Manager, Client Platform Engineering

About the job

We are looking for a Manager, Client Platform Engineering to own MongoDB's endpoint platform worldwide. You'll lead a globally distributed team responsible for macOS, Windows, and Linux endpoints, mobile device and application management, zero-touch provisioning, on-time operating system and patch delivery, and the endpoint telemetry that tells us how the fleet is performing for the people using it. You'll partner with InfoSec to harden the endpoint estate, and build and grow a team of passionate, curious experts in this space. This role combines deep hands-on end user computing expertise with the people leadership and judgment to set technical direction and communicate risk and strategy to stakeholders.

What You'll Do

• Own the worldwide endpoint architecture and roadmap for macOS, Windows, Linux, and mobile, including management platform strategy, configuration-as-code, application packaging and self-service, and zero-touch provisioning
• Lead the release calendar and deployment ring strategy for every endpoint operating system, delivering major and minor updates on time to a published compliance target, with tested rollback and a clear exception path
• Administer and evolve MongoDB's endpoint management stack across MDM and UEM platforms, including declarative device management (DDM) on macOS and Windows Autopilot and Autopatch on Windows 11
• Own mobile strategy end to end for corporate-owned and BYOD devices across iOS and Android, balancing data protection against an enrollment experience employees will accept MDM where enrollment is appropriate, MAM and app protection policies where it is not
• Build and operate MongoDB's Endpoint Digital Employee Experience program: instrument the fleet, define the DEX metrics and SLOs we hold ourselves to, and drive proactive remediation that resolves issues before employees notice them
• Partner with InfoSec to implement and continuously improve endpoint security controls, including hardening baselines, patch and vulnerability remediation SLAs, disk encryption and key escrow coverage, device trust, and Conditional Access
• Serve as a senior technical escalation point (L3) for complex endpoint issues across the organization
• Build automation to reduce manual endpoint operations work and improve reliability and observability, holding the team to configuration-as-code, peer review, and staged rollout
• Act as a technical advisor for MongoDB's relationships with endpoint management, DEX, and hardware vendors, and own the endpoint tooling and licensing budget
• Hire, coach, and retain a globally distributed team of EUC engineers, and contribute to a culture of technical excellence and self-service

Responsibilities

• Ensure MongoDB's global endpoint fleet remains reliable, secure, compliant, and scalable across every platform and region as the company grows
• Deliver operating system rollouts on time, every cycle, across macOS, Windows, and Linux endpoints
• Reduce risk and technical debt across endpoint management, patching, and device lifecycle
• Build and maintain a high-performing international team, and develop engineers into recognized experts in this space
• Communicate endpoint strategy, risk, and incidents clearly to technical and non-technical stakeholders
• Uphold strong engineering practices across endpoint documentation, automation, and change management
• Balance long-term platform architecture work with day-to-day operational support
• Define, publish, and manage the team against the metrics for the service

Minimum Requirements

• Bachelor’s degree in computer science or equivalent practical experience
• 8+ years of experience in end user computing, client platform engineering, or endpoint and modern workplace engineering, including 3+ years hiring and leading engineers
• Proven experience owning a fleet of several thousand endpoints across multiple countries and time zones
• Hands-on depth across all three desktop platforms, not oversight of them: macOS managed through a modern MDM (Jamf Pro, Iru/formerly Kandji, Microsoft Intune, or Omnissa Workspace ONE) with Apple Business (formerly Apple Business Manager) and Automated Device Enrollment; Windows 11 managed through Intune, Windows Autopilot, and Windows Autopatch; Linux endpoints managed as code with Ansible, Fleet, or equivalent
• A current understanding of Apple's declarative device management (DDM) model and what its adoption means for software update enforcement, Platform SSO, and configuration and app delivery
• Experience with both mobile management models: MDM for corporate-owned devices and MAM/app protection for BYOD, including Intune App Protection Policies, Android Enterprise work profile, and Apple User Enrollment with Managed Apple Accounts
• A demonstrated record of delivering major OS rollouts on schedule, with a defined ring strategy, compatibility gating, communications plan, exception process, and rollback path
• Experience instrumenting endpoints with a DEX or telemetry platform such as Nexthink, Lakeside SysTrack, ControlUp, 1E, Aternity, Intune Advanced Analytics, or osquery/Fleet, defining a score or SLO from it, and using it to resolve issues proactively
• Scripting skills for endpoint automation using infrastructure as code, with fluency in at least one of Bash, Python, Swift, or PowerShell and comfort with Git-based workflows
• Experience partnering with InfoSec, Identity, IT Service Delivery, and Workplace teams on cross-functional endpoint initiatives
• Experience leading engineers across multiple regions, with a clear approach to coverage, escalation, documentation, and asynchronous decision-making
• Excellent communication skills, with the ability to explain complex technical topics to a wide range of audiences
• Experience with endpoint documentation and reporting such as fleet compliance dashboards, configuration baselines, and operational runbooks
• There will be requirements from time to time to work across multiple time zones as required by the business, including travel

Preferred Qualifications

• Jamf Certified Expert, Microsoft 365 Certified: Endpoint Administrator Associate, or equivalent endpoint management certification
• Visible standing in the endpoint community — MacAdmins Slack, Jamf Nation, Midwest Management Summit, Penn State MacAdmins — or open-source contributions to projects such as Munki, Installomator, Nudge, swiftDialog, or osquery
• Experience supporting a heavily technical employee population, including software engineers with elevated-privilege, virtualization, and local developer and AI tooling needs
• Experience with cloud identity and device trust platforms such as Okta and Microsoft Entra ID, and with Conditional Access policy design
• Familiarity with ITSM practice, service ownership, and Experience Level Agreements (XLAs) alongside traditional SLAs
• Experience owning endpoint tooling budget, vendor relationships, and licensing at scale
• Experience mentoring other endpoint or systems engineers

Success Measures