Endpoint Automation Engineer

About the role We are looking for a hands-on Endpoint Automation Engineer to design, build and continuously improve the automation that powers our global endpoint environment. This is a cross-platform engineering role focused on making endpoint services scalable, secure, reliable and consistent across Windows, macOS, Linux and mobile devices. You will replace repetitive administration with reusable code, integrations and event-driven workflows. Working across endpoint management, identity, security, application delivery, observability and device lifecycle services, you will use the Microsoft technology stack as core platforms while creating automation that operates across a broader endpoint technology ecosystem. Engineering mindset Automation is the product, not an afterthought. We are looking for someone who sees a repetitive task, fragile hand-off or one-off script and asks, "How can we make this reliable, reusable and self-service?" You should be comfortable investigating unfamiliar systems, working from API documentation and turning operational requirements into maintainable automation. Your designs account for failure, test before release, instrument what you build and favour reusable services over isolated scripts. You take ownership from design through operation, document your solutions and balance long-term engineering improvements with immediate business needs. What success looks like You will measurably reduce manual work, deployment lead time and configuration inconsistency across the endpoint estate. Provisioning, configuration, software delivery, patching, compliance and lifecycle processes will become increasingly automated, observable, auditable and recoverable. Over time, you will help establish a shared Endpoint Automation model in which cross-platform services are delivered through reusable code, APIs, pipelines and common engineering standards rather than only platform-specific administration. ### What you'll do Endpoint Platforms & Automation * Design and maintain automation frameworks for endpoint enrollment, provisioning, configuration, application delivery and retirement. * Build reusable tools, services and workflows using PowerShell, APIs and other appropriate programming languages. * Integrate endpoint platforms with identity, security, infrastructure, asset and service-management systems. * Apply Git, CI/CD, automated testing and configuration-as-code practices to make endpoint changes controlled, repeatable and auditable. * Identify manual, error-prone or fragmented processes and redesign them as resilient, self-service automation. Security, Compliance & Observability * Translate endpoint security and compliance requirements into policy-as-code, automated controls and measurable outcomes. * Automate operating-system and third-party application patching, vulnerability remediation and exception handling. * Build automated guardrails for encryption, endpoint protection, authentication and device compliance. * Create telemetry, dashboards and alerting that provide actionable visibility into automation performance, device health and risk. * Partner with Security teams to automate evidence collection, audit reporting and remediation workflows. Engineering, Lifecycle & Support * Define endpoint automation architecture, engineering standards and a roadmap that reduces operational effort and platform fragmentation. * Engineer automated application packaging, deployment, update and rollback pipelines. * Evaluate platform capabilities, APIs and emerging technologies for opportunities to simplify or extend endpoint automation. * Troubleshoot complex failures across automation, endpoints, identity, networking, security and device-management services. * Convert recurring incidents and support escalations into automated detection, remediation or prevention. * Document automation designs, operating models and support procedures, and enable teams to use them effectively. ### What you'll need * Minimum 5 years of experience building automation for endpoint operations in a modern enterprise environment. * Hands-on expertise with Microsoft Intune, Entra ID, Windows Autopilot and endpoint compliance, with the ability to automate their administration through supported interfaces. * Demonstrated ability to create production-quality automation using PowerShell, REST APIs, Microsoft Graph, or other programming languages. * Experience automating application packaging, deployment, patching and vulnerability-remediation workflows. * Practical knowledge of Git, CI/CD, testing, secrets management and controlled configuration deployment. * Strong understanding of endpoint security, modern identity and the interaction between devices, cloud services and automation platforms. * A bachelor’s degree in IT, Computer Science or equivalent practical experience. Additional experience that would be valuable: * Automating macOS and Jamf, Linux endpoint management, or mobile device-management platforms. * Azure or other cloud services for hosting functions, workflows, integrations and automation data. * Infrastructure or configuration as code, automated testing and release pipelines. * Vulnerability-management, endpoint-security or observability platforms with accessible APIs. * SSO, OAuth, SQL and data-analysis technologies used in system integrations and reporting. ### What we offer A competitive compensation package, of course. Time and resources to grow and develop, including a personal development budget and paid leave for learning days, as well as paid access to e-learning resources such as O’Reilly and LinkedIn Learning. Time to support life outside of work, with enhanced parental leave plus paid leave to care for loved ones and volunteer in local communities. Work flexibility, where TomTom’ers, in agreement with their manager and team, use both the office and home to focus, collaborate, learn and socialize. It’s all about getting the best out of both worlds – we ask TomTom’ers to come to the office two days a week, and the remaining three are free to be worked in either location. Improve your home office with a setup budget and get extra support with a monthly allowance. Enjoy options to work from your home country and abroad for a set number of days each year, to visit family and friends, or to simply explore the world we’re mapping. Take the holidays you want with a competitive holiday plan, plus an extra day off to celebrate your birthday. Join annual events like our Hackathon and DevDays to bring your ideas to life with talented teammates from around the world. Become a part of our inclusive global culture and have the chance to collaborate with a diverse community – we have over 80 nationalities at TomTom! Find out more about our global benefits and enjoy additional local benefits tailored to your location. Meet your team We’re Employee IT. We’re on a mission to deliver a seamless user experience for TomTom'ers across. Whether we're creating solutions to enable collaboration, increase productivity or help people communicate, your work will ensure TomTom'ers are equipped to create the first real-time map. In our team, you’ll help design, develop, deliver, operate and support solutions through a defined set of services, so that we can continue to bring people closer to the world around them. At TomTom... You’ll help people find their way in the world. In 2004, TomTom revolutionized how the world moves with the introduction of the first portable navigation device. Now, we intend to do it again by engineering the first-ever real-time map, the smartest and most useful map on the planet. Work with a team of 3,300+ unique, curious and passionate problem-solvers. Together, we’ll open up a world of possibilities for car manufacturers, enterprises and developers to help people understand and get closer to the world around them. After you apply Our recruitment team will work hard to give you a meaningful experience throughout your journey with us, no matter the outcome. Your application will be screened closely and you can rest assured that all follow-up actions will be thorough, from assessments and interviews all the way through onboarding. To find out more about our application process, check out our hiring FAQs. TomTom is an equal opportunity employer TomTom is where you can find your place in the world. Every day we welcome, nurture and celebrate differences. Why? Because your uniqueness is what makes you, you. No matter your culture or background, you’ll find your impact at TomTom. Research also shows that sometimes women and underrepresented communities can be hesitant to apply for positions unless they believe they meet 100% of the criteria. If you can relate to this, please know that we’d love to hear from you.