Senior Corporate Enterprise Platform Engineer, Windows

Dropbox; San Francisco (CA); Remote; USD 150,000 - 215,000; Full time

Benefits offered by this job

Stock RSUs

Remote-friendly culture

Travel 5–10%

Job summary

Dropbox is seeking a Senior Corporate Enterprise Platform Engineer for Windows to own and evolve the Windows endpoint platform within CorpFleet Engineering. You will drive reliability, implement fleet health reporting, and build automation that reduces repetitive work.

You will collaborate with CorpInfra, IAM, Security, and support teams while mentoring peers and guiding multi‑phase improvements. This is an individual contributor role with no direct reports.

Qualifications

• Significant hands-on experience engineering and operating Windows endpoint environments.
• Deep hands-on Intune experience across device lifecycle, configuration and compliance policies.
• Strong Windows troubleshooting skills across OS behavior, logs, networking, identity, and security controls.

Responsibilities

• Own endpoint reliability and lifecycle management across provisioning, delivery, updates, and security configuration.
• Make patching workflows predictable with testing, controlled rollouts, and remediation.
• Improve fleet health reporting with clear ownership and actionable insights.
• Build maintainable automation to convert recurring work into reliable workflows.
• Advance code-managed endpoint operations using GitOps practices and tooling.
• Lead cross-functional platform improvements with practical roadmaps and dependency resolution.
• Mentor teammates through pairing, code reviews, and shared operational practices.

Skills

Windows endpoint engineering

Intune management

PowerShell

Python

GitOps

Tools

FleetDM

osquery

Automox

Patch My PC

Job description

Senior Corporate Enterprise Platform Engineer, Windows

As a Senior Client Platform Engineer on CorpFleet Engineering, you will own and improve Dropbox’s Windows endpoint platform. You will bring deep Windows and Intune expertise, make patching and application delivery more reliable, and build automation that reduces recurring work for the team.

• Remote - US: Select locations
• Remote
• Full Time
• Dropbox is a Virtual First company. For this role, we are hiring in Zones 2 and 3. Zones are determined by your zip code; if you’re within 100 miles of a listed metro area (straight-line radius), you’re included in that Zone.

This is a hands‑on role combining Windows technical ownership with the development of a more code‑managed endpoint platform. You will help evaluate and adopt FleetDM, osquery, infrastructure‑as‑code, and GitOps practices where they improve reliability, visibility, and maintainability. You will strengthen the current environment while building and validating the path forward—not assume that replacing a tool is the answer.

You will work with CorpInfra, IAM, Security, and support teams to make practical technical decisions, lead multi-phase improvements, and clarify ownership. You will also mentor teammates through pairing, code review, and shared operational practices. This is an individual-contributor role, not a people‑management position.

Responsibilities

• Own endpoint reliability and lifecycle management. Improve provisioning, application delivery, updates, security configuration, and troubleshooting across the endpoint environment.
• Make patching predictable and safe. Strengthen update workflows through testing, controlled rollouts, and remediation.
• Make fleet health trustworthy and actionable. Improve reporting on device health, patching, and configuration, with clear ownership for resolving issues.
• Build maintainable automation. Turn recurring work into reliable, tested workflows that other engineers can operate.
• Advance code-managed endpoint operations. Adopt tools and practices that improve configuration management, validation, and deployment.
• Lead cross‑functional platform improvements. Define practical roadmaps, resolve dependencies, and balance security, reliability, employee experience, and team capacity.
• Strengthen the team’s capability. Mentor teammates, review code and designs, and document reusable practices that improve coverage across the endpoint team.

Requirements

• Significant experience engineering and operating Windows endpoint environments, with personal ownership beyond ticket handling or routine console administration.
• Deep hands‑on Intune experience across device lifecycle, configuration and compliance policies, application management, update workflows, and relevant Entra ID dependencies.
• Strong Windows troubleshooting skills across operating‑system behavior, services, logs, networking, certificates, identity, and security controls. Able to distinguish reported management status from actual endpoint health.
• Recent ownership of Windows and third‑party application patching, including staged deployment, user‑impact validation, failed‑device handling, exceptions, and recovery.
• Strong practical PowerShell skills and familiarity with at least one additional programming language, such as Python, Go, or C#. Experience building and maintaining production automation or systems integrations.
• Demonstrated use of version control, code review, automated checks, and controlled deployment for operational changes. Able to explain safe retries, failure handling, secrets management, and configuration drift.
• Ability to independently define and deliver multi‑phase work, prioritize under ambiguity, partner across teams, and mentor other engineers.
• Clear written and verbal communication, including concise technical decisions, incident updates, runbooks, and effective asynchronous collaboration.

Preferred Qualifications

• Production experience with FleetDM on Windows, including agent operations, policies, queries, targeting, API integrations, or configuration managed through GitOps.
• Practical osquery and SQL experience for endpoint inventory, health, or security use cases, including query validation, performance considerations, and handling stale or missing results.
• Experience with infrastructure-as-code or declarative configuration, continuous integration and delivery, and migration or coexistence between endpoint‑management platforms.
• Experience with Automox, Patch My PC, or comparable tools, and with endpoint privilege management, application control, encryption, or other security controls.
• Experience supporting developer‑heavy, distributed environments and contributing reusable automation across Windows, macOS, or Linux.

Durable Skills

AI fluency means using these tools to amplify human judgment, not replace it. We believe people with these skills will thrive as work and technology continue to evolve:

• Awareness: Understand yourself and others.
• Judgment: Evaluate information and make decisions in complex situations.
• Adaptability: Learn, adjust, and stay effective through change.
• Connection: Communicate, collaborate, and build trust.

Compensation

US Zone 1

This role is not available in Zone 1

US Zone 2

$159,100—$215,300 USD

US Zone 3

$141,400—$191,400 USD

The range(s) listed above is the expected annual salary/OTE (On-Target Earnings) for this role, subject to change. Please note, OTE are for sales roles only.

Salary/OTE is just one component of Dropbox’s total rewards package. All regular employees are also eligible for the corporate bonus program or a sales incentive (target included in OTE) as well as stock in the form of Restricted Stock Units (RSUs).

Dropbox takes a number of factors into account when determining individual starting pay, including job and level they are hired into, location/metropolitan area, skillset, and peer compensation. We target most new hire offers between the minimum up to the middle of the range.

Dropbox uses the zip code of an employee’s remote work location to determine which metropolitan pay range we use. Current US Zone locations are as follows:

• US Zone 1: San Francisco metro, New York City metro, or Seattle metro
• US Zone 2: California (outside SF metro), Colorado, Connecticut (outside NYC metro), Delaware, Illinois (Chicago metro), Indiana (Chicago metro), Maryland, Massachusetts, Michigan (Chicago metro), New Hampshire, New Jersey (outside NYC metro), New York (outside NYC metro), Oregon, Pennsylvania (D.C. metro), Pennsylvania (outside NYC metro), Texas (Austin metro) Virginia (DC metro), Washington (outside Seattle metro), Washington DC metro, West Virginia (DC metro), Wisconsin (Chicago metro)
• US Zone 3: All other US locations

Virtual First

Dropbox’s Virtual First way of working is designed to help people do their best work with flexibility, autonomy, and connection. Day to day, teams work remotely with nonlinear schedules and core collaboration hours that support deep focus and individual working styles. We prioritize asynchronous communication to improve clarity, respect deep work time, and reduce unnecessary meetings. While remote work is the primary experience for our employees, we also prioritize intentional, in‑person connection. We bring teams together through regular team gatherings, on‑demand workspaces, and Dropbox Neighborhood events in order to strengthen team cohesion, foster creativity, and enhance momentum.

This role requires travel to offsites and various other team gatherings (approximately 5-10% of the year or 2-3 days per quarter).

AI Fluency

AI fluency is a core part of how we work and grow. It’s not about being an expert—it’s about using these tools thoughtfully and effectively to improve your work and support others. We look for four key behaviors in candidates:

• Ownership: You use AI responsibly by protecting data, applying sound judgment, and taking accountability for the quality and accuracy of your work.
• Experimentation: You explore new AI capabilities and apply them to improve workflows within approved tools and practices.
• Leverage: You use AI to enhance thinking, improve efficiency, and increase your impact and your team’s.
• Learning: You stay current on emerging AI tools and trends, continuously build your skills, and share what you learn with others.

Dropbox supports responsible use of AI for preparation, but misrepresentation of skills or experience is not permitted.

Team Description

The Dropbox Engineering Team develops the technology, platforms, and products that create more enlightened ways of working for hundreds of millions of people. Customers rely on Dropbox to manage, share, and collaborate on content seamlessly—our engineering makes that easier and intuitive than ever before.

I feel trusted at Dropbox. Here, I’m free to make decisions, own my work end‑to‑end, and contribute to the company beyond my role.

Ragul, Tech Lead

Dropbox has transformed my career, and I feel empowered to make an impact every single day. I love working with exceptional people in an environment that supports growth, innovation, and disruption.

Rachel, Security Engineer