Senior Platform Engineer - Microsoft

Trupanion1; Seattle (WA); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Trupanion1 in Seattle, WA is seeking a Microsoft Platform Engineer for a hybrid schedule, in-office at least 3 days per week. You will own design and operation of Microsoft 365 E5 and endpoint management, including Intune, SCCM, and related services.

The role emphasizes hands-on implementation and strategic platform improvements to enable secure, scalable productivity for the organization. Collaboration with Infrastructure, Security, and business teams is key.

Qualifications

• Hands-on experience with Microsoft 365 Apps and security features.
• Ability to translate productivity needs into secure platform solutions.
• Strong collaboration with IT and business teams.

Responsibilities

• Own the design, implementation, and governance of Microsoft 365 E5 services.
• Administer Intune, SCCM, and endpoint management configurations.
• Engineer application packaging and deployment across endpoints.
• Develop patch management and endpoint security workflows.
• Partner with Service Desk and Security for compliance and user experience.

Tools

Microsoft 365 E5

Intune

SCCM

Exchange

Teams

Job description

US - Seattle only :

This position is open to candidates in the Seattle, WA area. You will have a hybrid remote/in-office schedule where you will work from our casual, pet-friendly office at least 3 days a week (Tuesday, Wednesday, and Thursday).

The Microsoft Platform Engineer serves as the technical SME and solution owner for our Microsoft 365 E5 and endpoint management ecosystem. This role will own the design, implementation, optimization, administer, and operational maturity of Microsoft 365 Apps (Exchange, Teams, Defender, Purview, Insights etc.), Intune, SCCM, application catalog services, endpoint compliance, and cloud patch management.

The ideal candidate is a hands‑on engineer who can operate as both an implementer and strategic solution provider. This person will help modernize endpoint management, improve application delivery, strengthen patch compliance, optimize Microsoft E5 capabilities, and create a better user experience across the organization. This role will work closely with Infrastructure, Service Desk, Security, Compliance, and business teams to deliver secure, scalable, and efficient Microsoft platform services.

Key Responsibilities

Microsoft 365 E5 Platform Ownership

• Serve as the technical SME and principal engineer for Microsoft 365 E5 services, with a focus on core productivity and collaboration platforms


• Own the engineering, configuration, governance, and operational support of Microsoft Office applications, including Outlook, Teams, Word, Excel, PowerPoint, OneDrive, SharePoint, and related Microsoft 365 services


• Evaluate existing Microsoft 365 E5 capabilities and identify opportunities to improve adoption, security, automation, compliance, and cost efficiency


• Partner with business stakeholders to understand productivity needs and translate them into secure, scalable Microsoft platform solutions


• Develop standards, best practices, and platform governance for Microsoft 365 service configuration and usage


• Act as an advocate for Microsoft 365 capabilities by educating teams on available tools, features, and productivity opportunities

Endpoint Management: SCCM, Intune, and Co-Management

• Engineer, administer, and optimize Microsoft Intune and Microsoft Configuration Manager/SCCM environments


• Lead endpoint management modernization efforts, including migration from traditional SCCM-heavy models to cloud-first or co-managed endpoint strategies


• Design and manage device compliance policies, configuration profiles, security baselines, endpoint restrictions, and conditional access integrations


• Develop and maintain Windows device enrollment, provisioning, Autopilot, and lifecycle management processes


• Manage endpoint standards for corporate devices, virtual desktops, remote users, and shared workstations


• Ensure endpoint management practices align with security, compliance, audit, and operational support requirements


• Provide Tier 3/engineering-level support for endpoint management escalations

Application Packaging, Deployment, and App Catalog

• Own the enterprise application catalog strategy for Microsoft-managed endpoints


• Package, test, deploy, and maintain business applications through Intune, SCCM, Company Portal, and other approved distribution mechanisms


• Develop application deployment standards, including detection rules, dependency management, rollback procedures, and user communication processes


• Partner with Service Desk and Application Support teams to ensure cataloged applications are current, accurate, supportable, and easy for users to access


• Establish repeatable intake, testing, approval, and publishing processes for new applications


• Monitor application deployment success rates, failures, remediation actions, and user adoption


• Identify opportunities to reduce manual installs, improve self-service, and streamline application lifecycle management

Cloud Patch Management and Endpoint Security Operations

• Design and implement modern patch management strategies using Intune, Windows Update for Business, Autopatch, SCCM, and related Microsoft technologies


• Own patch compliance reporting, exception handling, deployment rings, maintenance windows, and remediation workflows


• Partner with Security and Infrastructure teams to ensure timely remediation of vulnerabilities across Windows endpoints and Microsoft-managed devices


• Develop patching dashboards, compliance metrics, and executive-ready reporting for endpoint health


• Create controlled deployment strategies for OS updates, feature updates, driver updates, firmware updates, and third-party application updates where applicable


• Continuously improve patch success rates, reduce endpoint risk, and minimize disruption to end users

Solution Engineering and Platform Improvement

• Serve as a solution provider for business and IT teams by designing practical, scalable Microsoft-based solutions


• Lead technical discovery, requirements gathering, design, implementation, testing, rollout, and operational handoff for Microsoft platform initiatives


• Evaluate current-st