Engineer - Endpoint

We're ASOS. We blend our flair for fashion with our love of cutting- edge technology, but more importantly were interested in how we can bring the best out of you.

We exist to give people the confidence to be whoever they want to be, and that goes for our people too. At ASOS, you're free to be your true self without judgment, and channel your creativity into a platform used by millions.

We’re looking for an Engineer
- Endpoint Experience to join the Endpoint Experience team we are building within Workplace Experience, part of Digital Foundation. The team owns how ASOS manages its estate of employee devices (laptops, workstations, phones, and tablets): how security policy reaches every device, how changes are proven safe before they roll out, how applications are packaged and offered to ASOSers, how we measure whether the service works, and which devices we buy in the first place.

ASOS is investing in endpoint engineering as an in-house capability. We want raising patch compliance, rolling out new tools to ASOSers (for example AI tooling for every employee), and evolving our device platforms to be routine engineering work we control end to end, rather than projects with long lead times. You will help build the foundations that make device management a product with version control, automated testing, staged rollouts, and clear metrics, and you will help evaluate the major device vendors and management platforms as we evolve our estate.

This is a hands-on engineering role in a growing team. You will work with senior engineers who will support your development, and you will own meaningful pieces of the platform end to end: building pipelines, writing automation, packaging applications, running device evaluations, and instrumenting the metrics that tell us how we are doing. Our device management platforms today are Intune for Windows and Jamf for Apple devices.

The role reports to the Engineering Manager for Endpoint Experience and works closely with Cyber Security, Developer Productivity, IT Support, Finance, and Procurement. The team is not a first-line support function: first response and device handover stay with IT Support, and servers are owned by Workplace Infrastructure (on-premises) and Developer Infrastructure (cloud).

The Engineer
- Endpoint Experience exists to help make the ASOS device estate secure by default, predictably reliable, and measurably good to use. Today, too much of what happens to a device between purchase and retirement is manual, slow to change, and hard to see. The team’s job is to make it engineered: every change versioned and reviewed, proven safe on a representative cohort before it reaches everyone, and visible in metrics that tell us whether employees are better off.

• Build and maintain the pipelines that take device configuration and the security policy authored by Cyber Security as versioned code and deploy it through Intune and Jamf, and the automation that detects and reports drift

• Build and operate the automation that keeps patch compliance at the required level and reports it transparently

• Build and maintain endpoint security configurations and compliance baselines, implementing device controls defined by Cyber Security through Intune and Jamf.

• Build the device side of joiners-movers-leavers automation, from day-one provisioning to leaver device recovery and wipe

• Build and operate the test harness that validates policy, OS, application, and configuration changes against representative device cohorts before fleet-wide rollout, including staged rings, health checks, and rollback, and keep those cohorts healthy and representative