Senior Platform Engineer

Sr. Platform Engineer — Identity & Modern Workplace Job Type: Full-Time (On-site)

Location:

Renton, WASalary Range: $120,000 - $140,000 per year

Role Overview The Sr. Platform Engineer — Identity & Modern Workplace is the senior technical owner of three platform domains at Radiant: identity & access, endpoint management, and productivity & collaboration. You'll architect and operate these domains as integrated platforms — designing how people authenticate, how their devices are governed, and how they collaborate securely — and you'll continue to own and evolve those platforms as Radiant  the build phase, you'll lead the design and execution of Radiant's move to a modern, cloud-native model for identity and endpoint management — establishing zero-trust access patterns, modern device posture, secure collaboration, and platform governance.

In steady state, you'll evolve and govern the platform, partnered with a Jr. Systems Administrator who handles day-to-day operational support. You'll remain hands-on throughout — solving complex issues, leading escalations, and providing T2/T3 support to Renton HQ as needed.

We care more about how you think about platform problems than which vendor's product you've memorized. The current implementation is Microsoft (Entra , Intune, Microsoft 365, SharePoint), and you'll work in that stack daily — but we're hiring an engineer who can evaluate, adopt, and integrate the right tools for a given problem, not someone tied to a single vendor's roadmap.

Radiant is an AI-driven organization. We expect senior engineers to be fluent across modern AI tooling — Claude, Gemini, and Microsoft Copilot are all in active use — and to pick the right tool for the work 'll leverage AI as a core part of how you engineer: scripting and automation, design exploration, policy and log analysis, runbook and documentation generation, troubleshooting, and architectural thinking.

We care less about which tool you reach for and more that you can reach effectively across all of them.

This role partners closely with our Security Analyst/Engineer on the identity-security boundary, with Infrastructure/SRE on cloud and server platform handoffs, and with Support Services on user-facing escalations.

Environment & Current Stack So that candidates know exactly what they're walking into:
Radiant currently runs on the Microsoft platform across identity, endpoint, and productivity domains — Entra , Intune, Microsoft 365, SharePoint, and Exchange Online — and the bulk of day-to-day work happens in that stack. We're hiring an engineer who can operate that environment effectively today and evaluate, integrate, or replace components as the platform evolves. Familiarity with the current stack is valuable;

rigid attachment to it is not. Mac devices are part of the fleet (~30) and are managed through the same MDM platform as Windows.

Key Responsibilities Identity & Access Own the identity platform end-to-end: identity lifecycle (joiners, movers, leavers), directory and group strategy, and hybrid identity where required.

Design and operate zero-trust access — conditional/contextual access policies, modern authentication, MFA, and risk-based controls — in partnership with Sec Ops.

Govern application identity: SSO and federation patterns, OAuth/OIDC app registrations and consent, service principals, and third-party SaaS integration (including SCIM provisioning where supported).Define and maintain access architecture — RBAC models, role assignments, permission boundaries, privileged access patterns, and access reviews.

Endpoint & Device Posture Own modern device management for the fleet — enrollment, configuration, compliance, application delivery, and update strategy — across both Windows and macOS.Establish and enforce device posture as a foundation for conditional access and zero-trust enforcement.

Build provisioning experiences that minimize friction for end users while meeting security and compliance requirements.

Productivity & Secure Collaboration Own the collaboration and productivity platform — email, messaging, file collaboration, and content management — including governance, lifecycle, and external sharing…