Endpoint Automation Engineer Business Services IT; Shared Services

• Design and maintain automation frameworks for endpoint enrollment, provisioning, configuration, application delivery and retirement.
• Build reusable tools, services and workflows using Power Shell, APIs and other appropriate programming languages.
• Integrate endpoint platforms with identity, security, infrastructure, asset and service-management systems.
• Apply Git, CI/CD, automated testing and configuration-as-code practices to make endpoint changes controlled, repeatable and auditable.
• Identify manual, error-prone or fragmented processes and redesign them as resilient, self-service automation.
• Security, Compliance & Observability
  • Translate endpoint security and compliance requirements into policy-as-code, automated controls and measurable outcomes.
  • Automate operating-system and third-party application patching, vulnerability remediation and exception handling.
  • Build automated guardrails for encryption, endpoint protection, authentication and device compliance.
  • Create telemetry, dashboards and alerting that provide actionable visibility into automation performance, device health and risk.
  • Partner with Security teams to automate evidence collection, audit reporting and remediation workflows.
• Engineering, Lifecycle & Support
  • Define endpoint automation architecture, engineering standards and a roadmap that reduces operational effort and platform fragmentation.
  • Engineer automated application packaging, deployment, update and rollback pipelines.
  • Evaluate platform capabilities, APIs and emerging technologies for opportunities to simplify or extend endpoint automation.
  • Troubleshoot complex failures across automation, endpoints, identity, networking, security and device-management services.
  • Convert recurring incidents and support escalations into automated detection, remediation or prevention.
  • Document automation designs, operating models and support procedures, and enable teams to use them effectively.

• Minimum 5 years of experience building automation for endpoint operations in a modern enterprise environment.
• Hands-on expertise with Microsoft Intune, Entra , Windows Autopilot and endpoint compliance, with the ability to automate their administration through supported interfaces.
• Demonstrated ability to create production-quality automation using Power Shell, REST APIs, Microsoft Graph, or other programming languages.
• Experience automating application packaging, deployment, patching and vulnerability-remediation workflows.
• Practical knowledge of Git, CI/CD, testing, secrets management and controlled configuration deployment.
• Strong understanding of endpoint security, modern identity and the interaction between devices, cloud services and automation platforms.
• A bachelor’s degree in IT, Computer Science or equivalent practical experience.
• Additional experience that would be valuable:
  • Automating macOS and Jamf, Linux endpoint management, or mobile device-management platforms.
  • Azure or other cloud services for hosting functions, workflows, integrations and automation data.
  • Infrastructure or configuration as code, automated testing and release pipelines.
  • Vulnerability-management, endpoint-security or observability platforms with accessible APIs.
  • SSO, OAuth, SQL and data-analysis technologies used in system integrations and reporting.

A competitive compensation package, of course.

Time and resources to grow and develop, including a personal development budget and paid leave for learning days, as well as paid access to e-learning resources such as O’Reilly and Linked In Learning.

Time to support life outside of work, with enhanced parental leave plus paid leave to care for loved ones and volunteer in local communities.

Work flexibility, where Tom Tom’ers, in agreement with their manager and team, use…