Workplace Platform Engineer

NextEra; Riyadh; On-site; SAR 250,000 - 400,000; Full time

Job summary

NextEra is seeking an experienced Workplace Platform Engineer to own and enhance our digital workplace ecosystem. The role focuses on Microsoft 365, Entra ID, Intune, endpoint management, automation, and productivity platforms to deliver secure, scalable workplace services across the organization.

You will partner with business teams to improve productivity, govern identities and licensing, and manage platform changes with rollback readiness.

Qualifications

• Experience in Workplace Engineering, End-User Computing, Microsoft 365 Administration, or Endpoint Management.
• Hands-on expertise with Microsoft 365, Conditional Access, SSO, and identity governance.
• Proficient in PowerShell scripting and automation tools such as n8n.
• Familiarity with Jira, ManageEngine, PKI/Certificate Management, and related workplace technologies.
• Strong documentation, stakeholder communication, and technical leadership skills.

Responsibilities

• Own design, implementation, and management of Microsoft 365 and Entra ID architecture.
• Administer access controls, enterprise apps, and identity governance.
• Lead endpoint management, Intune policies, and device security baselines.
• Engineer and govern workplace apps including Jira, ManageEngine, and others.
• Develop automation solutions using PowerShell and n8n.
• Manage vendor relationships, licensing, and platform changes with rollback plans.
• Create runbooks and knowledge articles for service desk.

Skills

Workplace Engineering

End-User Computing

Microsoft 365 Administration

Endpoint Management

PowerShell Scripting

Automation Tools (n8n)

Jira

ManageEngine

PKI / Certificate Management

Vendor & Licensing Management

Tools

Jira

ManageEngine

PKI / Certificate Management

n8n

PowerShell

Job description

We are seeking an experienced Workplace Platform Engineer to own and enhance our digital workplace ecosystem. This role will be responsible for Microsoft 365, Entra ID, Intune, endpoint management, automation, and productivity platforms, ensuring secure, scalable, and efficient workplace services across the organization.

The ideal candidate combines strong technical expertise with platform ownership, automation, security governance, and stakeholder management capabilities.

Key Responsibilities

Microsoft 365 & Identity Management

• Design, implement, and manage Microsoft 365 and Entra ID architecture.
• Administer Conditional Access, SSO, enterprise applications, privileged access, and identity governance.
• Troubleshoot and resolve complex identity and authentication issues.

Endpoint & Workplace Engineering

• Own Intune architecture, device compliance policies, security baselines, application deployment standards, and update management.
• Manage endpoint security integrations and lifecycle planning.
• Define and maintain workplace technology standards and service catalogues.

Productivity Platforms & Application Management

• Engineer, administer, and govern workplace applications including Jira, ManageEngine, n8n, DigiCert PKI, Figma, Adobe Experience Manager, and MarkMonitor.
• Partner with business teams to improve productivity and user experience.

Automation & Platform Optimization

• Develop and maintain automation solutions using PowerShell and n8n.
• Implement best practices for code review, secrets management, monitoring, and exception handling.
• Drive operational efficiency through workflow automation.

Security, Compliance & Governance

• Translate business security and compliance requirements into technical controls across M365 and endpoints.
• Manage platform risks, security exceptions, and compliance initiatives.
• Ensure alignment with organizational security standards.

Incident, Problem & Change Management

• Act as the escalation point for complex L2 issues involving endpoints, identities, collaboration, and workplace technologies.
• Lead root cause analysis and long-term problem resolution.
• Evaluate, approve, and implement major platform changes while ensuring rollback readiness and documentation accuracy.
• Manage vendor relationships, software licensing, renewals, and lifecycle planning.
• Optimize licensing costs and platform usage.

Service Desk Enablement

• Create and maintain runbooks, knowledge articles, operational procedures, and training materials.
• Establish effective escalation paths and empower Service Desk teams to resolve standard requests independently.

Required Skills & Experience

• Experience in Workplace Engineering, End-User Computing, Microsoft 365 Administration, or Endpoint Management.
• Strong hands-on expertise with:
• Microsoft 365
• Conditional Access
• Experience with PowerShell scripting and automation tools such as n8n.
• Working knowledge of Jira, ManageEngine, PKI/Certificate Management, and related workplace technologies.
• Proven ability to manage critical escalations and drive issues through to resolution.
• Experience managing software vendors, subscriptions, and licensing models.
• Excellent documentation, stakeholder communication, and technical leadership skills.