Senior Endpoint Engineer

About the Team

Our Endpoint Security team is a crucial part of our global security organization, dedicated to safeguarding the devices and systems that power our business operations. We are a diverse group of engineers primarily based in North America and EMEA, with plans to extend our reach into the APAC region. Our team is responsible for ensuring that every endpoint within our organization is secure, resilient, and compliant with the latest security standards.We thrive on collaboration, innovation, and a deep commitment to protecting the digital front lines of our enterprise. Working closely with IT and security teams across the globe, we leverage cutting-edge technologies to prevent, detect, and respond to threats. If you are passionate about endpoint security and eager to contribute to a team that makes a real difference on a global scale, you'll find your place with us.

About the Role

Roku is seeking a senior-level Endpoint/Device Security Management Engineer to help manage and secure their Windows/MacOS/Mobile devices, work on standardization efforts, and support geo-distributed workforce. The ideal candidate should have hands-on experience in securing and managing endpoints, working with system management tools such as Intune & JAMF, EDR technologies such as XDR and Defender, as well as knowledge of IT security practices and regulatory compliance. They should also possess strong analytical skills and the ability to communicate technical concepts effectively. 

What you’ll be doing 

• Manage our endpoints using tools such as Intune and JAMF. 
• Lead enterprise-wide standardization efforts for device and security management across all global regions, including monitoring, alerting, deployment, security, and device lifecycle management. 
• Assess, implement, and troubleshoot Roku’s Zero Trust Architecture. 
• Collaborate with teams to identify opportunities for automation and implement automated solutions where applicable. 

We’re excited if you have 

• 5+ years of hands-on experience deploying, managing, and securing device endpoints. 
• Solid knowledge of endpoint management systems, such as JAMF and Intune, for managing enterprise endpoints. 
• Demonstrated expertise in managing endpoint operating systems, including Windows 10/11, macOS, and mobile platforms (iOS and Android). 
• Proficient with endpoint and configuration management tools such as Intune and JAMF. 
• Familiarity with software update and vulnerability management on endpoints. 
• Experience creating, deploying, updating, and troubleshooting application packages using JAMF and Intune. 
• Strong commitment to endpoint management on both macOS and Windows. 
• Proficient with security concepts and able to troubleshoot and respond to security incidents. 
• Understanding of Microsoft’s Conditional Access policies. 
• Knowledge of EDR technologies, including Microsoft Defender and XDR. 
• Experience with MAM policy management for mobile devices. 
• Strong analytical skills and attention to detail to effectively troubleshoot complex issues. 
• Ability to communicate technical concepts to both technical and non-technical stakeholders through clear verbal and written communication skills. 
• B.S. degree in Computer Science, Information Technology, Engineering, or equivalent experience 

#LI-GL1