[Remote] Senior Platform Engineer - Microsoft

Work from home Full-time role Hiring

Note: The job is a remote job and is open to candidates in USA. Trupanion provides medical insurance for cats and dogs in North America in a collaborative, pet-friendly work environment. The Senior Platform Engineer will serve as the technical SME and solution owner for the Microsoft 365 E5 and endpoint management ecosystem, leading platform engineering, endpoint modernization, application delivery, patch compliance, security, governance, and operational improvement.

Responsibilities

Serve as the technical SME and principal engineer for Microsoft 365 E5 services, with a focus on core productivity and collaboration platforms
Own the engineering, configuration, governance, and operational support of Microsoft Office applications, including Outlook, Teams, Word, Excel, PowerPoint, OneDrive, SharePoint, and related Microsoft 365 services
Evaluate existing Microsoft 365 E5 capabilities and identify opportunities to improve adoption, security, automation, compliance, and cost efficiency
Partner with business stakeholders to understand productivity needs and translate them into secure, scalable Microsoft platform solutions
Develop standards, best practices, and platform governance for Microsoft 365 service configuration and usage
Act as an advocate for Microsoft 365 capabilities by educating teams on available tools, features, and productivity opportunities
Engineer, administer, and optimize Microsoft Intune and Microsoft Configuration Manager/SCCM environments
Lead endpoint management modernization efforts, including migration from traditional SCCM-heavy models to cloud-first or co-managed endpoint strategies
Design and manage device compliance policies, configuration profiles, security baselines, endpoint restrictions, and conditional access integrations
Develop and maintain Windows device enrollment, provisioning, Autopilot, and lifecycle management processes
Manage endpoint standards for corporate devices, virtual desktops, remote users, and shared workstations
Ensure endpoint management practices align with security, compliance, audit, and operational support requirements
Provide Tier 3/engineering-level support for endpoint management escalations
Own the enterprise application catalog strategy for Microsoft-managed endpoints
Package, test, deploy, and maintain business applications through Intune, SCCM, Company Portal, and other approved distribution mechanisms
Develop application deployment standards, including detection rules, dependency management, rollback procedures, and user communication processes
Partner with Service Desk and Application Support teams to ensure cataloged applications are current, accurate, supportable, and easy for users to access
Establish repeatable intake, testing, approval, and publishing processes for new applications
Monitor application deployment success rates, failures, remediation actions, and user adoption
Identify opportunities to reduce manual installs, improve self-service, and streamline application lifecycle management
Design and implement modern patch management strategies using Intune, Windows Update for Business, Autopatch, SCCM, and related Microsoft technologies
Own patch compliance reporting, exception handling, deployment rings, maintenance windows, and remediation workflows
Partner with Security and Infrastructure teams to ensure timely remediation of vulnerabilities across Windows endpoints and Microsoft-managed devices
Develop patching dashboards, compliance metrics, and executive-ready reporting for endpoint health
Create controlled deployment strategies for OS updates, feature updates, driver updates, firmware updates, and third-party application updates where applicable
Continuously improve patch success rates, reduce endpoint risk, and minimize disruption to end users
Serve as a solution provider for business and IT teams by designing practical, scalable Microsoft-based solutions
Lead technical discovery, requirements gathering, design, implementation, testing, rollout, and operational handoff for Microsoft platform initiatives
Evaluate current-state tools, processes, and configurations to identify gaps, risks, inefficiencies, and opportunities for standardization
Create technical roadmaps for Microsoft platform maturity, including endpoint modernization, application lifecycle automation, and user productivity enhancements
Develop proof-of-concepts and pilots for new Microsoft capabilities before enterprise rollout
Partner with Security, Compliance, and IT leadership to align Microsoft platform initiatives with enterprise risk and governance requirements
Contribute to cost optimization by improving license utilization, eliminating duplicate tools, and maximizing existing Microsoft E5 investments
Create and maintain technical documentation, runbooks, support guides, architecture diagrams, SOPs, and knowledge base articles
Define clear operational handoffs between Engineering, Service Desk, Security, and Application Support teams
Establish governance for Microsoft 365 configuration changes, endpoint policy updates, application catalog publishing, and patch deployment
Participate in change management/CAB processes for production-impacting Microsoft platform changes
Define success metrics and regularly report on platform health, adoption, compliance, and operational performance
Mentor Service Desk and junior engineers on Microsoft platform support practices
Drive continuous improvement using measurable outcomes, operational data, and user feedback

Skills

* Strong hands-on experience with Microsoft 365 E5 services and administration
* Deep understanding of Office desktop applications, Teams, Outlook, OneDrive, SharePoint, Exchange Online, Copilot, Defender, Purview, Insights and Microsoft 365 Apps for Enterprise
* Experience with Microsoft 365 Admin Center, Endpoint Manager Admin Center, Entra ID, and related admin portals
* Ability to configure, support, and troubleshoot Microsoft productivity platforms in an enterprise environment
* Understanding of Microsoft licensing concepts, especially E5 capability differences and optimization opportunities
* Advanced experience with Microsoft Intune
* Advanced experience with Microsoft Configuration Manager/SCCM
* Strong understanding of co-management, cloud attach, device collections, deployment rings, compliance policies, and configuration profiles
* Experience with Windows Autopilot, Windows enrollment, device provisioning, and endpoint lifecycle management
* Experience managing Windows 11 enterprise endpoints
* Ability to troubleshoot endpoint policy application, device compliance, enrollment failures, deployment issues, and configuration drift
* Experience packaging and deploying applications using Intune and SCCM
* Knowledge of MSI, EXE, Win32 app packaging, PowerShell-based deployments, detection rules, dependencies, superdense, and uninstall logic
* Experience managing self-service app catalogs through Company Portal or similar enterprise portals
* Ability to standardize software deployment processes and improve app delivery reliability
* Experience with application testing, rollback planning, and production deployment governance
* Strong knowledge of Windows Update for Business, Intune update rings, feature update policies, quality updates, and driver management
* Experience with SCCM software updates, ADRs, patch collections, maintenance windows, and compliance reporting
* Understanding of vulnerability remediation workflows and endpoint security hygiene
* Ability to partner with Security teams to prioritize patching based on risk, severity, exploitability, and business impact
* Experience building patch compliance reports and operational dashboards
* Strong PowerShell scripting skills for automation, reporting, troubleshooting, and endpoint remediation
* Ability to automate repetitive endpoint and Microsoft 365 administration tasks
* Familiarity with remediation scripts, proactive remediations, detection scripts, and configuration validation
* Strong analytical and troubleshooting skills
* Ability to work independently as a senior technical owner
* Strong documentation and communication skills
* Ability to explain technical concepts to both technical and non-technical audiences
* Strong customer-service mindset with focus on user experience
* Ability to balance security, usability, compliance, and operational efficiency
* Experience working in ITIL-based environments, including incident, problem, change, and request management
* Ability to mentor junior team members and influence peers without direct authority
* 7+ years of IT infrastructure, endpoint engineering, or Microsoft platform experience
* 5+ years of experience with Microsoft 365 administration
* 5+ years of experience with SCCM/Microsoft Configuration Manager
* 3+ years of experience with Microsoft Intune
* Strong experience with Windows endpoint management, Office applications, app packaging, and patching
* Strong PowerShell scripting and automation skills
* Experience with Windows Autopilot, Company Portal, update rings, compliance policies, and app deployment
* Strong troubleshooting, documentation, and stakeholder communication skills
* Remote candidates must be available to work Pacific Time Zone hours
* Applicants must be authorized to work for any employer in the U.S
* Experience using Microsoft Graph PowerShell or Graph API is highly preferred
* Understanding of JSON, CSV, REST APIs, and automation workflows is preferred
* Microsoft 365 Certified: Endpoint Administrator Associate
* Experience with Entra ID, Defender for Endpoint, Conditional Access, Autopatch, and Microsoft Graph
* Experience with Power BI or other reporting tools
* Experience in ITIL, SOX, audit, or regulated environments

Benefits

US – Remote: This is a remote position open to candidates anywhere in the United States.
Candidates based in the greater Seattle area will work a hybrid remote/in-office schedule from our casual, pet-friendly office at least 3 days a week (Tuesday, Wednesday, and Thursday).
Trupanion employees are currently eligible for monthly bonuses.
We grant Restricted Stock Units to all new team members. Our new hire grants vest over 4 years.
Full medical, dental, and vision benefits at no cost to the employee
Four weeks of paid time off and 9 paid float holidays (you can decide which days are most important to you!)
Five-week sabbatical after five years of employment
Open, casual, pet-friendly, and fun office environment
Free medical health insurance for your pet (1 dog or cat)
Paid time off to volunteer at nonprofit organizations
Seattle Office Amenities: Free on-site gym, free dog walking services for office pets during business hours, free parking, and paid ORCA cards.

Company Overview

Trupanion is an insurance company which provides pet care insurance. It was founded in 1999, and is headquartered in Seattle, Washington, USA, with a workforce of 1001-5000 employees. Its website is http://trupanion.com.

Apply Now