Automation Engineer, Sr.

Stefanini, Inc; Pasay; Hybrid; PHP 700,000 - 1,200,000; Full time

Job summary

Stefanini, Inc. in the Philippines is seeking a Sr Automation Engineer to own the engineering lifecycle for automations delivered through DEX platforms, including Nexthink and ControlUp.

You will advise customer endpoint teams on Microsoft Intune, build reusable remediation, and collaborate with global Stefanini colleagues to support US-based accounts. This role requires 5+ years in endpoint engineering, strong PowerShell, and a passion for secure, scalable automation.

Qualifications

• 5+ years of experience in endpoint engineering, EUC, digital workplace, desktop engineering, UEM, or a closely related discipline.
• 3+ years of deep, hands-on Microsoft Intune experience in enterprise environments.
• Experience supporting large-scale environments with thousands of endpoints and production change controls.
• Experience developing and operating automation used by enterprise support or engineering teams; experience in DEX platforms is highly preferred.
• Experience working directly with customers or internal stakeholders to gather requirements and deliver technical outcomes.

Responsibilities

• Own the engineering lifecycle for automations delivered through the DEX platforms, from design and development through testing, release, support, and continuous improvement.
• Translate findings from Nexthink, ControlUp, and other DEX platforms into automated remediation and measurable service-improvement use cases.
• Develop automation workflows based on experience metrics, alerts, sentiment, and user-impacting events.
• Contribute to platform onboarding, use-case design, investigation workflows, alert tuning, and technical validation.
• Design, develop, test, deploy, and maintain production-grade endpoint automations using PowerShell and the DEX platforms' native capabilities.

Skills

PowerShell

Microsoft Intune

Endpoint automation

Nexthink

ControlUp

GitHub Actions

Graph API

Education

Bachelor's degree in CS/IT/Engineering

Tools

Nexthink

ControlUp

SysTrack

Aternity

GitHub

Job description

Join us to co-create solutions for a better future!

Job Details

Position: Automation Engineer, Sr.

Location: Remote or customer-aligned, with working hours that support US accounts.

Position Type: Full Time

Pay Range: Based on Experience

Role Mission

Own the engineering lifecycle for automations delivered through the DEX platforms and advise customer endpoint teams on Microsoft Intune, turning endpoint telemetry, DEX insight, and recurring support demand into reliable, reusable remediations that improve employee experience, reduce support demand, and strengthen device health across the DEX 3 Practice's enterprise accounts.

About the Stefanini DEX 3 Practice

The Stefanini DEX 3 Practice delivers Digital Employee Experience managed services to large global enterprise customers. The practice is organized into four tracks: Product Owners own the customer relationship, roadmap, and backlog; Architects own platform and solution design; Platform Engineers run the DEX platforms; and Automation Engineers own the engineering lifecycle for automations delivered through the DEX platforms. Nexthink is the practice's primary DEX platform, with ControlUp , Lakeside SysTrack , Aternity , 1E, and other platforms supported based on customer requirements. Depending on the account, platforms are integrated with tools such as Microsoft Intune, ServiceNow, and Azure. The practice consults with customer endpoint teams on Microsoft Intune and builds specific Intune artifacts on request, but does not administer customer Intune tenants day to day. Automation assets live in a shared GitHub library with pull-request review, AI-assisted code review, and automated code signing before anything reaches a customer estate. The team works closely with Stefanini colleagues globally to standardize practices and share reusable assets.

Key Responsibilities

DEX Platform Automation (owned by the practice)

• Own the engineering lifecycle for automations delivered through the DEX platforms, from design and development through testing, release, support, and continuous improvement, including Nexthink Remote Actions and ControlUp Script-Based Actions, triggers, and automation policies.

• Translate findings from Nexthink, ControlUp , and other DEX platforms into automated remediation and measurable service-improvement use cases.

• Develop automation workflows based on experience metrics, alerts, sentiment, and user-impacting events.

• Contribute to platform onboarding, use-case design, investigation workflows, alert tuning, and technical validation.

Automation Engineering

• Design, develop, test, deploy, and maintainproduction-grade endpoint automations using PowerShell and the DEX platforms' native capabilities.

• Create proactive remediation, self-healing, validation, and recovery workflows for recurring endpoint and employee-experience issues.

• Build reusable automation assets and patterns that can be safely adapted across multiple customer environments.

• Follow the practice's GitHub-based workflow: branching, pull requests, peer and AI-assisted code review, testing, release notes, signed releases, and rollback plans.

• Implement structured logging, error handling, security controls, and operational monitoring for automated solutions.

• Use AI coding assistants responsibly to accelerate development while retaining full ownership of correctness, security, and testing.

Microsoft Intune and UEM Advisory

• Act as the practice's Intune and UEM subject-matter expert for customer endpoint teams: assess configuration profiles, compliance policies, application deployment, endpoint security baselines, and lifecycle practices, and recommend improvements that reduce friction and support demand.

• Advise on Windows Autopilot, enrollment, provisioning, policy assignment, and device readiness, and on Windows 10/11, Microsoft Entra ID, Group Policy, co-management, and modern management transitions.

• Use Microsoft Graph and REST APIs to query device, application, identity, and compliance data for telemetry, validation, and reporting in support of DEX automations.

• Build specific Intune artifacts on request, such as a configuration profile, an Autopilot adjustment, or a remediation script package, and hand them to the customer endpoint team for deployment; day-to-day tenant administration remains with the customer.

• Use Endpoint Analytics and device-health data alongside DEX telemetry to identify friction and prioritize remediation opportunities.

ITSM and Azure Integration

• Integrate endpoint and DEX capabilities with ServiceNow or other ITSM platforms for incident enrichment, automated ticket creation and closure, and workflow automation.

• Design or contribute to supporting Azure services (Automation, Functions, Logic Apps, Key Vault) where platform-native capabilities are not sufficient, partnering with Azure specialists where deeper cloud engineering is required.

• Partner with the practice's ServiceNow and Azure engineers to keep integrations secure, supportable, and documented.

Customer Delivery and Engineering Practice

• Participate in discovery workshops, technical design sessions, sprint planning, demonstrations, and customer reviews.

• Work with Product Owners to estimate effort, identify dependencies and risks, document acceptance criteria, and communicate blockers early.

• Create clear technical designs, runbooks, support procedures, upgrade guides, and knowledge-transfer materials.

• Mentor developing engineers, contribute to code reviews, and help evolve the practice's development standards and reusable library .

• Collaborate with global Stefanini team members while maintaining dependable coverage for US customer hours.

Job Requirements Details

Professional Experience

• 5+ years of experience in endpoint engineering, EUC, digital workplace, desktop engineering, UEM, or a closely related discipline.

• 3+ years of deep, hands-on Microsoft Intune experience in enterprise environments, sufficient to advise customer endpoint teams and to design remediations that respect their configuration.

• Experience supporting large-scale environments with thousands of endpoints and production change controls.

• Experience developing and operating automation used by enterprise support or engineering teams; experience doing so in DEX platforms is highly preferred.

• Experience working directly with customers or internal stakeholders to gather requirements and deliver technical outcomes.

Core Technical Skills

• Advanced PowerShell scripting, including functions, modules, error handling, logging, testing, and maintainable code structure.

• Microsoft Intune, including configuration profiles, compliance policies, application packaging and deployment, endpoint security, reporting, and remediation capabilities.

• Windows Autopilot and Windows 10/11 endpoint provisioning, administration, troubleshooting, and lifecycle management.

• Microsoft Entra ID, identity and authentication fundamentals, Group Policy, and hybrid endpoint-management concepts.

• Microsoft Graph API and REST API integration, including authentication, testing, and structured data handling.

• Git-based source control, including branching, pull requests, code review, testing, and release and rollback concepts.

• Secure handling of credentials, certificates, service principals, managed identities, and secrets, with least-privilege API access across Graph, ServiceNow, Intune, and Azure.

• Strong understanding of enterprise infrastructure fundamentals, including networking, identity, security, application delivery, and change management.

Professional Capabilities

• Strong analytical and troubleshooting skills with the ability to move from telemetry or symptoms to root cause and scalable remediation.

• Clear written and verbal communication with technical and non-technical audiences.

• Ability to work independently, manage competing priorities, document decisions, and deliver reliably in customer environments.

• Commitment to secure coding, peer review, testing, documentation, and continuous improvement.

Preferred Qualifications

DEX Platforms (highly preferred)

• Nexthink hands-on experience or certification, especially DEX Automation, Remote Actions, NQL, Content Management, or platform administration.

• ControlUp experience, including Script-Based Action development, triggers, and automation policies.

• Lakeside SysTrack , Aternity , 1E (TeamViewer DEX), or another enterprise DEX/endpoint observability platform.

• Experience building DEX-driven remediation or self-healing use cases.

Endpoint, Integration and Development

• ServiceNow integration or workflow automation (REST, Integration Hub, Flow Designer), or Jira Service Management.

• SCCM/Microsoft Configuration Manager and co-management; Jamf or macOS management; mobile device management.

• Azure Virtual Desktop, Citrix Virtual Apps and Desktops, VMware, or other VDI environments.

• Microsoft Defender for Endpoint, endpoint security baselines, vulnerability remediation, or security operations collaboration.

• GitHub Actions, CI/CD pipeline creation, or automated code signing for script delivery.

• Python, Azure Automation, Logic Apps, or Power Automate.

• AI coding assistants (GitHub Copilot, Claude Code, Cursor, or similar) applied to automation or analytics work.

• Power BI, dashboarding, operational analytics, benefit tracking, or value reporting.

• Microsoft 365 Endpoint Administrator, Intune, Azure, Nexthink, ControlUp , ITIL, or related certifications.

Education

Bachelor's degree in Computer Science , Information Technology, Engineering, or a related field, or equivalent relevant professional experience.