Client Platform Engineer

Tapestry (Coach/Kate Spade); New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

Tapestry (Coach/Kate Spade) seeks a skilled Client Platform Engineer to lead endpoint management across iOS, macOS, Android, and Windows in a global End User Computing team.

You will implement standardization and operational excellence for endpoint solutions, partnering with an MSP to deliver secure, reliable user experiences and scale automation worldwide.

Qualifications

• 5+ years of experience in endpoint engineering or support across enterprise client platforms.
• Hands-on experience with Intune, including compliance, configuration, app deployment, and troubleshooting on Windows 11 and Android.
• Experience with hybrid Windows environments during cloud/Entra ID transition, SCCM/MECM lifecycle management.
• Hands-on expertise with Jamf Pro for macOS/iOS device management.

Responsibilities

• Engineer and maintain endpoint management across iOS, macOS, Windows, Android using Intune and Jamf.
• Design provisioning approaches including Zero Touch for Windows Autopilot and Apple ADE via ABM.
• Administer Jamf/Intune fleets: profiles, inventory, compliance reporting, automation.
• Oversee application lifecycle including macOS packaging and iOS/Android app deployment.
• Ensure device security baselines and policy enforcement across platforms.
• Collaborate with IAM and M365 teams on Entra ID configurations.

Skills

Endpoint engineering

Cross-functional collaboration

Scripting

Tools

Microsoft Intune

Jamf Pro

PowerShell

Microsoft Graph API

Job description

We believe that difference sparks brilliance, so we welcome people and ideas from everywhere to join us in stretching what's possible.

At Tapestry, being true to yourself is core to who we are. When each of us brings our individuality to our collective ambition, our creativity is unleashed. This global house of brands - Coach and Kate Spade New York - was built by unconventional entrepreneurs and unexpected solutions, so when we say we believe in dreams, we mean we believe in making them happen. We're always on a journey to becoming our best, but you can count on this: Here, your voice is valued, your ambitions are supported, and your work is recognized.

A member of the Tapestry family, we are part of a global house of brands that has unwavering optimism and is committed to being innovative and wholly inclusive. Visit Our People page to learn more about Tapestry's commitment to equity, inclusion, and diversity.

Job Summary

We are seeking a skilled and detail-oriented Client Platform Engineer to join our global End User Computing team. This mid-senior level role focuses on the implementation, standardization, and operational excellence of endpoint solutions across all end user compute platforms in partnership with a Managed Service Provider (MSP). The ideal candidate will bring strong engineering fundamentals and deep hands‑on experience managing modern endpoints across iOS, iPadOS, macOS, Android, and Windows 11 using enterprise endpoint management tools, including Microsoft Intune and Jamf. This role supports both physical devices and virtual endpoints, ensuring consistent, secure, and reliable user experiences. Experience with automation at scale is required.

Key Responsibilities

• Engineer, implement, and maintain endpoint management solutions across iOS, iPadOS, macOS, Android, and Windows 11 using enterprise tooling, including Microsoft Intune and Jamf, plus platform-native capabilities.
• Design and operate modern provisioning approaches including Zero Touch provisioning for supported platforms (e.g., Windows Autopilot, Apple Automated Device Enrollment (ADE) via Apple Business Manager, and Android Enterprise enrollment methods).
• Administer and optimize Jamf and Intune for fleet management, including configuration profiles, restrictions, inventory, compliance reporting, and policy/workflow automation.
• Engineer application lifecycle management across platforms, including macOS packaging and deployment, iOS/iPadOS app distribution, and Windows/Android application deployment through available management channels.
• Ensure device compliance with enterprise policies and standards, including CIS, PCI DSS, and other regulatory frameworks.
• Manage OS and firmware update strategies across the fleet (e.g., Windows Update for Business, Autopatch, macOS/iOS/iPadOS DDM) to maintain security posture and user productivity.
• Support the ongoing transition of the Windows endpoint environment to cloud / Entra ID-based management while continuing to support hybrid-joined devices, including limited SCCM/MECM lifecycle management as needed.
• Collaborate with IAM and M365 partner teams on shared responsibilities, particularly around Microsoft Entra ID and endpoint identity/access configurations.
• Understand and support Conditional Access policies and their impact on endpoint behavior and user experience across platforms.
• Configure and manage administrative controls, including RBAC and segmentation constructs (e.g., Intune Scope Tags where applicable), to ensure proper administrative segmentation and policy targeting.
• Implement and maintain endpoint security baselines and configuration standards (e.g., Windows security baselines, macOS configuration profiles, iOS/iPadOS restrictions, and Android enterprise policies).
• Monitor and optimize device performance and user experience using DEX (Digital Employee Experience) tools.
• Support automation and reporting efforts using PowerShell, scripting, and Microsoft Graph API (and equivalent platform tooling where applicable).
• Partner with a Site Reliability Engineer (SRE) to support desktop application management through shared tooling responsibilities across Windows and macOS, and coordinate mobile app management for iOS/iPadOS and Android.
• Guide operational documentation, SOPs, and support materials for multi-platform endpoint management.

Required Qualifications

• 5+ years of experience in endpoint engineering or support across one or more enterprise client platforms.
• Hands‑on expertise with Microsoft Intune, including compliance, configuration, application deployment, reporting, and troubleshooting across supported platforms (including Windows 11 and Android).
• Experience supporting hybrid Windows environments during transition to cloud / Entra ID-based management, including some SCCM/MECM (Configuration Manager) lifecycle management.
• Hands‑on expertise with Jamf Pro, including configuration profiles, policies, inventory, application deployment, and t