Senior Platform Engineer - Microsoft

Trupanion•Seattle, WA

1d•Hybrid

About The Position

Trupanion is seeking a Senior Platform Engineer specializing in Microsoft technologies for their Seattle office. This hybrid role requires at least three days a week in the office and involves being the technical subject matter expert and solution owner for the Microsoft 365 E5 and endpoint management ecosystem. The engineer will be responsible for the design, implementation, optimization, administration, and operational maturity of Microsoft 365 applications (including Exchange, Teams, Defender, Purview, Insights), Intune, SCCM, application catalog services, endpoint compliance, and cloud patch management. The ideal candidate is a hands-on engineer capable of both implementing solutions and providing strategic direction to modernize endpoint management, enhance application delivery, improve patch compliance, optimize E5 capabilities, and elevate the user experience. This role collaborates closely with Infrastructure, Service Desk, Security, Compliance, and business teams to deliver secure, scalable, and efficient Microsoft platform services.

Requirements

7+ years of IT infrastructure, endpoint engineering, or Microsoft platform experience
5+ years of experience with Microsoft 365 administration
5+ years of experience with SCCM/Microsoft Configuration Manager
3+ years of experience with Microsoft Intune
3+ years of Software/Tools/Automation development experience
Strong experience with Windows endpoint management, Office applications, app packaging, and patching
Strong PowerShell scripting and automation skills
Experience with Windows Autopilot, Company Portal, update rings, compliance policies, and app deployment
Strong troubleshooting, documentation, and stakeholder communication skills
Microsoft 365 and E5 Platform Expertise
Strong hands-on experience with Microsoft 365 E5 services and administration
Deep understanding of Office desktop applications, Teams, Outlook, OneDrive, SharePoint, Exchange Online, Copilot, Defender, Purview, Insights and Microsoft 365 Apps for Enterprise
Experience with Microsoft 365 Admin Center, Endpoint Manager Admin Center, Entra ID, and related admin portals
Ability to configure, support, and troubleshoot Microsoft productivity platforms in an enterprise environment
Understanding of Microsoft licensing concepts, especially E5 capability differences and optimization opportunities
Endpoint Management Skills
Advanced experience with Microsoft Intune
Advanced experience with Microsoft Configuration Manager/SCCM
Strong understanding of co-management, cloud attach, device collections, deployment rings, compliance policies, and configuration profiles
Experience with Windows Autopilot, Windows enrollment, device provisioning, and endpoint lifecycle management
Experience managing Windows 11 enterprise endpoints
Ability to troubleshoot endpoint policy application, device compliance, enrollment failures, deployment issues, and configuration drift
Application Packaging and Deployment Experience
Experience packaging and deploying applications using Intune and SCCM
Knowledge of MSI, EXE, Win32 app packaging, PowerShell-based deployments, detection rules, dependencies, superdense, and uninstall logic
Experience managing self-service app catalogs through Company Portal or similar enterprise portals
Ability to standardize software deployment processes and improve app delivery reliability
Experience with application testing, rollback planning, and production deployment governance
Patch Management and Security Alignment
Strong knowledge of Windows Update for Business, Intune update rings, feature update policies, quality updates, and driver management.
Experience with SCCM software updates, ADRs, patch collections, maintenance windows, and compliance reporting
Understanding of vulnerability remediation workflows and endpoint security hygiene
Ability to partner with Security teams to prioritize patching based on risk, severity, exploitability, and business impact
Experience building patch compliance reports and operational dashboards
Automation and Scripting
Strong PowerShell scripting skills for automation, reporting, troubleshooting, and endpoint remediation
Experience using Microsoft Graph PowerShell or Graph API is highly preferred
Ability to automate repetitive endpoint and Microsoft 365 administration tasks
Familiarity with remediation scripts, proactive remediations, detection scripts, and configuration validation
Understanding of JSON, CSV, REST APIs, and automation workflows is preferred
Operational and Soft Skills
Strong analytical and troubleshooting skills
Ability to work independently as a senior technical owner
Strong documentation and communication skills
Ability to explain technical concepts to both technical and non-technical audiences
Strong customer-service mindset with focus on user experience
Ability to balance security, usability, compliance, and operational efficiency
Experience working in ITIL-based environments, including incident, problem, change, and request management
Ability to mentor junior team members and influence peers without direct authority
Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time.

Nice To Haves

Microsoft 365 Certified: Endpoint Administrator Associate
Experience with Entra ID, Defender for Endpoint, Conditional Access, Autopatch, and Microsoft Graph
Experience with Power BI or other reporting tools
Experience in ITIL, SOX, audit, or regulated environments.

Responsibilities

Serve as the technical SME and principal engineer for Microsoft 365 E5 services, with a focus on core productivity and collaboration platforms.
Own the engineering, configuration, governance, and operational support of Microsoft Office applications, including Outlook, Teams, Word, Excel, PowerPoint, OneDrive, SharePoint, and related Microsoft 365 services.
Evaluate existing Microsoft 365 E5 capabilities and identify opportunities to improve adoption, security, automation, compliance, and cost efficiency.
Partner with business stakeholders to understand productivity needs and translate them into secure, scalable Microsoft platform solutions.
Develop standards, best practices, and platform governance for Microsoft 365 service configuration and usage.
Act as an advocate for Microsoft 365 capabilities by educating teams on available tools, features, and productivity opportunities.
Engineer, administer, and optimize Microsoft Intune and Microsoft Configuration Manager/SCCM environments.
Lead endpoint management modernization efforts, including migration from traditional SCCM-heavy models to cloud-first or co-managed endpoint strategies.
Design and manage device compliance policies, configuration profiles, security baselines, endpoint restrictions, and conditional access integrations.
Develop and maintain Windows device enrollment, provisioning, Autopilot, and lifecycle management processes.
Manage endpoint standards for corporate devices, virtual desktops, remote users, and shared workstations.
Ensure endpoint management practices align with security, compliance, audit, and operational support requirements.
Provide Tier 3/engineering-level support for endpoint management escalations.
Own the enterprise application catalog strategy for Microsoft-managed endpoints.
Package, test, deploy, and maintain business applications through Intune, SCCM, Company Portal, and other approved distribution mechanisms.
Develop application deployment standards, including detection rules, dependency management, rollback procedures, and user communication processes.
Partner with Service Desk and Application Support teams to ensure cataloged applications are current, accurate, supportable, and easy for users to access.
Establish repeatable intake, testing, approval, and publishing processes for new applications.
Monitor application deployment success rates, failures, remediation actions, and user adoption.
Identify opportunities to reduce manual installs, improve self-service, and streamline application lifecycle management.
Design and implement modern patch management strategies using Intune, Windows Update for Business, Autopatch, SCCM, and related Microsoft technologies.
Own patch compliance reporting, exception handling, deployment rings, maintenance windows, and remediation workflows.
Partner with Security and Infrastructure teams to ensure timely remediation of vulnerabilities across Windows endpoints and Microsoft-managed devices.
Develop patching dashboards, compliance metrics, and executive-ready reporting for endpoint health.
Create controlled deployment strategies for OS updates, feature updates, driver updates, firmware updates, and third-party application updates where applicable.
Continuously improve patch success rates, reduce endpoint risk, and minimize disruption to end users.
Serve as a solution provider for business and IT teams by designing practical, scalable Microsoft-based solutions.
Lead technical discovery, requirements gathering, design, implementation, testing, rollout, and operational handoff for Microsoft platform initiatives.
Evaluate current-state tools, processes, and configurations to identify gaps, risks, inefficiencies, and opportunities for standardization.
Create technical roadmaps for Microsoft platform maturity, including endpoint modernization, application lifecycle automation, and user productivity enhancements.
Develop proof-of-concepts and pilots for new Microsoft capabilities before enterprise rollout.
Partner with Security, Compliance, and IT leadership to align Microsoft platform initiatives with enterprise risk and governance requirements.
Contribute to cost optimization by improving license utilization, eliminating duplicate tools, and maximizing existing Microsoft E5 investments.
Create and maintain technical documentation, runbooks, support guides, architecture diagrams, SOPs, and knowledge base articles.
Define clear operational handoffs between Engineering, Service Desk, Security, and Application Support teams.
Establish governance for Microsoft 365 configuration changes, endpoint policy updates, application catalog publishing, and patch deployment.
Participate in change management/CAB processes for production-impacting Microsoft platform changes.
Define success metrics and regularly report on platform health, adoption, compliance, and operational performance.
Mentor Service Desk and junior engineers on Microsoft platform support practices.
Drive continuous improvement using measurable outcomes, operational data, and user feedback.