Endpoint Automation Engineer

Design and maintain automation frameworks for endpoint enrollment, provisioning, configuration, application delivery and retirement. Build reusable tools, services and workflows using PowerShell, APIs and other appropriate programming languages. Integrate endpoint platforms with identity, security, infrastructure, asset and service-management systems. Apply Git, CI/CD, automated testing and configuration-as-code practices to make endpoint changes controlled, repeatable and auditable. Identify manual, error-prone or fragmented processes and redesign them as resilient, self-service automation. Translate endpoint security and compliance requirements into policy-as-code, automated controls and measurable outcomes. Automate operating-system and third-party application patching, vulnerability remediation and exception handling. Build automated guardrails for encryption, endpoint protection, authentication and device compliance. Create telemetry, dashboards and alerting that provide actionable visibility into automation performance, device health and risk. Partner with Security teams to automate evidence collection, audit reporting and remediation workflows. Define endpoint automation architecture, engineering standards and a roadmap that reduces operational effort and platform fragmentation. Engineer automated application packaging, deployment, update and rollback pipelines. Evaluate platform capabilities, APIs and emerging technologies for opportunities to simplify or extend endpoint automation. Troubleshoot complex failures across automation, endpoints, identity, networking, security and device-management services. Convert recurring incidents and support escalations into automated detection, remediation or prevention. Document automation designs, operating models and support procedures, and enable teams to use them effectively.

Minimum 5 years of experience building automation for endpoint operations in a modern enterprise environment. Hands-on expertise with Microsoft Intune, Entra ID, Windows Autopilot and endpoint compliance, with the ability to automate their administration through supported interfaces. Demonstrated ability to create production-quality automation using PowerShell, REST APIs, Microsoft Graph, or other programming languages. Experience automating application packaging, deployment, patching and vulnerability-remediation workflows. Practical knowledge of Git, CI/CD, testing, secrets management and controlled configuration deployment. Strong understanding of endpoint security, modern identity and the interaction between devices, cloud services and automation platforms. A bachelor’s degree in IT, Computer Science or equivalent practical experience. Automating macOS and Jamf, Linux endpoint management, or mobile device-management platforms. Azure or other cloud services for hosting functions, workflows, integrations and automation data. Infrastructure or configuration as code, automated testing and release pipelines. Vulnerability-management, endpoint-security or observability platforms with accessible APIs. SSO, OAuth, SQL and data-analysis technologies used in system integrations and reporting.

A competitive compensation package, of course. Time and resources to grow and develop, including a personal development budget and paid leave for learning days, as well as paid access to e-learning resources such as O’Reilly and LinkedIn Learning. Time to support life outside of work, with enhanced parental leave plus paid leave to care for loved ones and volunteer in local communities. Work flexibility, where TomTom’ers, in agreement with their manager and team, use both the office and home to focus, collaborate, learn and socialize. It’s all about getting the best out of both worlds – we ask TomTom’ers to come to the office two days a week, and the remaining three are free to be worked in either location. Improve your home office with a setup budget and get extra support with a monthly allowance. Enjoy options to work from your home country and abroad for a set number of days each year, to visit family and friends, or to simply explore the world we’re mapping. Take the holidays you want with a competitive holiday plan, plus an extra day off to celebrate your birthday. Join annual events like our Hackathon and DevDays to bring your ideas to life with talented teammates from around the world. Become a part of our inclusive global culture and have the chance to collaborate with a diverse community – we have over 80 nationalities at TomTom! Find out more about our global benefits and enjoy additional local benefits tailored to your location.