Manager, Client Platform Engineering

MongoDB•Palo Alto, CA

3d•Hybrid

About The Position

MongoDB is hiring a Manager, Client Platform Engineering to own its worldwide endpoint platform. The role leads a globally distributed team responsible for macOS, Windows, and Linux endpoints; mobile device and application management; zero-touch provisioning; operating system and patch delivery; and endpoint telemetry. The manager partners with InfoSec on endpoint security and sets technical direction while communicating strategy and risk to stakeholders. The position combines hands-on end-user computing expertise with people leadership. The manager owns endpoint architecture and roadmaps, operating system release and deployment-ring processes, endpoint management platforms, mobile management strategy, and the Endpoint Digital Employee Experience program. They also serve as an L3 escalation point, automate endpoint operations, manage vendor relationships and tooling budgets, and hire, coach, and retain a globally distributed engineering team. The position is based within reasonable commuting distance of MongoDB’s Palo Alto and San Francisco offices. The team has a flexible work arrangement, with in-person collaboration typically one to two times per week. Travel and regular work across time zones are required to lead the distributed team and support global initiatives.

Requirements

Bachelor’s degree in computer science or equivalent practical experience.
At least 8 years of experience in end-user computing, client platform engineering, or endpoint and modern workplace engineering, including at least 3 years hiring and leading engineers.
Proven experience owning several thousand endpoints across multiple countries and time zones.
Hands-on expertise across macOS, Windows, and Linux endpoint management, including modern macOS MDM and Apple Business/Automated Device Enrollment; Windows 11 with Intune, Autopilot, and Autopatch; and Linux managed as code with Ansible, Fleet, or an equivalent tool.
Current understanding of Apple declarative device management (DDM), including implications for software update enforcement, Platform SSO, configuration, and app delivery.
Experience with mobile MDM for corporate-owned devices and MAM/app protection for BYOD, including Intune App Protection Policies, Android Enterprise work profile, and Apple User Enrollment with Managed Apple Accounts.
Demonstrated record of delivering major OS rollouts on schedule with ring strategy, compatibility gating, communications, exceptions, and rollback.
Experience using a DEX or telemetry platform to instrument endpoints, define a score or SLO, and proactively resolve issues.
Endpoint automation and infrastructure-as-code scripting skills, with fluency in at least one of Bash, Python, Swift, or PowerShell and comfort with Git-based workflows.
Experience partnering with InfoSec, Identity, IT Service Delivery, and Workplace teams on cross-functional endpoint initiatives.
Experience leading engineers across multiple regions, with approaches to coverage, escalation, documentation, and asynchronous decision-making.
Excellent communication skills and ability to explain complex technical topics to varied audiences.
Experience with endpoint documentation and reporting, such as fleet compliance dashboards, configuration baselines, and operational runbooks.
Ability to work across multiple time zones as required by the business, including travel.

Nice To Haves

Jamf Certified Expert, Microsoft 365 Certified: Endpoint Administrator Associate, or equivalent endpoint management certification.
Visible participation in the endpoint community or open-source contributions to projects such as Munki, Installomator, Nudge, swiftDialog, or osquery.
Experience supporting a heavily technical employee population, including software engineers with elevated-privilege, virtualization, and local developer and AI tooling needs.
Experience with cloud identity and device trust platforms such as Okta and Microsoft Entra ID, and Conditional Access policy design.
Familiarity with ITSM practice, service ownership, and Experience Level Agreements (XLAs) alongside traditional SLAs.
Experience owning endpoint tooling budgets, vendor relationships, and licensing at scale.
Experience mentoring endpoint or systems engineers.

Responsibilities

Own worldwide endpoint architecture and roadmaps for macOS, Windows, Linux, and mobile, including management-platform strategy, configuration-as-code, application packaging and self-service, and zero-touch provisioning.
Lead operating system release calendars and deployment-ring strategies, delivering updates on time to published compliance targets with tested rollback plans and clear exception paths.
Administer and evolve endpoint management platforms, including declarative device management on macOS and Windows Autopilot and Autopatch on Windows 11.
Own mobile strategy for corporate-owned and BYOD devices across iOS and Android, balancing data protection and employee enrollment experience.
Build and operate the Endpoint Digital Employee Experience program, defining fleet instrumentation, DEX metrics and SLOs, and proactive remediation.
Partner with InfoSec to implement and improve endpoint security controls, including hardening baselines, patch and vulnerability remediation SLAs, disk encryption and key escrow coverage, device trust, and Conditional Access.
Serve as an L3 technical escalation point for complex endpoint issues.
Automate endpoint operations and improve reliability and observability through configuration-as-code, peer review, and staged rollouts.
Advise on endpoint management, DEX, and hardware vendor relationships and own endpoint tooling and licensing budgets.
Hire, coach, and retain a globally distributed team of EUC engineers and develop their expertise.
Keep the global endpoint fleet reliable, secure, compliant, and scalable across platforms and regions.
Reduce endpoint management, patching, and device lifecycle risk and technical debt.
Communicate endpoint strategy, risk, and incidents to technical and non-technical stakeholders.
Maintain strong documentation, automation, and change-management practices.
Balance long-term platform architecture work with day-to-day operational support.
Define, publish, and manage the team against service metrics.