receive high evaluations based on semi-annual evaluations in addition to their salary. ※Please note that the remuneration of the High Performance Bonus is subject to change according to the company's performance. 【Probation Period】 3 months from join date 【Working Hour System】 Discretionary Labor System for Professional Work ※Conditions apply; subject to change to Flextime System. 【Working Hours】 9:30 - 18:30 (60 min break) are the basic working hours. However, employees are able to choose their working hours at their own discretion. ※There is potential for overtime work outside the determined hours. 【Work Style