Client Platform Engineer

Role Summary

The Client Platform Engineer is responsible for the engineering, standardization, and support of the global Windows and macOS endpoint environment across on-premises and cloud (IaaS, PaaS, SaaS) platforms. This role will work closely with Senior Engineers, other infrastructure and Information Security, and business stakeholders to design, implement, and optimize the workstation experience, focusing on reliability, performance, security, and usability. The Client Platform Engineer will help drive cloud-first initiatives, modern endpoint management, and automation in a fast-paced, rapidly growing environment supporting a global user base.

Responsibilities

• Assist in the architecture, design, integration, implementation, operation, and support of enterprise-wide applications and services both on prem and cloud for our Windows and MAC end-user fleet.
• Assist in developing and maintaining standard workstation images, configurations, and baselines for different user groups and device models.
• Support long-term endpoint platform strategies and capacity planning to meet evolving business and end-user needs.
• Assist in the design and perform workstation benchmarks to measure workstation performance between models and overtime.
• Engineer, configure, and support endpoint management platforms such as Microsoft Intune, Windows Autopilot, JAMF Pro, Apple Business Manager, and related configuration management tooling.
• Assist in the development and maintaining scripts, policies, and configuration profiles (e.g., PowerShell, Intune configuration, JAMF policies) to automate application deployment, OS configuration, and settings management.
• Support and optimize patch management and software update processes, including planning and execution of major OS and application upgrades.
• Serve as an escalation point for complex workstation and endpoint management issues from Service Desk, Technical Specialists and other support teams.
• Apply and enforce desktop standards, configuration policies, and security baselines, implementing improvements to enhance stability, performance, and security.
• Diagnose and investigate unique and complex systemic problems affecting end-user devices, drive root cause analysis, and permanent remediation.
• Partnering with the Senior Engineers and Architects to align endpoint solutions with enterprise standards, roadmaps, and security requirements.
• Support the efforts in ensuring endpoint solutions adhere to security policies, regulatory requirements, and best practices (e.g., hardening, encryption, identity and access management).
• Create, maintain, and improve technical documentation, runbooks, and knowledge base articles for both IT staff and end-users.
• Understand and apply standards and procedures and propose ways to improve the physical and virtual desktop environment.
• Participate in large projects requiring analysis and design skills.
• Diagnose and investigate unique and complex systemic problems.

Qualifications

• Required: Associate degree in Computer Science, Information Technology, or related field; or equivalent experience, training and/or certifications.
• Required: A minimum of 6 years of experience in Information Technology, Engineering, or related field.
• Required: At least 3 years of experience in IT operations, administration, or engineering.
• Required: 2+ years of hands-on experience in client platform engineering, endpoint management, or a closely related IT Engineering role.
• Required: Experience packaging, deploying, and supporting enterprise applications on Windows and/or macOS.
• Required: Experience supporting medium-to-large environments (e.g., 800+ endpoints).
• Required: Practical experience with endpoint management platforms such as Microsoft Intune (Endpoint Manager), Windows Autopilot, JAMF Pro and Apple Business Manager for macOS and iOS device management.
• Required: Strong understanding of Windows and macOS operating systems, including configuration, troubleshooting, and lifecycle management.
• Required: Experienced scripting and automation (e.g., PowerShell, shell scripting) to manage clients and automate repetitive tasks.
• Required: Proficient in IT tools and automation technologies
• Required: Excellent problem-solving and troubleshooting skills.
• Required: Ability to communicate effectively with technical and non-technical audiences.
• Required: Strong analytical, problem-solving, and decision-making skills, with the ability to balance competing priorities.
• Required: Self-motivated and proactive in identifying, tracking, and remediating stability and performance issues.
• Required: Exceptional communication skills and strong team collaboration abilities.
• Required: Demonstrated experience researching and resolving technical problems of moderate to high complexity.
• Required: Strong analytical, troubleshooting, and problem-solving skills, with a focus on root cause and prevention.
• Preferred: Bachelor's degree in computer science, Information Technology, or related technical field.
• Preferred: Advanced experience with: JAMF Pro, Microsoft Intune, Windows Autopilot, Entra ID or similar identity platforms.
• Preferred: Experience working in healthcare, life sciences, or other regulated environments.
• Preferred: Experience supporting a fast-paced environment with 1,700+ end-users or other large enterprise environments.
• Preferred: Familiarity with modern security frameworks and practices (e.g., Zero Trust, conditional access, endpoint detection and response tools).
• Preferred: Demonstrated curiosity to learn and apply new tools through automation.
• Preferred: Exceptional communication skills and strong team collaboration abilities.
• Preferred: Highly self-motivated with strong attention to detail and ability to manage multiple tasks, prioritize, and meet deadlines.
• Preferred: Strong knowledge of performance metrics such as SLAs and KPIs.

Education

• Associate degree in Computer Science, Information Technology, or related field (Required).
• Bachelor's degree in computer science, Information Technology, or related technical field (Preferred).

Additional Requirements

• Physical Demands: Must possess the ability to sit, stand, and/or work at a computer for long periods of time. Ability to lift 10 to 25 lbs. Ability to work underneath a desk if necessary.
• Other: Jobs may require after-hours response to emergency issues. Periodically scheduled on-call may require after-hours response for technical emergencies not explicitly related to assigned job responsibilities. Other duties as assigned.