Overview
The Regional Platform Engineering Focal plays a key role in supporting End User Device (EUD) activities across the Americas, acting as the primary regional point of expertise for platform engineering. This role provides dedicated, in‑region support to ensure the effective delivery of EUD services, while maintaining strong alignment with global standards, strategies, and initiatives. Operating as a senior engineer, the focal point is expected to work independently across a broad range of regional activities, including troubleshooting, implementation support, and coordination of ongoing platform improvements. The role is responsible for ensuring consistent and high‑quality regional delivery, as well as acting as a trusted advisor to regional leads by providing guidance on requests that may require cross‑regional collaboration or escalation to global teams. A core aspect of the role is bridging regional execution with global direction. The Regional Platform Engineering Focal evaluates regional demand and identifies when initiatives meet the criteria for broader global deployment, ensuring that solutions are scalable, standardised, and aligned with the wider EUD roadmap. This includes proactively engaging with global stakeholders to support the transition of regional solutions into globally adopted services where appropriate. While the role operates with a high degree of autonomy within the region, it is fully supported by the wider EUD function during overlapping hours. This enables effective collaboration, knowledge sharing, and escalation pathways, ensuring that regional activities benefit from global expertise and that any complex or large‑scale requirements are addressed efficiently.
Responsibilities
- Administer and optimise macOS and iOS, including configuration profiles, policies, smart groups, extension attributes, scripts, and security controls.
- Configure and manage Microsoft Intune (Endpoint Manager) for Windows and mobile endpoints, including configuration profiles, compliance policies, app protection, and Autopilot provisioning.
- Manage endpoint lifecycle across both platforms: enrollment, provisioning, patching, updates, and decommissioning.
- Implement and maintain zero‑touch/automated deployment workflows using Apple Business Manager/Windows Autopilot packages, deploy and update applications and OS versions at scale.
- Monitor compliance, health, and inventory; produce regular reports and dashboards for IT leadership and security teams.
- Collaborate with security and identity teams to integrate MDM tooling with Entra ID/Azure AD, Conditional Access, and endpoint security tools such as EDR.
- Automate repetitive tasks and workflows using Bash, PowerShell, or Python to reduce manual effort and improve reliability.
- Contribute to documentation of standards, runbooks, and knowledge‑base articles for IT support teams.
- Participate in endpoint‑related projects such as OS migrations, security hardening initiatives, and new site or business‑unit rollouts.
Skills & Attributes
You're good at what you do and possess the required experience to prove it. You have a growth mindset, keen to drive your own personal and professional development. You are customer‑focused, prioritising customer success in your work. You are open and borderless, naturally inclusive in how you work with others.
Qualifications
- 3–5 years of experience in endpoint management or systems administration in a mid‑to large‑scale environment.
- Hands‑on administration experience with macOS (profiles, policies, smart groups, scripts, and patch management).
- Hands‑on administration experience with Microsoft Intune/Endpoint Manager for Windows endpoints (configuration profiles, compliance policies, app deployment, and Autopilot).
- Strong understanding of MDM concepts, device lifecycle, and modern management for macOS and Windows.
- Scripting proficiency in at least one language commonly used for endpoint automation (PowerShell, Bash, or Python).
- Solid grasp of core networking and security concepts (DNS, DHCP, VPN, certificates, conditional access, endpoint security).
- Experience working with identity platforms such as Entra ID/Azure AD, including device compliance.
- Strong troubleshooting skills and experience serving as an escalation point for desktop/support.
- Clear written and verbal communication skills and the ability to work cross‑functionally with IT, security, and business stakeholders.
