Client Platform Engineering Senior Manager

This is an engineering heavy role (think platforms and automation, not “help desk”), working closely with Security, Networking, Infra, and Support. 

What You’ll Do

Strategy & Ownership 

• Define the longterm client platform strategy across macOS, Windows, Linux, and VDI. 

• Own endpoint lifecycle: image/config design, provisioning, patching, compliance, and decommissioning. 

• Drive standardization of base images, configurations, and policies while keeping things userfriendly and delightful. 

• Support the move toward modern, cloudfirst management and zerotrust, directtoapp access, advocating AI-first behavior into team and org-wide fabric.   

Team Leadership 

• Lead, mentor, and grow a Client Platform Engineering team (engineers / admins / tech leads). 

• Set goals, priorities, and operating rhythms (backlog, sprints, oncall, incident reviews). 

• Build a culture of automation-first, reliability, and security with strong partnership across IT and Security. 

Engineering & Operations 

• Own and optimize endpoint management platforms (e.g., Intune/Endpoint Manager, Jamf, or similar). 

• Implement automated, zero or lowtouch provisioning for laptops and VDI. 

• Build and maintain configuration as code for device policies, profiles, and baselines. 

• Design and run patching and software update strategies to hit aggressive compliance targets. 

• Partner with Security to deploy and operationalize: 

• EDR / AV / DLP 

• Disk encryption 

• Device compliance and posture checks 

• Local admin and privilege controls 

• Work with Network / Security to implement secure, direct-to-app access patterns (e.g., ZTNA, device posture, appbased access instead of fulltunnel VPN). 

• Own the deployment and lifecycle of core client apps (productivity suites, collaboration tools, browsers, agents). 

Governance, Risk & Compliance 

• Maintain hardened, auditable baselines for endpoints and VDI images. 

• Ensure platforms align with internal security policies and relevant frameworks. 

• Provide technical input for audits, risk assessments, and incident response involving endpoints. 

• Maintain highquality documentation (runbooks, standards, diagrams, FAQs, selfservice guides). 

Stakeholder & Vendor Management 

• Act as the primary owner for all things client platform for security, infra, support, and business stakeholders. 

• Translate business needs into platform capabilities and phased roadmaps. 

• Communicate changes and impact clearly to both technical and nontechnical audiences. 

• Manage vendors and tooling, including evaluations, renewals, and escalations. 

Your Skills & Abilities (Required Qualifications) 

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or equivalent experience. 

• <TBD>8+ years in endpoint / client engineering, enduser computing, or related infrastructure roles. 

• <TBD>4+ years leading engineers or acting as a technical lead with ownership of a platform or service. 

• Handson experience managing macOS, Windows, Linux, and VDI in an enterprise environment. 

• Deep expertise with multiple modern endpoint management platforms (e.g., Intune/Endpoint Manager, Jamf, SCCM/ConfigMgr, Workspace ONE, etc.). 

• Strong background in: 

• OS imaging / provisioning and device enrollment 

• Patch management and update strategies 

• Scripting & automation (PowerShell, Bash, Python, or similar) 

• Endpoint security (EDR, DLP, disk encryption, compliance policies) 

• Identity & access integration on endpoints (Azure AD/Entra ID, SSO, conditional access) 

• Proven ability to design and operate at scale (thousands of devices, multiple OSes, multiple regions). 

• Excellent communication skills and comfort working with security, infra, and business partners. 

What Will Give You A Competitive Edge (Preferred Qualifications) 

• Experience running global or multiregion client platforms. 

• Track record implementing zerotrust / device posture / directtoapp access patterns. 

• Experience with VDI/DaaS platforms (Citrix, VMware Horizon, AVD, etc.). 

• Familiarity with configuration-as-code / infrastructure-as-code workflows (Git, CI/CD for config). 

• Experience managing budgets, licensing, and vendor relationships for endpoint tools. 

What Success Looks Like 

• New hires get a fully configured device and access to their apps with minimal manual effort. 

• High patch and compliance rates across macOS, Windows, Linux, and VDI with minimal disruption. 

• Fewer endpoint incidents and escalations, more selfservice and automation. 

• Strong partnership with Security and Infra on zerotrust and modern management. 

• A high-performing, engaged team that ships improvements regularly and reliably. 

• Ongoing delight / experience metric: a lightweight recurring signal that employees can get work done without friction (devices stay fast/stable, apps open reliably, access is seamless, and help is easy when needed). Basically an “It Just Works” pulse.