Senior Client Platform Engineer

Who are we?

At Finastra, we’re a global leader in financial services software, dedicated to expanding access to financial services and shaping what’s next for the industry. Our technology powers mission‑critical solutions across Lending, Payments and Universal Banking, supporting over 7,000 customers, including 80% of the world’s top 50 banks, in more than 110 countries.

We are seeking a Senior Client Platform Engineer to join our Workplace Technology team. This role will serve as a senior technical engineer and subject matter expert responsible for the engineering, security, automation, and lifecycle management of Finastra's endpoint platforms and services across the organization.

The successful candidate will drive the strategy, modernization, and operational excellence of endpoint technologies supporting Windows, macOS, iOS, and other client platforms. While a significant focus of this role will be on Apple technologies and their continued adoption across the enterprise, the engineer will also support broader endpoint management, security, compliance, and user experience initiatives.

Working closely with Endpoint Security, Security Engineering, Service Management, and Support teams, you will play a key role in shaping the future of endpoint management, device security, workplace automation, and modern end-user computing services.

This role is ideal for an experienced endpoint engineer who combines deep Apple expertise with broad endpoint management, security, and automation capabilities.

Key Responsibilities

Endpoint Platform Ownership

• •Serve as a senior technical owner for enterprise endpoint platforms, with primary accountability for Apple technologies and support for the broader endpoint ecosystem.
• •Define platform standards, engineering best practices, governance models, and technology roadmaps.
• •Drive platform modernization initiatives focused on automation, security, operational efficiency, and user experience.
• •Evaluate emerging endpoint technologies and provide recommendations for adoption.
• •Act as a senior escalation point and subject matter expert for endpoint management technologies and services.

Endpoint Management & Device Lifecycle

• •Manage the lifecycle of enterprise endpoint devices, including Windows, macOS, iOS, and mobile platforms from enrollment through retirement.
• •Design and maintain automated provisioning, deployment, and device management processes.
• •Support hardware refresh programs, lifecycle governance, and platform standardization initiatives.
• •Ensure a secure, reliable, and consistent user experience across endpoint platforms.

Endpoint Management Platforms

• •Administer and engineer enterprise endpoint management technologies including Microsoft Intune, IRU (formerly Kandji), Microsoft Configuration Manager (SCCM/MECM), Apple Business Manager, compliance policies, software distribution, and automated device enrollment.
• •Develop scalable management frameworks supporting global endpoint deployments.
• •Optimize device compliance, reporting, software distribution, and operational workflows.
• •Support coexistence and modernization initiatives across endpoint management platforms.

Operating System & Application Management

• •Plan, test, and deploy operating system updates and major releases across Windows and Apple platforms.
• •Package, deploy, and manage enterprise applications.
• •Maintain application compatibility and supportability across endpoint environments.
• •Develop deployment standards, release management processes, and endpoint configuration baselines.
• •Partner with business and technology teams to support application modernization initiatives.

Security & Compliance

• •Implement and maintain endpoint security baselines and compliance standards.
• •Partner with security teams to support vulnerability management, remediation, and endpoint risk reduction initiatives.
• •Support deployment and management of enterprise security tools across endpoint devices.
• •Assist with regulatory, audit, and compliance requirements while ensuring alignment with corporate security policies and standards.

Identity & Access Management

• •Support integration between endpoint platforms and enterprise identity services.
• •Manage integrations with Microsoft Entra ID, SSO, MFA, Conditional Access, and device compliance policies.
• •Support modern device identity, Zero Trust, and secure access initiatives.

Automation & Engineering

• •Develop automation solutions using scripting, APIs, and platform-native capabilities.
• •Build proactive remediation, self-healing, and operational automation solutions.
• •Integrate endpoint management platforms with enterprise systems and workflows.
• •Develop reporting and operational dashboards to support platform management and decision-making.

Operational Excellence & Governance

• •Monitor endpoint health, security, compliance, operational performance, and user experience metrics.
• •Drive continuous service improvement, automation, and platform maturity initiatives.
• •Create and maintain technical documentation, standards, architecture diagrams, and operational procedures.
• •Participate in audits, governance reviews, technology assessments, and platform roadmap planning.

Qualifications

Required

• •5-7+ years of experience engineering and managing enterprise endpoint platforms.
• •4+ years of hands-on Apple platform administration and engineering experience.
• •Experience with Microsoft Intune, Kandji, Jamf, or comparable endpoint management platforms.
• •Strong understanding of Windows and Apple device management within enterprise environments.
• •Experience managing endpoint security, compliance controls, vulnerability remediation, and device lifecycle services.
• •Experience supporting operating system management, software deployment, and endpoint update management.
• •Strong scripting and automation skills using PowerShell, Bash, Python, or similar technologies.
• •Experience integrating endpoint platforms with identity and security services.
• •Strong troubleshooting, analytical, and problem-solving abilities.
• •Excellent written and verbal communication skills.

Preferred

• •Experience with Apple Business Manager and Automated Device Enrollment.
• •Experience integrating Apple devices with Entra ID and Conditional Access.
• •Experience with Microsoft Intune and modern endpoint management practices.
• •Experience supporting enterprise security tooling and vulnerability management programs.
• •Experience within highly regulated and global enterprise environments.
• •Apple, Microsoft, or endpoint management certifications.
• •Experience supporting cloud-first workplace and endpoint modernization initiatives

We are proud to offer a range of incentives to our employees worldwide. These benefits are available to everyone, regardless of grade, and reflect the values we stand for:

Flexibility: Enjoy unlimited vacation, subject to local regulations and business priorities. Benefit from hybrid working arrangements and inclusive policies such as paid time off for voting, bereavement, and sick leave.

Well‑being: Access confidential one‑to‑one support through our Employee Assistance Program, connect with our network of Wellbeing Champions and Gather Groups, and take part in monthly events and initiatives designed to help you thrive—inside and outside of work.

Health & Financial Security: Medical, life and disability insurance, retirement plans, lifestyle, and other benefits.*

Sustainability: Paid time off for volunteering and donation‑matching opportunities to support causes that matter to you.

Inclusion: Get involved in our inclusion communities, such as Count Me In, Culture@Finastra, Proud@Finastra, Disabilities@Finastra, and Women@Finastra—open to everyone who wants to participate and contribute.

Career Development: Access online learning and accredited courses through our Skills & Career Navigator tool.

Recognition: Take part in our global recognition program, Finastra