Sr. Platform Engineer, Endpoint (Hybrid - Seattle, WA)

Job DescriptionA Senior Engineer is a key member of the Nordstrom Technology organization, applying engineering principles to design, build, and maintain technology products and solutions that drive amazing customer and employee experiences. As a Senior Engineer on the Productivity and Collaboration team, you will own the end-to-end lifecycle of client endpoint platforms (Windows client and server operating systems, macOS, mobile devices, and virtual desktop infrastructure) including securing, configuring, and automating these environments through expert scripting and tooling.You will act as a subject matter expert and technical leader, driving endpoint reliability, security posture, and productivity improvements across Nordstrom. You bring deep hands-on expertise with Microsoft and Apple endpoint management platforms, along with experience managing Intune-enrolled mobile devices and virtual desktop environments, and strong scripting and automation skills that allow you to build scalable, repeatable solutions rather than one-off fixes.A day in the life...Endpoint Management & ConfigurationDesign, build, and maintain configurations for Windows client and server operating systems, macOS, mobile, and virtual desktop endpoint platformsDevelop and maintain device configuration profiles, compliance policies, and conditional access rules in Microsoft Intune and MECM/SCCMDeploy and maintain Virtual Desktop Infrastructure (VDI) environments, including management of VM images, user profile configurations, and the supporting platforms that maintain the health and operation of those environmentsOwn the deployment pipeline for operating system images, application packaging, and patch management across all client endpoint platformsArchitect and implement MDM/UEM solutions that enforce security baselines while preserving end-user productivityLead endpoint hardening initiatives including CIS benchmark alignment, zero-trust policy enforcement, and certificate lifecycle managementVulnerability RemediationPartner with the Security team to triage, prioritize, and remediate endpoint vulnerabilities across the Windows, macOS, mobile, and virtual desktop fleet in accordance with SLA targetsDevelop and maintain automated remediation scripts and Intune remediation packages to detect and resolve CVEs, misconfigurations, and compliance gaps at scale without manual interventionOperate and tune endpoint detection tooling to maintain continuous visibility into the vulnerability posture of the fleetTrack remediation progress, report on vulnerability metrics and trends, and drive closure of open findings through coordination with application ownersScripting & AutomationWrite robust PowerShell, Python, or Bash scripts to automate endpoint provisioning, compliance remediation, VDI image management, software deployment, and configuration drift detectionBuild and maintain automation pipelines for endpoint lifecycle events (enrollment, reconfiguration, decommission) using Intune Graph API, MECM task sequences, and CI/CD toolingDevelop scripts and tools that surface endpoint health telemetry into monitoring platforms such as New RelicMaintain code in source control (GitHub), apply code review practices, and document automation libraries for team reuseIdentify manual, repetitive operational tasks and replace them with reliable, tested automationTechnical Leadership & CollaborationServe as the team’s subject matter expert for Windows, macOS, and mobile endpoint platformsDrive end-user experience goals and ongoing productivity improvement initiatives across the endpoint fleetLead incident resolution, cross-functional troubleshooting, and root cause analysis for complex endpoint issues; engage vendors where appropriatePartner with the team’s manager and program manager to define and execute team vision and roadmapsWrite and contribute to project plans, runbooks, and team documentationCollaborate with Security, Networking, and Application teams to ensure endpoints meet compliance and access control requirementsProvide mentorship and technical coaching to team members on endpoint engineering best practicesParticipate in an on-call rotation as neededYou own this if you have...6+ years of experience with end-user computing technologies within a complex organization, including development, implementation, and supportExpert hands-on experience managing Windows client and server operating systems at scale using Microsoft Endpoint Configuration Manager (MECM/SCCM)Experience managing macOS, including configuration profiles, compliance policies, and software distributionExperience deploying and managing Virtual Desktop Infrastructure (VDI) platforms, including image lifecycle management and the supporting infrastructure (e.g., Azure Virtual Desktop)Expert experience managing Intune-enrolled mobile devices (Android, iOS), including device enrollment, configuration, app protection policies, and conditional accessExpert proficiency writing PowerShell scripts for endpoint automation, remediation, and reporting; proficiency in Python or Bash is a strong plusDeep knowledge of Microsoft Intune (device compliance, configuration profiles, app deployment) and MECM/SCCM (task sequences, collections, software update management)Strong experience with Microsoft identity and infrastructure technologies including Azure AD, Active Directory, GPO, and DNSUnderstanding of source version control systems (GitHub) for managing scripts and configuration-as-codeFamiliarity with industry-standard monitoring and observability tools (New Relic)Understanding of security protocols, standards, and endpoint security controls (e.g., BitLocker, MDM compliance policies, conditional access)Ability to translate complex technical endpoint challenges into clear business impact and actionable solutionsComfortable working in an agile environment, meeting deadlines in a fast-paced, constantly evolving technology landscapeDemonstrated ability to guide and oversee end-to-end feature delivery and implementationPassion for continuous improvement, always looking to eliminate toil and improve reliability through automationAbility to quickly learn new technologies and adopt new tools as the endpoint ecosystem evolvesPreferred Qualifications:Experience with Zebra device management tools, Android Enterprise enrollment workflows, and iOS/iPadOS device management via IntuneExperience integrating endpoint telemetry into monitoring platforms (New Relic)Experience with hybrid cloud infrastructure (Azure/AWS) and endpoint management in cloud-joined or hybrid-joined scenariosExperience with application packaging formats (MSI, MSIX, APK) and enterprise software distribution best practicesExperience with VDI health monitoring and operational tooling to maintain performance and availability of virtual desktop environmentsExposure to ITSM platforms (ServiceNow, Jira) for change management and incident workflowsExperience with web service integrations and REST APIs (e.g., Microsoft Graph API for Intune automation)#LI-HybridPay Range DetailsThe pay range(s) below has been provided in compliance with state specific laws. Pay ranges may be different for other locations. Pay offers are dependent on the location, as well as job-related knowledge, skills, and experience.$142,000.00 - $220,500.00 AnnualWe’ve got you covered…Our employees are our most important asset and that’s reflected in our benefits. Nordstrom is proud to offer a variety of benefits to support employees and their families, including:Medical/Vision, Dental, Retirement and Paid Time AwayLife Insurance and DisabilityMerchandise Discount and EAP ResourcesThis position may be eligible for performance-based incentives/bonuses. Benefits include 401k, medical/vision/dental/life/disability insurance options, PTO accruals, Holidays, and more. Eligibility requirements may apply based on location, job level, classification, and length of employment. Learn more in the Nordstrom Benefits Overview by copying and pasting the following URL into your browser: few more important points...The job posting highlights the most critical responsibilities and requirements of the job. It’s not all-inclusive. There may be additional duties, responsibilities and qualifications for this job.For Los Angeles or San Francisco applicants: Nordstrom is required to inform you that we conduct background checks after conditional offer and consider qualified applicants with criminal histories in a manner consistent with legal requirements per Los Angeles, Cal. Muni. Code 189.04 and the San Francisco Fair Chance Ordinance. For additional state and location specific notices, please refer to the Legal Notices document within the FAQ section of the Nordstrom Careers site. Applicants with disabilities who require assistance or accommodation should contact the nearest Nordstrom location, which can be identified at . Please be mindful that there may be legal notices and requirements related to this job posting that are specific to your state. Review the Career Site FAQ’s for relevant information and guidelines.Current Nordstrom employees: To apply, log into Workday, click the Careers button and then click Find Jobs.Nordstrom keeps job postings open for at least one day after the posting date. 2026 Nordstrom, IncSummaryLocation: Seattle, WAType: Full time