Senior Platform Engineer - Microsoft

Description

The role is open only to candidates in the Seattle, WA area, in the US.

You will split your time between remote work and an office that is casual and pet-friendly, attending in person at least 3 days a week (Tuesday, Wednesday, and Thursday).

You will be the go-to technical expert and owner of the solution for the Microsoft 365 E5 suite and the endpoint management stack, covering the design, build, tuning, administration, and operational maturity of Microsoft 365 Apps (including Exchange, Teams, Defender, Purview, and Insights), Intune, SCCM, the application catalog, endpoint compliance, and cloud patching.

You will both build things yourself and shape strategy. The work aims to modernize endpoint management, make app delivery better, tighten patch compliance, get more value from E5 features, and improve the experience for users across the organization.

You will work with Infrastructure, Service Desk, Security, Compliance, and business teams to deliver secure, scalable, efficient Microsoft platform services. The company is a medical insurance provider for cats and dogs in North America.

Responsibilities

• Act as the technical expert and principal engineer for Microsoft 365 E5, focusing on core productivity and collaboration tools.
• Build, configure, govern, and support Office apps such as Outlook, Teams, Word, Excel, PowerPoint, OneDrive, and SharePoint, along with related Microsoft 365 services.
• Review current E5 capabilities and find ways to improve adoption, security, automation, compliance, and cost.
• Work with business stakeholders to understand their productivity needs and turn them into secure, scalable Microsoft solutions.
• Set standards, best practices, and governance for how Microsoft 365 is configured and used.
• Teach teams about available tools and features so they can get more out of Microsoft 365.
• Build, administer, and tune Microsoft Intune and Configuration Manager (SCCM) environments.
• Lead the move from SCCM-heavy management toward cloud-first or co-managed endpoints.
• Design and maintain device compliance policies, configuration profiles, security baselines, endpoint restrictions, and conditional access integrations.
• Create and run Windows enrollment, provisioning, Autopilot, and device lifecycle processes.
• Set endpoint standards for corporate devices, virtual desktops, remote users, and shared workstations.
• Make sure endpoint practices meet security, compliance, audit, and support requirements.
• Handle Tier 3 engineering escalations for endpoint management.
• Own the enterprise application catalog for Microsoft-managed endpoints.
• Package, test, deploy, and maintain business apps through Intune, SCCM, Company Portal, and other approved channels.
• Write deployment standards covering detection rules, dependencies, rollback, and user communication.
• Work with Service Desk and Application Support to keep catalog apps current, accurate, supportable, and easy to find.
• Set up a repeatable process for intake, testing, approval, and publishing of new apps.
• Track deployment success, failures, remediation, and user adoption.
• Find ways to cut manual installs, expand self-service, and simplify app lifecycle management.
• Design and roll out modern patching using Intune, Windows Update for Business, Autopatch, SCCM, and related Microsoft tools.
• Own patch compliance reporting, exceptions, deployment rings, maintenance windows, and remediation workflows.
• Work with Security and Infrastructure to fix vulnerabilities on Windows and Microsoft-managed devices in a timely way.
• Build patching dashboards, compliance metrics, and executive-ready endpoint health reports.
• Plan controlled rollouts for OS, feature, driver, firmware, and where applicable third-party app updates.
• Keep improving patch success rates, reduce endpoint risk, and limit disruption to users.
• Design practical, scalable Microsoft solutions for business and IT teams.
• Lead discovery, requirements, design, build, testing, rollout, and handoff for Microsoft platform projects.
• Review current tools, processes, and configurations to find gaps, risks, waste, and chances to standardize.
• Create technical roadmaps for endpoint modernization, app lifecycle automation, and user productivity.
• Build proofs of concept and pilots for new Microsoft features before wider rollout.
• Work with Security, Compliance, and IT leadership so platform work fits enterprise risk and governance.
• Reduce costs by improving license use, removing duplicate tools, and getting full value from E5.
• Write and maintain technical documentation, runbooks, support guides, architecture diagrams, SOPs, and knowledge base articles.
• Define clear handoffs between Engineering, Service Desk, Security, and Application Support.
• Set governance for Microsoft 365 config changes, endpoint policy updates, catalog publishing, and patch deployment.
• Take part in change advisory board (CAB) reviews for production-impacting platform changes.
• Set success metrics and report regularly on platform health, adoption, compliance, and performance.
• Coach Service Desk and junior engineers on Microsoft platform support.
• Improve continuously using measured results, operational data, and user feedback.

Requirements

• At least 7 years in IT infrastructure, endpoint engineering, or Microsoft platform work.
• At least 5 years of Microsoft 365 administration.
• At least 5 years of SCCM / Microsoft Configuration Manager experience.
• At least 3 years of Microsoft Intune experience.
• At least 3 years of experience developing software, tools, or automation.
• Strong experience with Windows endpoint management, Office apps, app packaging, and patching.
• Strong PowerShell scripting and automation skills.
• Experience with Windows Autopilot, Company Portal, update rings, compliance policies, and app deployment.
• Strong troubleshooting, documentation, and communication skills with stakeholders.
• Deep hands-on experience with Microsoft 365 E5 services, including Office desktop apps, Teams, Outlook, OneDrive, SharePoint, Exchange Online, Copilot, Defender, Purview, Insights, and Microsoft 365 Apps for Enterprise.
• Familiarity with the Microsoft 365 Admin Center, Endpoint Manager Admin Center, Entra ID, and similar admin portals.
• Ability to set up, support, and troubleshoot Microsoft productivity tools at enterprise scale.
• Understanding of Microsoft licensing, especially differences between E5 capabilities and where they can be used better.
• Advanced skill with Microsoft Intune and Configuration Manager.
• Solid grasp of co-management, cloud attach, device collections, deployment rings, compliance policies, and configuration profiles.
• Experience with Windows Autopilot, enrollment, device provisioning, and endpoint lifecycle management.
• Experience managing Windows 11 enterprise endpoints.
• Ability to diagnose policy application, compliance, enrollment, deployment, and configuration drift problems.
• Experience packaging and deploying apps with Intune and SCCM, including MSI, EXE, and Win32 packages.
• Knowledge of PowerShell deployments, detection rules, dependencies, supersedence, and uninstall logic.
• Experience running self-service app catalogs through Company Portal or similar portals.
• Ability to standardize software deployment and make app delivery more reliable.
• Experience with app testing, rollback planning, and production deployment governance.
• Strong knowledge of Windows Update for Business, Intune update rings, feature update policies, quality updates, and driver management.
• Experience with SCCM software updates, ADRs, patch collections, maintenance windows, and compliance reporting.
• Understanding of vulnerability remediation and endpoint security hygiene.
• Ability to work with Security to rank patches by risk, severity, exploitability, and business impact.
• Experience building patch compliance reports and operational dashboards.
• Strong PowerShell skills for automation, reporting, troubleshooting, and endpoint remediation.
• Ability to automate repetitive endpoint and Microsoft 365 admin tasks.
• Familiarity with remediation scripts, proactive remediations, detection scripts, and configuration validation.
• Strong analytical and troubleshooting skills.
• Ability to work independently as a senior technical owner.
• Ability to explain technical topics to both technical and non-technical people.
• A customer-service mindset with a focus on user experience.
• Ability to balance security, usability, compliance, and operational efficiency.
• Experience in ITIL-based environments, including incident, problem, change, and request management.
• Ability to mentor junior staff and influence peers without direct authority.
• Preferred: Microsoft 365 Certified: Endpoint Administrator Associate.
• Preferred: Experience with Microsoft Graph PowerShell or Graph API.
• Preferred: Understanding of JSON, CSV, REST APIs, and automation workflows.
• Preferred: Experience with Entra ID, Defender for Endpoint, Conditional Access, Autopatch, and Microsoft Graph.
• Preferred: Experience with Power BI or other reporting tools.
• Preferred: Experience in ITIL, SOX, audit, or regulated environments.

Conditions

Location: Seattle, WA area only, US.

Hybrid schedule: at least 3 days a week in the office on Tuesday, Wednesday, and Thursday.

Full-time position.

Base salary range: $145,000 to $155,000.

Eligible for monthly bonuses in addition to base pay.

New hires receive Restricted Stock Units that vest over 4 years.

You must be authorized to work for any US employer. The company cannot sponsor or take over an employment visa at this time.

The company is an equal-opportunity employer and welcomes a range of backgrounds, abilities, perspectives, and skills.

Benefits

• Medical, dental, and vision coverage at no cost to you.
• Four weeks of paid time off plus 9 paid float holidays, which you choose.
• A five-week paid sabbatical after five years of employment.
• Free pet health insurance for one dog or cat.
• Paid time off to volunteer with nonprofit organizations.
• Seattle office perks: free on-site gym, free dog walking for office pets during business hours, free parking, and paid ORCA transit cards.