Who are we?
At Finastra, we're a global leader in financial services software, dedicated to expanding access to financial services and shaping what's next for the industry. Our technology powers mission‑critical solutions across Lending, Payments and Universal Banking, supporting over 7,000 customers, including 80% of the world's top 50 banks, in more than 110 countries.
We are seeking a Senior Client Platform Engineer to join our Workplace Technology team. This role will serve as a senior technical engineer and subject matter expert responsible for the engineering, security, automation, and lifecycle management of Finastra's endpoint platforms and services across the organization.
The successful candidate will drive the strategy, modernization, and operational excellence of endpoint technologies supporting Windows, macOS, iOS, and other client platforms. While a significant focus of this role will be on Apple technologies and their continued adoption across the enterprise, the engineer will also support broader endpoint management, security, compliance, and user experience initiatives.
Working closely with Endpoint Security, Security Engineering, Service Management, and Support teams, you will play a key role in shaping the future of endpoint management, device security, workplace automation, and modern end‑user computing services. This role is ideal for an experienced endpoint engineer who combines deep Apple expertise with broad endpoint management, security, and automation capabilities.
Key Responsibilities
- Endpoint Platform Ownership
- Serve as a senior technical owner for enterprise endpoint platforms, with primary accountability for Apple technologies and support for the broader endpoint ecosystem.
- Define platform standards, engineering best practices, governance models, and technology roadmaps.
- Drive platform modernization initiatives focused on automation, security, operational efficiency, and user experience.
- Evaluate emerging endpoint technologies and provide recommendations for adoption.
- Act as a senior escalation point and subject matter expert for endpoint management technologies and services.
- Endpoint Management & Device Lifecycle
- Manage the lifecycle of enterprise endpoint devices, including Windows, macOS, iOS, and mobile platforms from enrollment through retirement.
- Design and maintain automated provisioning, deployment, and device management processes.
- Support hardware refresh programs, lifecycle governance, and platform standardization initiatives.
- Ensure a secure, reliable, and consistent user experience across endpoint platforms.
- Endpoint Management Platforms
- Administer and engineer enterprise endpoint management technologies including Microsoft Intune, IRU (formerly Kandji), Microsoft Configuration Manager (SCCM/MECM), Apple Business Manager, compliance policies, software distribution, and automated device enrollment.
- Develop scalable management frameworks supporting global endpoint deployments.
- Optimize device compliance, reporting, software distribution, and operational workflows.
- Support coexistence and modernization initiatives across endpoint management platforms.
- Operating System & Application Management
- Plan, test, and deploy operating system updates and major releases across Windows and Apple platforms.
- Package, deploy, and manage enterprise applications.
- Maintain application compatibility and supportability across endpoint environments.
- Develop deployment standards, release management processes, and endpoint configuration baselines.
- Partner with business and technology teams to support application modernization initiatives.
- Security & Compliance
- Implement and maintain endpoint security baselines and compliance standards.
- Partner with security teams to support vulnerability management, remediation, and endpoint risk reduction initiatives.
- Support deployment and management of enterprise security tools across endpoint devices.
- Assist with regulatory, audit, and compliance requirements while ensuring alignment with corporate security policies and standards.
- Identity & Access Management
- Support integration between endpoint platforms and enterprise identity services.
- Manage integrations with Microsoft Entra ID, SSO, MFA, Conditional Access, and device compliance policies.
- Support modern device identity, Zero Trust, and secure access initiatives.
- Automation & Engineering
- Develop automation solutions using scripting, APIs, and platform‑native capabilities.
- Build proactive remediation, self‑healing, and operational automation solutions.
- Integrate endpoint management platforms with enterprise systems and workflows.
- Develop reporting and operational dashboards to support platform management and decision‑making.
- Operational Excellence & Governance
- Monitor endpoint health, security, compliance, operational performance, and user experience metrics.
- Drive continuous service improvement, automation, and platform maturity initiatives.
- Create and maintain technical documentation, standards