SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 141,400 - 215,300 / annual
Dropbox is seeking a Senior Client Platform Engineer to own and improve the Windows endpoint platform for corporate infrastructure. This is a hands-on individual-contributor role combining deep Windows technical ownership with the development of a code-managed endpoint platform.
You will be responsible for endpoint reliability and lifecycle management, including provisioning, application delivery, updates, security configuration, and troubleshooting. Key responsibilities include making patching predictable and safe through testing and controlled rollouts; improving fleet health reporting and device visibility; building maintainable automation that reduces recurring work; advancing code-managed endpoint operations through tools like FleetDM, osquery, and infrastructure-as-code; leading cross-functional platform improvements with Security, IAM, and support teams; and mentoring teammates through pairing, code review, and documentation of reusable practices.
You will work with CorpInfra, IAM, Security, and support teams to make practical technical decisions, define roadmaps, resolve dependencies, and balance security, reliability, employee experience, and team capacity. The role emphasizes strengthening the current environment while building and validating the path forward, rather than assuming tool replacement is always the answer.
This is explicitly not a people-management position, though mentorship and technical leadership are core expectations.
**Requirements:**
- Significant hands-on experience engineering and operating Windows endpoint environments, with personal ownership beyond ticket handling or routine console administration
- Deep hands-on Intune expertise across device lifecycle, configuration and compliance policies, application management, update workflows, and Entra ID dependencies
- Strong Windows troubleshooting skills across OS behavior, services, logs, networking, certificates, identity, and security controls; ability to distinguish reported management status from actual endpoint health
- Recent ownership of Windows and third-party application patching, including staged deployment, user-impact validation, failed-device handling, exceptions, and recovery
- Strong practical PowerShell skills and familiarity with at least one additional programming language (Python, Go, or C#); experience building and maintaining production automation or systems integrations
- Demonstrated use of version control, code review, automated checks, and controlled deployment for operational changes; ability to explain safe retries, failure handling, secrets management, and configuration drift
- Ability to independently define and deliver multi-phase work, prioritize under ambiguity, partner across teams, and mentor other engineers
- Clear written and verbal communication, including concise technical decisions, incident updates, runbooks, and effective asynchronous collaboration
**Preferred Qualifications:**
- Production experience with FleetDM on Windows, including agent operations, policies, queries, targeting, API integrations, or GitOps-managed configuration
- Practical osquery and SQL experience for endpoint inventory, health, or security use cases
- Experience with infrastructure-as-code, declarative configuration, CI/CD, and platform migrations or coexistence
- Experience with Automox, Patch My PC, or comparable tools; endpoint privilege management, application control, encryption, or other security controls
- Experience supporting developer-heavy, distributed environments and contributing reusable automation across Windows, macOS, or Linux
