Senior Platform Engineer - Microsoft

Trupanion • Seattle, WA

3d • $145,000 - $155,000 • Hybrid

About The Position

The Senior Platform Engineer serves as the technical subject matter expert and solution owner for Trupanion’s Microsoft 365 E5 and endpoint management ecosystem. The role owns the design, implementation, optimization, administration, and operational maturity of Microsoft 365 services, endpoint management, application catalog services, endpoint compliance, and cloud patch management. The engineer works with Infrastructure, Service Desk, Security, Compliance, and business teams to deliver secure, scalable, efficient platform services and improve the user experience.

The position is open to candidates in the Seattle, Washington area and follows a hybrid schedule, with at least three days per week (Tuesday, Wednesday, and Thursday) in Trupanion’s office. The position is full-time, with a base salary range of $145,000–$155,000 per year. Employees are currently eligible for monthly bonuses and receive Restricted Stock Units, which vest over four years.

The engineer owns Microsoft 365 E5 productivity and collaboration services; engineers and modernizes Intune and SCCM endpoint management; manages application packaging, deployment, and self-service catalog processes; and designs cloud patch management and endpoint security operations. The role also leads solution discovery and implementation, creates technical roadmaps and pilots, maintains documentation and governance, participates in change management, reports on platform performance, and mentors Service Desk staff and junior engineers.

Requirements

• 7 or more years of IT infrastructure, endpoint engineering, or Microsoft platform experience.
• 5 or more years of Microsoft 365 administration experience.
• 5 or more years of SCCM/Microsoft Configuration Manager experience.
• 3 or more years of Microsoft Intune experience.
• 3 or more years of software, tools, or automation development experience.
• Strong hands-on experience with Microsoft 365 E5 services and administration, including Office desktop applications, Teams, Outlook, OneDrive, SharePoint, Exchange Online, Copilot, Defender, Purview, Insights, and Microsoft 365 Apps for Enterprise.
• Experience with Microsoft 365 Admin Center, Endpoint Manager Admin Center, Entra ID, and related administrative portals; understanding of Microsoft licensing and E5 capability optimization.
• Advanced experience with Intune and SCCM, including co-management, cloud attach, device collections, deployment rings, compliance policies, and configuration profiles.
• Experience with Windows Autopilot, Windows enrollment, provisioning, endpoint lifecycle management, and Windows 11 enterprise endpoints.
• Ability to troubleshoot endpoint policy application, device compliance, enrollment failures, deployment issues, and configuration drift.
• Experience packaging and deploying applications using Intune and SCCM, including MSI, EXE, Win32, and PowerShell-based deployments; knowledge of detection rules, dependencies, superdense, and uninstall logic.
• Experience managing self-service application catalogs through Company Portal or similar enterprise portals, and with application testing, rollback planning, and production deployment governance.
• Strong knowledge of Windows Update for Business, Intune update rings, feature update policies, quality updates, and driver management.
• Experience with SCCM software updates, ADRs, patch collections, maintenance windows, and compliance reporting; understanding of vulnerability remediation and endpoint security hygiene.
• Ability to build patch compliance reports and operational dashboards and to prioritize patching with Security teams based on risk, severity, exploitability, and business impact.
• Strong PowerShell scripting and automation skills for administration, reporting, troubleshooting, and endpoint remediation.
• Strong analytical and troubleshooting skills; ability to work independently as a senior technical owner.
• Strong documentation and communication skills, including the ability to explain technical concepts to technical and non-technical audiences.
• Strong customer-service mindset and ability to balance security, usability, compliance, and operational efficiency.
• Experience working in ITIL-based environments, including incident, problem, change, and request management.
• Ability to mentor junior team members and influence peers without direct authority.
• Strong experience with Windows endpoint management, Office applications, application packaging, and patching.
• Experience with Windows Autopilot, Company Portal, update rings, compliance policies, and application deployment.
• Must be authorized to work for any employer in the United States; visa sponsorship or transfer is not available.

Nice To Haves

• Microsoft 365 Certified: Endpoint Administrator Associate.
• Experience with Entra ID, Defender for Endpoint, Conditional Access, Autopatch, and Microsoft Graph.
• Experience with Power BI or other reporting tools.
• Experience in ITIL, SOX, audit, or regulated environments.
• Experience using Microsoft Graph PowerShell or Graph API.
• Understanding of JSON, CSV, REST APIs, and automation workflows.

Responsibilities

• Serve as the technical subject matter expert and principal engineer for Microsoft 365 E5 services, especially productivity and collaboration platforms.
• Own the engineering, configuration, governance, and operational support of Microsoft Office applications and related Microsoft 365 services, including Outlook, Teams, Word, Excel, PowerPoint, OneDrive, and SharePoint.
• Evaluate Microsoft 365 E5 capabilities and identify opportunities to improve adoption, security, automation, compliance, and cost efficiency.
• Work with business stakeholders to translate productivity needs into secure, scalable Microsoft platform solutions; develop service standards, best practices, and governance; and educate teams on Microsoft 365 capabilities.
• Engineer, administer, and optimize Microsoft Intune and Microsoft Configuration Manager/SCCM environments.
• Lead endpoint management modernization, including migration from SCCM-heavy approaches to cloud-first or co-managed strategies.
• Design and manage device compliance policies, configuration profiles, security baselines, endpoint restrictions, and conditional access integrations.
• Develop and maintain Windows device enrollment, provisioning, Autopilot, and lifecycle management processes; manage standards for corporate devices, virtual desktops, remote users, and shared workstations.
• Ensure endpoint management aligns with security, compliance, audit, and operational support requirements; provide Tier 3/engineering-level escalation support.
• Own the enterprise application catalog strategy for Microsoft-managed endpoints; package, test, deploy, and maintain applications through Intune, SCCM, Company Portal, and other approved mechanisms.
• Develop application deployment standards and repeatable application intake, testing, approval, and publishing processes; partner with Service Desk and Application Support to keep catalog applications current and supportable.
• Monitor application deployment success, failures, remediation, and adoption; reduce manual installations, improve self-service, and streamline application lifecycle management.
• Design and implement patch management strategies using Intune, Windows Update for Business, Autopatch, SCCM, and related Microsoft technologies.
• Own patch compliance reporting, exceptions, deployment rings, maintenance windows, remediation workflows, dashboards, and endpoint health metrics.
• Coordinate with Security and Infrastructure teams to remediate endpoint vulnerabilities; develop controlled deployment strategies for operating system, feature, driver, firmware, and applicable third-party application updates.
• Improve patch success rates, reduce endpoint risk, and minimize disruption to users.
• Lead technical discovery, requirements gathering, design, implementation, testing, rollout, and operational handoff for Microsoft platform initiatives.
• Assess tools, processes, and configurations for gaps, risks, inefficiencies, and standardization opportunities; create technical roadmaps and develop proofs of concept and pilots.
• Partner with Security, Compliance, and IT leadership to align platform initiatives with enterprise risk and governance requirements; optimize costs through license utilization and use of Microsoft E5 investments.
• Create and maintain technical documentation, runbooks, support guides, architecture diagrams, SOPs, and knowledge base articles; define operational handoffs between Engineering, Service Desk, Security, and Application Support.
• Establish governance for Microsoft 365 changes, endpoint policies, application catalog publishing, and patch deployments; participate in change management/CAB processes.
• Define and report metrics for platform health, adoption, compliance, and operational performance; drive continuous improvement using data and user feedback.
• Mentor Service Desk staff and junior engineers on Microsoft platform support practices.

Benefits

• Full medical, dental, and vision benefits at no cost to the employee.
• Monthly bonuses; employees are currently eligible.
• Restricted Stock Unit grants for new team members, vesting over four years.
• Four weeks of paid time off.
• Nine paid float holidays.
• Five-week sabbatical after five years of employment.
• Casual, pet-friendly office environment.
• Free medical health insurance for one dog or cat.
• Paid time off to volunteer at nonprofit organizations.
• Free on-site gym at the Seattle office.
• Free dog-walking services for office pets during business hours.
• Free parking at the Seattle office.
• Paid ORCA cards.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed