The job, in the employer's words
About the role
We are looking for a hands-on Endpoint Automation Engineer to design, build and continuously improve the automation that powers our global endpoint environment. This is a cross-platform engineering role focused on making endpoint services scalable, secure, reliable and consistent across Windows, macOS, Linux and mobile devices.
You will replace repetitive administration with reusable code, integrations and event-driven workflows. Working across endpoint management, identity, security, application delivery, observability and device lifecycle services, you will use the Microsoft technology stack as core platforms while creating automation that operates across a broader endpoint technology ecosystem.
Engineering mindset
Automation is the product, not an afterthought. We are looking for someone who sees a repetitive task, fragile hand-off or one-off script and asks, “How can we make this reliable, reusable and self-service?”
You should be comfortable investigating unfamiliar systems, working from API documentation and turning operational requirements into maintainable automation. Your designs account for failure, test before release, instrument what you build and favour reusable services over isolated scripts. You take ownership from design through operation, document your solutions and balance long-term engineering improvements with immediate business needs.
What success looks like
You will measurably reduce manual work, deployment lead time and configuration inconsistency across the endpoint estate. Provisioning, configuration, software delivery, patching, compliance and lifecycle processes will become increasingly automated, observable, auditable and recoverable.
Over time, you will help establish a shared Endpoint Automation model in which cross-platform services are delivered through reusable code, APIs, pipelines and common engineering standards rather than only platform-specific administration.
What you'll do
-
Design and maintain automation frameworks for endpoint enrollment, provisioning, configuration, application delivery and retirement.
-
Build reusable tools, services and workflows using PowerShell, APIs and other appropriate programming languages.
-
Integrate endpoint platforms with identity, security, infrastructure, asset and service-management systems.
-
Apply Git, CI/CD, automated testing and configuration-as-code practices to make endpoint changes controlled, repeatable and auditable.
-
Identify manual, error-prone or fragmented processes and redesign them as resilient, self-service automation.
-
Translate endpoint security and compliance requirements into policy-as-code, automated controls and measurable outcomes.
-
Automate operating-system and third-party application patching, vulnerability remediation and exception handling.
-
Build automated guardrails for encryption, endpoint protection, authentication and device compliance.
-
Create telemetry, dashboards and alerting that provide actionable visibility into automation performance, device health and risk.
-
Partner with Security teams to automate evidence collection, audit reporting and remediation workflows.
-
Define endpoint automation architecture, engineering standards and a roadmap that reduces operational effort and platform fragmentation.
-
Engineer automated application packaging, deployment, update and rollback pipelines.
-
Evaluate platform capabilities, APIs and emerging technologies for opportunities to simplify or extend endpoint automation.
-
Troubleshoot complex failures across automation, endpoints, identity, networking, security and device-management services.
-
Convert recurring incidents and support escalations into automated detection, remediation or prevention.
-
Document automation designs, operating models and support procedures, and enable teams to use them effectively.
Endpoint Platforms & Automation
Security, Compliance & Observability
Engineering, Lifecycle & Support
What you'll need
- Minimum 5 years of experience building automation for endpoint operations in a modern enterprise environment.
-
Hands-on expertise with Microsoft Intune, Entra ID, Windows Autopilot and endpoint compliance, with the ability to automate their administration through supported interfaces.
-
Demonstrated ability to create production-quality automation using PowerShell, REST APIs, Microsoft Graph, or other programming languages.
-
Experience automating application packaging, deployment, patching and vulnerability-remediation workflows.
-
Practical knowledge of Git, CI/CD, testing, secrets management and controlled configuration deployment.
-
Strong understanding of endpoint security, modern identity and the interaction between devices, cloud services and automation platforms.
-
A bachelor’s degree in IT, Computer Science or equivalent practical experience.
-
Automating macOS and Jamf, Linux endpoint management, or mobile device-management platforms.
-
Azure or other cloud services for hosting functions, workflows, integrations and automation data.
-
Infrastructure or configuration as code, automated testing and release pipelines.
-
Vulnerability-management, endpoint-security or observability platforms with accessible APIs.
-
SSO, OAuth, SQL and data-analysis technologies used in system integrations and reporting.
Additional experience that would be valuable:
Benefits mentioned
- A competitive compensation package, of course.
- Time and resources to grow and develop, including a personal development budget and paid leave for learning days, as well as paid access to e-learning resources such as O’Reilly and LinkedIn Learning.
- Time to support life outside of work, with enhanced parental leave plus paid leave to care for loved ones and volunteer in local communities.
- Work flexibility, where TomTom’ers, in agreement with their manager and team, use both the office and home to focus, collaborate, learn and socialize. It’s all about getting the best out of both worlds – we ask TomTom’ers to come to the office two days a week, and the remaining three are free to be worked in either location.
- Improve your home office with a setup budget and get extra support with a monthly allowance.
- Enjoy options to work from your home country and abroad for a set number of days each year, to visit family and friends, or to simply explore the world we’re mapping.
- Take the holidays you want with a competitive holiday plan, plus an extra day off to celebrate your birthday.
- Join annual events like our Hackathon and DevDays to bring your ideas to life with talented teammates from around the world.
- Become a part of our inclusive global culture and have the chance to collaborate with a diverse community – we have over 80 nationalities at TomTom!
- Find out more about our global benefits and enjoy additional local benefits tailored to your location.
No Mondays shows this listing as the employer published it. Check the details on the employer's site before you apply.