Senior Platform Engineer - Microsoft

Trupanion•Seattle, WA

3d•Hybrid

About The Position

The Senior Platform Engineer serves as the technical subject matter expert and solution owner for Trupanion’s Microsoft 365 E5 and endpoint management ecosystem. The role owns the design, implementation, optimization, administration, and operational maturity of Microsoft 365 services and applications, Intune, SCCM, application catalog services, endpoint compliance, and cloud patch management. The engineer is expected to be hands-on while also providing strategic solutions to modernize endpoint management, improve application delivery and patch compliance, optimize Microsoft E5 capabilities, and improve the user experience. The role works closely with Infrastructure, Service Desk, Security, Compliance, business teams, and IT leadership to deliver secure, scalable, and efficient Microsoft platform services. It leads platform initiatives from technical discovery and requirements gathering through design, implementation, testing, rollout, and operational handoff; develops technical roadmaps, standards, governance, documentation, and operational measures; and supports and mentors Service Desk staff and junior engineers. This position is open to candidates in the Seattle, Washington area and follows a hybrid schedule, with at least three days per week (Tuesday, Wednesday, and Thursday) in Trupanion’s casual, pet-friendly office. The base salary range is $145,000–$155,000 on a full-time schedule, and employees are currently eligible for monthly bonuses and restricted stock unit grants.

Requirements

At least 7 years of IT infrastructure, endpoint engineering, or Microsoft platform experience.
At least 5 years of Microsoft 365 administration experience.
At least 5 years of SCCM/Microsoft Configuration Manager experience.
At least 3 years of Microsoft Intune experience.
At least 3 years of Software/Tools/Automation development experience.
Strong hands-on experience administering Microsoft 365 E5 services and deep understanding of Office desktop applications, Teams, Outlook, OneDrive, SharePoint, Exchange Online, Copilot, Defender, Purview, Insights, and Microsoft 365 Apps for Enterprise.
Experience with Microsoft 365 Admin Center, Endpoint Manager Admin Center, Entra ID, and related administration portals; ability to configure, support, and troubleshoot enterprise Microsoft productivity platforms.
Understanding of Microsoft licensing concepts, particularly E5 capabilities and optimization opportunities.
Advanced experience with Microsoft Intune and Microsoft Configuration Manager/SCCM; strong understanding of co-management, cloud attach, device collections, deployment rings, compliance policies, and configuration profiles.
Experience with Windows Autopilot, Windows enrollment, device provisioning, endpoint lifecycle management, and management of Windows 11 enterprise endpoints.
Ability to troubleshoot endpoint policy application, device compliance, enrollment failures, deployment issues, and configuration drift.
Strong experience with Windows endpoint management, Office applications, application packaging, and patching.
Experience packaging and deploying applications using Intune and SCCM; knowledge of MSI, EXE, Win32 application packaging, PowerShell-based deployments, detection rules, dependencies, supersedence, and uninstall logic.
Experience managing self-service application catalogs through Company Portal or similar enterprise portals; ability to standardize deployment processes and improve application delivery reliability.
Experience with application testing, rollback planning, and production deployment governance.
Strong knowledge of Windows Update for Business, Intune update rings, feature update policies, quality updates, and driver management.
Experience with SCCM software updates, ADRs, patch collections, maintenance windows, and compliance reporting.
Understanding of vulnerability remediation workflows and endpoint security hygiene; ability to coordinate risk-based patching with Security teams.
Experience building patch compliance reports and operational dashboards.
Strong PowerShell scripting and automation skills for administration, reporting, troubleshooting, endpoint remediation, and automation of repetitive tasks.
Strong analytical and troubleshooting skills; ability to work independently as a senior technical owner.
Strong documentation and communication skills, including the ability to explain technical concepts to technical and non-technical audiences.
Strong customer-service mindset and focus on user experience; ability to balance security, usability, compliance, and operational efficiency.
Experience working in ITIL-based environments, including incident, problem, change, and request management.
Ability to mentor junior team members and influence peers without direct authority.

Nice To Haves

Microsoft 365 Certified: Endpoint Administrator Associate.
Experience with Entra ID, Defender for Endpoint, Conditional Access, Autopatch, and Microsoft Graph.
Experience using Microsoft Graph PowerShell or Graph API.
Experience with Power BI or other reporting tools.
Experience in ITIL, SOX, audit, or regulated environments.
Familiarity with remediation scripts, proactive remediations, detection scripts, configuration validation, JSON, CSV, REST APIs, and automation workflows.

Responsibilities

Serve as the technical subject matter expert and principal engineer for Microsoft 365 E5 services, especially productivity and collaboration platforms.
Own the engineering, configuration, governance, and operational support of Microsoft Office applications and related Microsoft 365 services, including Outlook, Teams, Word, Excel, PowerPoint, OneDrive, SharePoint, and Exchange.
Evaluate Microsoft 365 capabilities and identify opportunities to improve adoption, security, automation, compliance, and cost efficiency.
Partner with business stakeholders to translate productivity needs into secure, scalable Microsoft platform solutions; develop platform standards, best practices, and governance; and educate teams about Microsoft 365 capabilities.
Engineer, administer, and optimize Microsoft Intune and Microsoft Configuration Manager/SCCM environments.
Lead endpoint management modernization, including transitions from SCCM-heavy approaches to cloud-first or co-managed strategies.
Design and manage device compliance policies, configuration profiles, security baselines, endpoint restrictions, and conditional access integrations.
Develop and maintain Windows enrollment, provisioning, Autopilot, and device lifecycle management processes; manage endpoint standards for corporate devices, virtual desktops, remote users, and shared workstations.
Align endpoint management practices with security, compliance, audit, and operational support requirements; provide Tier 3 and engineering-level support for endpoint escalations.
Own the enterprise application catalog strategy and package, test, deploy, and maintain applications through Intune, SCCM, Company Portal, and other approved distribution mechanisms.
Develop application deployment standards, including detection rules, dependencies, rollback procedures, and user communications; establish repeatable application intake, testing, approval, and publishing processes.
Partner with Service Desk and Application Support teams to keep catalog applications current, accurate, supportable, and accessible; monitor deployment results and identify opportunities to improve self-service and application lifecycle management.
Design and implement patch management strategies using Intune, Windows Update for Business, Autopatch, SCCM, and related Microsoft technologies.
Own patch compliance reporting, exception handling, deployment rings, maintenance windows, and remediation workflows; partner with Security and Infrastructure to remediate endpoint vulnerabilities promptly.
Develop patching dashboards, compliance metrics, and executive-ready endpoint health reporting; create controlled deployment strategies for operating system, feature, driver, firmware, and applicable third-party application updates.
Design, test, implement, and operationally hand off scalable Microsoft-based solutions; lead technical discovery and requirements gathering for platform initiatives.
Evaluate tools, processes, and configurations for gaps, risks, inefficiencies, and standardization opportunities; create roadmaps for platform maturity, endpoint modernization, application lifecycle automation, and productivity improvements.
Develop proofs of concept and pilots for Microsoft capabilities; align initiatives with enterprise risk and governance requirements; optimize costs through license utilization and effective use of Microsoft E5 investments.
Create and maintain technical documentation, runbooks, support guides, architecture diagrams, standard operating procedures, and knowledge base articles.
Define operational handoffs among Engineering, Service Desk, Security, and Application Support; establish governance for configuration changes, endpoint policies, application catalog publishing, and patch deployment.
Participate in change management and CAB processes for production-impacting changes; define and report success metrics for platform health, adoption, compliance, and operational performance.
Mentor Service Desk staff and junior engineers, and drive continuous improvement using measurable outcomes, operational data, and user feedback.