Senior Corporate Enterprise Platform Engineer, Windows

Role Description

As a Senior Client Platform Engineer on CorpFleet Engineering, you will own and improve Dropbox’s Windows endpoint platform. You will bring deep Windows and Intune expertise, make patching and application delivery more reliable, and build automation that reduces recurring work for the team.

This is a hands-on role combining Windows technical ownership with the development of a more code-managed endpoint platform. You will help evaluate and adopt FleetDM, osquery, infrastructure-as-code, and GitOps practices where they improve reliability, visibility, and maintainability. You will strengthen the current environment while building and validating the path forward—not assume that replacing a tool is the answer.

You will work with CorpInfra, IAM, Security, and support teams to make practical technical decisions, lead multi-phase improvements, and clarify ownership. You will also mentor teammates through pairing, code review, and shared operational practices. This is an individual-contributor role, not a people-management position.

Responsibilities

• Own endpoint reliability and lifecycle management. Improve provisioning, application delivery, updates, security configuration, and troubleshooting across the endpoint environment.
• Make patching predictable and safe. Strengthen update workflows through testing, controlled rollouts, and remediation.
• Make fleet health trustworthy and actionable. Improve reporting on device health, patching, and configuration, with clear ownership for resolving issues.
• Build maintainable automation. Turn recurring work into reliable, tested workflows that other engineers can operate.
• Advance code-managed endpoint operations. Adopt tools and practices that improve configuration management, validation, and deployment.
• Lead cross-functional platform improvements. Define practical roadmaps, resolve dependencies, and balance security, reliability, employee experience, and team capacity.
• Strengthen the team’s capability. Mentor teammates, review code and designs, and document reusable practices that improve coverage across the endpoint team.

Requirements

• Significant experience engineering and operating Windows endpoint environments, with personal ownership beyond ticket handling or routine console administration.
• Deep hands-on Intune experience across device lifecycle, configuration and compliance policies, application management, update workflows, and relevant Entra ID dependencies.
• Strong Windows troubleshooting skills across operating-system behavior, services, logs, networking, certificates, identity, and security controls. Able to distinguish reported management status from actual endpoint health.
• Recent ownership of Windows and third-party application patching, including staged deployment, user-impact validation, failed-device handling, exceptions, and recovery.
• Strong practical PowerShell skills and familiarity with at least one additional programming language, such as Python, Go, or C#. Experience building and maintaining production automation or systems integrations.
• Demonstrated use of version control, code review, automated checks, and controlled deployment for operational changes. Able to explain safe retries, failure handling, secrets management, and configuration drift.
• Ability to independently define and deliver multi-phase work, prioritize under ambiguity, partner across teams, and mentor other engineers.
• Clear written and verbal communication, including concise technical decisions, incident updates, runbooks, and effective asynchronous collaboration.

Preferred Qualifications

• Production experience with FleetDM on Windows, including agent operations, policies, queries, targeting, API integrations, or configuration managed through GitOps.
• Practical osquery and SQL experience for endpoint inventory, health, or security use cases, including query validation, performance considerations, and handling stale or missing results.
• Experience with infrastructure-as-code or declarative configuration, continuous integration and delivery, and migration or coexistence between endpoint-management platforms.
• Experience with Automox, Patch My PC, or comparable tools, and with endpoint privilege management, application control, encryption, or other security controls.
• Experience supporting developer-heavy, distributed environments and contributing reusable automation across Windows, macOS, or Linux.

Compensation