Senior Platform Engineer

Sr. Platform Engineer — Identity & Modern Workplace

Job Type: Full-Time (On‑site)

Location:

Renton, WA

Salary Range: $120,000 - $140,000 per year

The Sr. Platform Engineer is the senior technical owner of three platform domains at Radiant: identity & access, endpoint management, and productivity & collaboration. The role involves architecting, operating, and evolving these integrated platforms, guiding the move to a modern, cloud‑native model, and ensuring secure, zero‑trust access for users and devices.

Radiant currently runs on Microsoft Entra , Intune, Microsoft 365, SharePoint, and Exchange Online. The engineer should be comfortable with this stack today while evaluating, integrating, or replacing components as the platform evolves. Roughly 30 macOS devices are managed via the same MDM platform.

• Own identity platform end‑to‑end: lifecycle, directory and group strategy, and hybrid identity.
• Design and operate zero‑trust access, conditional policies, modern authentication, MFA, and risk‑based controls in partnership with Security Operations.
• Govern application identity: SSO, federation, OAuth/OIDC, service principals, and third‑party SaaS integration with SCIM provisioning where supported.
• Define and maintain access architecture: RBAC models, permission boundaries, privileged access patterns, and access reviews.

• Own modern device management for Windows and macOS fleets: enrollment, configuration, compliance, application delivery, and update strategy.
• Establish and enforce device posture as the foundation for conditional access.
• Build provisioning experiences that minimize friction while meeting security and compliance.

• Own the collaboration platform: email, messaging, file collaboration, and content management, including governance and lifecycle.
• Implement data protection patterns (DLP, sensitivity labels, retention) in partnership with Security Operations.

• Lead the technical design and execution of the move from legacy on‑premises to a modern, cloud‑native model.
• Apply legacy knowledge to document, decommission, and document legacy artifacts during transition.
• Document target‑state architecture, migration plans, rollback strategies, and operational runbooks.
• Continuously evaluate the platform stack and recommend integration, replacement, or expansion.

• Drive automation across managed platforms using modern scripting (Power Shell, Python) and APIs (Microsoft Graph, REST).
• Apply Infrastructure‑as‑Code (Terraform or equivalent) for declarative platform configuration.
• Use AI tooling (Claude, Gemini, Microsoft Copilot) for scripting, IaC generation, design exploration, policy analysis, and documentation drafting.

• Maintain comprehensive documentation of managed platforms.
• Execute change management for platform changes.
• Own license management and capacity forecasting.
• Provide hands‑on T2/T3 support to Renton HQ.
• Mentor the Junior Systems Administrator.

• Bachelor’s degree in Computer Science, Information Systems, or related field – or equivalent experience.
• 7+ years in enterprise IT with progressive responsibility in identity, endpoint, or platform engineering.
• 4+ years hands‑on experience operating modern cloud identity platforms (Entra , Okta, Google Workspace). Entra is preferred.
• Production experience with modern endpoint/MDM platforms (Intune, Jamf, Kandji, Workspace ONE). Include configuration, compliance, and application delivery.
• Strong experience designing and operating modern authentication and zero‑trust access.
• Strong scripting and API integration skills (Power Shell, Python).
• Demonstrated written communication skills (architecture docs, runbooks, decision records).

• Authentication & federation: SSO/SAML, OAuth 2.0 / OIDC, conditional access, MFA, app registrations, SCIM.
• Identity lifecycle & governance: joiner/mover/leaver automation, access reviews, RBAC, privileged access.
• MDM at scale: enrollment, compliance, delivery on Windows and macOS.
• Secure…