Principal Endpoint Platform Engineer

Roblox•San Mateo, CA

3d•$230,980 - $267,390•Onsite

About The Position

Roblox is seeking a Principal Endpoint Platform Engineer to serve as the technical architect of its global endpoint ecosystem. Reporting to the Client Services Manager, this role defines the long-term strategy for scaling, securing, and evolving the device fleet. The engineer will establish architectural standards, drive automation-first platform design, and ensure builders have secure, reliable tools. The role also strengthens security across a complex hybrid environment and mentors engineers. The position leads platform initiatives from architecture through global deployment and operational maturity, and works across Corporate Engineering, Security, Engineering, and People Ops to align technical roadmaps with company goals. It is a senior technical escalation point for architectural issues involving hardware, software, and enterprise networking, and participates in the team’s on-call rotation for critical availability and security incidents.

Requirements

8+ years of experience in endpoint engineering, systems architecture, or infrastructure engineering.
Proven experience securing and managing global fleets of 5,000+ devices.
Deep expertise with endpoint management platforms such as Jamf Pro, Workspace ONE, Google Endpoint Management, Fleet, or Microsoft Intune.
Strong programming ability in Python, Bash, Go, or Ruby, focused on automation and systems integration.
Experience implementing Infrastructure-as-Code and GitOps-based configuration management.
Advanced knowledge of Identity and Access Management and Zero Trust architecture across Okta, Google Workspace, and Entra ID.
Strong understanding of PKI, certificate lifecycle management, and enterprise networking security.
Demonstrated ability to lead large technical initiatives and influence cross-functional stakeholders.

Responsibilities

Standardize the global security and management strategy for macOS, Windows, Linux, Android, iOS, and ChromeOS devices, ensuring performance and compliance.
Evolve the deployment pipeline and automate endpoint patches, operating system upgrades, and certificate lifecycles.
Strengthen endpoint security in partnership with InfoSec by designing automated remediation workflows and deploying observability tools such as CrowdStrike and Kolide.
Design and scale internally owned systems in a hybrid environment.
Lead complex platform initiatives from architecture through global deployment and operational maturity.
Collaborate with Corporate Engineering, Security, Engineering, and People Ops to align technical roadmaps with company goals.
Turn ambiguous technical requirements into scalable engineering solutions.
Serve as a technical escalation point for architectural failures involving hardware, software, and enterprise networking.
Participate in the team’s on-call rotation, responding to critical system availability issues and high-priority security incidents.
Mentor junior and senior team members.