Senior IT Client Platform Engineer

Webflow; United Kingdom; Remote; GBP 82,000 - 129,000; Full time

Job summary

A leading tech company is seeking a Senior IT Client Platform Engineer to manage and secure a global device management ecosystem. Responsibilities include designing endpoint management solutions and ensuring compliance, with a focus on automation and security in a remote-first environment. Ideal candidates have extensive experience with Jamf Pro and Intune, along with strong scripting abilities.

Benefits

Equity ownership (RSUs)

100% employer-paid healthcare

Flexible PTO and sabbatical program

Mental health support and coaching

Monthly stipends for work and wellness

Qualifications

• 4+ years of experience in endpoint engineering or relevant IT systems engineering.
• Strong experience with Jamf Pro and Intune administration at enterprise scale.
• Proficiency in scripting and automation (Python, Bash, PowerShell).

Responsibilities

• Design, implement, and maintain endpoint management solutions.
• Manage the device lifecycle from procurement to decommissioning.
• Define and enforce security baselines and compliance controls.

Skills

Jamf Pro

Intune administration

Scripting (Python, Bash, PowerShell)

Endpoint engineering

Network security

Job description

About the role

At Webflow, our mission is to bring development superpowers to everyone. We’re looking for a Senior IT Client Platform Engineer to join our IT team and take ownership of building, scaling, and securing our global device management ecosystem. You’ll design and maintain workflows that power a zero-touch, secure, and seamless employee experience—from day-one onboarding to offboarding. You’ll work closely with IT Operations and Security to deliver reliable, automated, and secure endpoint solutions that keep our workforce productive.

Location and employment type

• Location: Remote-first (United States)
• Full-time
• Permanent
• Exempt

Compensation

• The cash compensation for this role is tailored to align with the cost of labor in different geographic markets. Base pay ranges are structured into zones; the specific base pay within the range will be determined by geographic location, job-related experience, knowledge, qualifications, and skills.
• Zone A: $127,000 - $173,000; Zone B: $119,000 - $162,000; Zone C: $111,000 - $152,000

This role is eligible to participate in Webflow’s company-wide bonus program. Target amounts are a percentage of base salary and vary by career level; payouts are based on company performance against established goals.

Responsibilities

• Core Platform Management: Design, implement, and maintain endpoint management solutions (Jamf Pro, Intune, or equivalent) for macOS and iOS devices at scale.
• Own zero-touch deployment workflows to enable smooth onboarding and offboarding.
• Manage the device lifecycle: procurement, configuration, patching, monitoring, and decommissioning.
• Standardize and manage system images, policies, and applications across all platforms.
• Troubleshoot endpoint-related escalations and provide Tier 3 support when needed.
• Build and maintain automation scripts and workflows (Python, Bash, PowerShell, APIs) to reduce manual IT processes and improve employee experience.
• Integrate identity and access management platforms (Okta) with endpoint tools for provisioning and compliance.
• Security & Compliance: Define and enforce security baselines, patch management, and compliance controls across all endpoints; partner with Security to identify, monitor, and remediate endpoint vulnerabilities; ensure platforms meet audit and regulatory requirements (e.g., SOC2, ISO 27001).
• Maintain thorough documentation of system architecture, standards, and procedures; collaborate with IT Operations to resolve escalations and share knowledge; work with cross-functional teams on device and access workflows.
• Document processes, create runbooks, and contribute to knowledge-sharing across the IT organization; act as a subject-matter expert in endpoint management and automation best practices.

About you

Requirements:

• 4+ years of experience in endpoint engineering, client platform engineering, or relevant IT systems engineering
• Strong experience with Jamf Pro and Intune administration at enterprise/global scale (1k+ users a plus)
• Exposure to configuration management frameworks (Chef, Puppet, Ansible) a plus
• Proficiency in scripting and automation (Python; Bash, PowerShell, or similar)

You’ll thrive as a Senior IT Client Platform Engineer if you:

• Can enforce security standards and compliance in a mobile device environment
• Have a strong understanding of networking, system security, and SaaS application management
• Exhibit excellent problem-solving skills and cross-functional collaboration in a fast-paced environment
• Are a self-starter with experience in a remote-first, asynchronous environment
• Enjoy building and refining tools that help teammates do their best work
• Are curious about how things work and aren’t afraid to ask questions
• Are an expert in Apple ecosystem management (macOS, iOS, ABM, ADE, VPP)
• Understand autonomy with responsibility and how to deliver impactful results
• Stay curious and open to growth, including emerging technologies like AI

Our core behaviors

• Build lasting customer trust. We act to earn and maintain customer trust.
• Win together. We succeed as one team.
• Reinvent ourselves. We imagine what’s possible and pursue continuous improvement.
• Deliver with speed, quality, and craft. We move fast without lowering the bar.

Benefits

• Equity ownership (RSUs)
• 100% employer-paid healthcare, vision, and dental for full-time employees and dependents
• Paid parental leave and optional pregnancy disability leave where applicable
• Flexible PTO and sabbatical program
• Mental health support, coaching, therapy, and EAP
• Monthly stipends for work and wellness
• 401k or pension schemes where applicable, plus financial wellness benefits

Equality and compliance

Webflow is an Equal Opportunity Employer. Employment decisions are made without regard to protected characteristics. We may request voluntary self-identification for DEI purposes; participation is voluntary and confidential. For more information, see our EEO policy.