The opportunity
We are looking for a Manager, Client Platform Engineering to own MongoDB's endpoint platform worldwide. You'll lead a globally distributed team responsible for macOS, Windows, and Linux endpoints, mobile device and application management, zero-touch provisioning, on-time…
What you'll do
Own the worldwide endpoint architecture and roadmap for macOS, Windows,: Linux, and mobile, including management platform strategy, configuration-as-code, application packaging and self-service, and zero-touch provisioning
Lead the release calendar and deployment ring strategy for every endpoint: operating system, delivering major and minor updates on time to a published compliance target, with tested rollback and a clear exception path
Administer and evolve MongoDB's endpoint management stack across MDM and UEM: platforms, including declarative device management (DDM) on macOS and Windows Autopilot and Autopatch on Windows 11
Own mobile strategy end to end for corporate-owned and BYOD devices across: iOS and Android, balancing data protection against an enrollment experience employees will accept MDM where enrollment is appropriate, MAM and app protection policies where it is not
Build and operate MongoDB's Endpoint Digital Employee Experience program: instrument the fleet, define the DEX metrics and SLOs we hold ourselves to, and drive proactive remediation that resolves issues before employees notice them
Partner with InfoSec to implement and continuously improve endpoint security: controls, including hardening baselines, patch and vulnerability remediation SLAs, disk encryption and key escrow coverage, device trust, and Conditional Access
What they're looking for
- Bachelor’s degree in computer science or equivalent practical experience
- + years of experience in end user computing, client platform engineering, or: endpoint and modern workplace engineering, including 3+ years hiring and leading engineers
- Proven experience owning a fleet of several thousand endpoints across multiple countries and time zones
- Hands-on depth across all three desktop platforms, not oversight of them: macOS managed through a modern MDM (Jamf Pro, Iru/formerly Kandji, Microsoft Intune, or Omnissa Workspace ONE) with Apple Business (formerly Apple Business Manager) and Automated Device Enrollment; Windows 11 managed through Intune, Windows Autopilot, and Windows Autopatch; Linux endpoints managed as code with Ansible, Fleet, or equivalent
- A current understanding of Apple's declarative device management (DDM) model: and what its adoption means for software update enforcement, Platform SSO, and configuration and app delivery
- Experience with both mobile management models: MDM for corporate-owned devices and MAM/app protection for BYOD, including Intune App Protection Policies, Android Enterprise work profile, and Apple User Enrollment with Managed Apple Accounts
- A demonstrated record of delivering major OS rollouts on schedule, with a: defined ring strategy, compatibility gating, communications plan, exception process, and rollback path
- Experience instrumenting endpoints with a DEX or telemetry platform such as: Nexthink, Lakeside SysTrack, ControlUp, 1E, Aternity, Intune Advanced Analytics, or osquery/Fleet, defining a score or SLO from it, and using it to resolve issues proactively
