Senior Corporate Enterprise Platform Engineer, Windows

Dropbox, Inc.; United States; On-site; USD 141,000 - 215,000; Full time

Job summary

Dropbox, Inc. is seeking a Senior Client Platform Engineer to own Dropbox’s Windows endpoint platform, focusing on Intune-driven lifecycle, patching, and automation. You will evaluate FleetDM/osquery, infrastructure-as-code, and GitOps to improve reliability and visibility across the fleet.

You will collaborate with CorpInfra, IAM, Security, and support teams, mentor teammates, and drive multi-phase improvements while maintaining hands-on engineering ownership.

Qualifications

• Significant experience engineering and operating Windows endpoint environments with personal ownership beyond ticket handling.

Responsibilities

• Own endpoint reliability and lifecycle management across provisioning, delivery, updates, and security configuration.

Skills

Windows endpoint

Intune

PowerShell

Python

Go

GitOps

FleetDM

osquery

Automation

C#

Tools

FleetDM

osquery

Automox

Patch My PC

Job description

Role Description

As a Senior Client Platform Engineer on CorpFleet Engineering, you will own and improve Dropbox's Windows endpoint platform. You will bring deep Windows and Intune expertise, make patching and application delivery more reliable, and build automation that reduces recurring work for the team.

This is a hands-on role combining Windows technical ownership with the development of a more code-managed endpoint platform. You will help evaluate and adopt FleetDM, osquery, infrastructure-as-code, and GitOps practices where they improve reliability, visibility, and maintainability. You will strengthen the current environment while building and validating the path forward-not assume that replacing a tool is the answer.

You will work with CorpInfra, IAM, Security, and support teams to make practical technical decisions, lead multi-phase improvements, and clarify ownership. You will also mentor teammates through pairing, code review, and shared operational practices. This is an individual-contributor role, not a people-management position.

Responsibilities

• Own endpoint reliability and lifecycle management. Improve provisioning, application delivery, updates, security configuration, and troubleshooting across the endpoint environment.
• Make patching predictable and safe. Strengthen update workflows through testing, controlled rollouts, and remediation.
• Make fleet health trustworthy and actionable. Improve reporting on device health, patching, and configuration, with clear ownership for resolving issues.
• Build maintainable automation. Turn recurring work into reliable, tested workflows that other engineers can operate.
• Advance code-managed endpoint operations. Adopt tools and practices that improve configuration management, validation, and deployment.
• Lead cross-functional platform improvements. Define practical roadmaps, resolve dependencies, and balance security, reliability, employee experience, and team capacity.
• Strengthen the team's capability. Mentor teammates, review code and designs, and document reusable practices that improve coverage across the endpoint team.

Requirements

• Significant experience engineering and operating Windows endpoint environments, with personal ownership beyond ticket handling or routine console administration.
• Deep hands-on Intune experience across device lifecycle, configuration and compliance policies, application management, update workflows, and relevant Entra ID dependencies.
• Strong Windows troubleshooting skills across operating-system behavior, services, logs, networking, certificates, identity, and security controls. Able to distinguish reported management status from actual endpoint health.
• Recent ownership of Windows and third-party application patching, including staged deployment, user-impact validation, failed-device handling, exceptions, and recovery.
• Strong practical PowerShell skills and familiarity with at least one additional programming language, such as Python, Go, or C#. Experience building and maintaining production automation or systems integrations.
• Demonstrated use of version control, code review, automated checks, and controlled deployment for operational changes. Able to explain safe retries, failure handling, secrets management, and configuration drift.
• Ability to independently define and deliver multi-phase work, prioritize under ambiguity, partner across teams, and mentor other engineers.
• Clear written and verbal communication, including concise technical decisions, incident updates, runbooks, and effective asynchronous collaboration.

Preferred Qualifications

• Production experience with FleetDM on Windows, including agent operations, policies, queries, targeting, API integrations, or configuration managed through GitOps.
• Practical osquery and SQL experience for endpoint inventory, health, or security use cases, including query validation, performance considerations, and handling stale or missing results.
• Experience with infrastructure-as-code or declarative configuration, continuous integration and delivery, and migration or coexistence between endpoint-management platforms.
• Experience with Automox, Patch My PC, or comparable tools, and with endpoint privilege management, application control, encryption, or other security controls.
• Experience supporting developer-heavy, distributed environments and contributing reusable automation across Windows, macOS, or Linux.

Durable Skills

AI fluency means using these tools to amplify human judgment, not replace it. We believe people with these skills will thrive as work and technology continue to evolve:

• Awareness: Understand yourself and others.
• Judgment: Evaluate information and make decisions in complex situations.
• Adaptability: Learn, adjust, and stay effective through change.
• Connection: Communicate, collaborate, and build trust.

To learn more about why these skills matter and what the data shows about thriving through change, read this blog post from our Chief People Officer, Melanie Rosenwasser.

Compensation

US Zone 1: This role is not available in Zone 1

US Zone 2: $159,100 — $215,300 USD

US Zone 3: $141,400 — $191,400 USD