Engineer - Endpoint Experience
ASOS
Get a reply from this employer
Your resume and cover letter, tailored to exactly what they’re hiring for.
Benefits offered by this job
Job summary
ASOS is seeking an Engineer - Endpoint Experience to join the Endpoint Experience team within Workplace Experience. You will help manage ASOS devices, implement security policies, automate provisioning, and build metrics to measure service health. The role offers hybrid work with in-person collaboration two days a week in London.
You will work with Intune for Windows and Jamf for Apple devices, delivering end-to-end pipelines, harness-driven deployments, and evidence-based device management.
Qualifications
- Hands-on experience with device management using Intune or Jamf Pro.
- Experience packaging and deploying applications and OS updates.
- Scripting skills in PowerShell, Python, or shell.
- Ability to build dashboards and telemetry.
- Strong written and verbal communication.
Responsibilities
- Build and maintain device configuration pipelines through Intune and Jamf.
- Ensure patch compliance and security baselines.
- Package and publish applications to the self-service catalogue.
- Instrument telemetry and build service health dashboards.
- Collaborate with IT Support and Cyber Security.
Skills
Tools
Job description
We're ASOS. We blend our flair for fashion with our love of cutting- edge technology, but more importantly were interested in how we can bring the best out of you.
We exist to give people the confidence to be whoever they want to be, and that goes for our people too. At ASOS, you're free to be your true self without judgment, and channel your creativity into a platform used by millions.
We’re looking for an Engineer - Endpoint Experience to join the Endpoint Experience team we are building within Workplace Experience, part of Digital Foundation. The team owns how ASOS manages its estate of employee devices (laptops, workstations, phones, and tablets): how security policy reaches every device, how changes are proven safe before they roll out, how applications are packaged and offered to ASOSers, how we measure whether the service works, and which devices we buy in the first place.
ASOS is investing in endpoint engineering as an in-house capability. We want raising patch compliance, rolling out new tools to ASOSers (for example AI tooling for every employee), and evolving our device platforms to be routine engineering work we control end to end, rather than projects with long lead times. You will help build the foundations that make device management a product with version control, automated testing, staged rollouts, and clear metrics, and you will help evaluate the major device vendors and management platforms as we evolve our estate.
This is a hands-on engineering role in a growing team. You will work with senior engineers who will support your development, and you will own meaningful pieces of the platform end to end: building pipelines, writing automation, packaging applications, running device evaluations, and instrumenting the metrics that tell us how we are doing. Our device management platforms today are Intune for Windows and Jamf for Apple devices.
The role reports to the Engineering Manager for Endpoint Experience and works closely with Cyber Security, Developer Productivity, IT Support, Finance, and Procurement. The team is not a first-line support function: first response and device handover stay with IT Support, and servers are owned by Workplace Infrastructure (on-premises) and Developer Infrastructure (cloud).
The Engineer - Endpoint Experience exists to help make the ASOS device estate secure by default, predictably reliable, and measurably good to use. Today, too much of what happens to a device between purchase and retirement is manual, slow to change, and hard to see. The team’s job is to make it engineered: every change versioned and reviewed, proven safe on a representative cohort before it reaches everyone, and visible in metrics that tell us whether employees are better off.
Build and maintain the pipelines that take device configuration and the security policy authored by Cyber Security as versioned code and deploy it through Intune and Jamf, and the automation that detects and reports drift
Build and operate the automation that keeps patch compliance at the required level and reports it transparently
Build and maintain endpoint security configurations and compliance baselines, implementing device controls defined by Cyber Security through Intune and Jamf.
Build the device side of joiners-movers-leavers automation, from day-one provisioning to leaver device recovery and wipe
Build and operate the test harness that validates policy, OS, application, and configuration changes against representative device cohorts before fleet-wide rollout, including staged rings, health checks, and rollback, and keep those cohorts healthy and representative
Instrument device telemetry and build the dashboards that show service health, compliance, time to provision, change failure rate, support demand, and employee satisfaction
Help run the regular cadence of employee feedback, investigate incidents and change failures, fix root causes, and feed learnings back into the harness and pipelines
Package, test, and publish applications to the self-service catalogue and to automated deployments, keep them current with security updates prioritised, and retire software no longer needed or licensed
Package and maintain the curated developer toolset with Developer Productivity, so that a new engineer’s machine is ready to build and ship on day one
Automate repetitive packaging and update work so that employees can find and install what they need without a ticket
Run structured evaluations of candidate devices with real users, collect performance, reliability, and satisfaction data, and write up the results
Maintain device standards and employee personas, ensuring hardware, applications and device configurations remain aligned to business requirements, while supplying the data (device age, failure rates, cost) that informs lifecycle and refresh decisions.
Work day to day with IT Support so that changes reaching the fleet are understood and supportable, and with Cyber Security engineers on translating requirements into tested device policy
Share what you learn across Digital Foundation through documentation and demos
Pipelines and automation you own running reliably, with runbooks others can follow, and your changes reaching the fleet through the harness with a low change failure rate
Dashboards that colleagues across Workplace Experience and its stakeholders trust and use
Applications you package reaching the fleet reliably, with employees able to self-serve rather than raise tickets
Device evaluations that produce clear, evidence-based write-ups that inform purchasing decisions
Visible growth in your ownership and technical scope over your first year
You have solid experience managing modern devices and want to move from operating tools to building the platform behind them. You are curious about how a fleet of devices can be managed like a production system, you enjoy automating things others do by hand, and you care about the people who use the devices you manage. AI assistants are a normal part of how you work, and you use them wherever they get you to a goal faster or better.
Hands-on experience with Microsoft Intune or Jamf Pro, ideally both, managing Windows or macOS devices in an enterprise environment
Scripting and automation skills in PowerShell, Python, or shell, and some experience with version control and CI pipelines, or a strong desire to apply them to endpoint management
An understanding of how endpoint security controls, compliance requirements, identity, and conditional access translate into device configuration
Experience packaging and deploying applications and OS updates, and dealing with what happens when they go wrong
Comfort with telemetry and data: building a dashboard, spotting a trend, and explaining what it means
Fluency with AI-assisted ways of working, and an appetite to keep learning what they can do
Clear written communication, and the habit of asking why a process exists before automating it
Every ASOS employee depends on devices that are secure, reliable, and stay out of their way. How we manage that estate determines how quickly we can respond to a new threat, how much time IT Support spends firefighting, and how much we spend on hardware. This role builds the foundations that let us move quickly on all three at once, with evidence rather than guesswork.
We believe being together in person helps us move faster, align more effectively, and build stronger teams. Our approach to working together includes spending at least two days a week in the office to support collaboration, decision-making, and shared ownership.
- Competitive salary, pension, and private medical care scheme
- Performance related bonus
- Flex benefits allowance - which you can chose to take as extra cash, or use towards other benefits
- 25 days paid annual leave + an extra day for your birthday
- Employee discount (hello ASOS discount!)
- Tech Develops - our internal tech focussed skills development programme to focus on your personal growth as a technologist
- Opportunity to represent ASOS at industry leading events
- Opportunity to help shape and drive our DE&I initiatives in Tech (like our WIT movement and Diversity mentoring in Tech)
- Opportunity to make an impact from day one and work with the latest in cutting edge of technology
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
