Senior Endpoint Platform Engineer (Intune & Jamf)

Tapestry

New York (NY)

On-site

USD 145,000 - 160,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k)

Paid Paternity and Maternity leave

Commuter Benefits

Disability insurance

Tuition assistance

Job summary

Tapestry, Inc. is seeking a skilled Client Platform Engineer to join our global End User Computing team.

This mid-senior role focuses on implementing and operating endpoint solutions across iOS, macOS, Android, and Windows 11 using Intune and Jamf, with MSP partnership to ensure secure, reliable experiences. The ideal candidate will have hands-on experience with modern provisioning like Windows Autopilot and ADE, plus automation, RBAC, and policy automation, as we modernize our endpoint

Qualifications

5+ years in endpoint engineering or support.
Experience with Intune including compliance, configuration, deployment.
Experience with Jamf Pro across iOS/macOS.
Experience with Windows Autopilot, ADE, and Android Enterprise.
Experience with hybrid Windows environments transitioning to cloud/Entra ID.
Knowledge of CIS, PCI DSS, NIST.
Knowledge of Entra ID and Conditional Access.
RBAC and Intune Scope Tags.
Automation and scripting with PowerShell and Graph API.
Experience with DEX tools such as Nexthink/ControlUp/1E.

Responsibilities

Engineer and maintain endpoint management across iOS, macOS, Android, Windows 11 with Intune and Jamf.
Design provisioning including Zero Touch and Autopilot enrollment.
Administer Jamf and Intune fleet management and automation.
Manage OS and firmware update strategies for security.
Support hybrid Windows Entra ID-based management and SCCM/MECM as needed.
Collaborate with IAM and M365 for endpoint identity configurations.
Implement RBAC and Intune Scope Tags for policy targeting.
Maintain endpoint security baselines per CIS/PCI/NIST.
Document SOPs and support materials.