Senior Systems Engineer, Device Security Management

About the Team

Our Endpoint Security team is a crucial part of our global security organization, dedicated to safeguarding the devices and systems that power our business operations. We are a diverse group of engineers primarily based in North America and EMEA, with plans to extend our reach into the APAC region. Our team is responsible for ensuring that every endpoint within our organization is secure, resilient, and compliant with the latest security standards.We thrive on collaboration, innovation, and a deep commitment to protecting the digital front lines of our enterprise. Working closely with IT and security teams across the globe, we leverage cutting-edge technologies to prevent, detect, and respond to threats. If you are passionate about endpoint security and eager to contribute to a team that makes a real difference on a global scale, you'll find your place with us.

About the Role

Roku is seeking a senior-level Endpoint/Device Security Management Engineer to help manage and secure their Windows/MacOS/Mobile devices, work on standardization efforts, and support geo-distributed workforce. The ideal candidate should have hands-on experience in securing and managing endpoints, working with system management tools such as Intune & JAMF, EDR technologies such as XDR and Defender, as well as knowledge of IT security practices and regulatory compliance. They should also possess strong analytical skills and the ability to communicate technical concepts effectively. 

What you’ll be doing 

• Work on enterprise-wide standardization efforts around device & security management across all global regions, monitoring and alerting, deployment, security, and device lifecycle management
• Assess, implement and troubleshoot Roku’s Zero Trust Architecture
• Assist the wider IT Team which including Networking and Security within your local region and globally. 
• Collaborate with teams to identify opportunities for automation and implement automated solutions where applicable

We’re excited if you have 

• Strong analytical skills and attention to detail to effectively troubleshoot complex issues.
• Ability to communicate technical concepts to both technical and non-technical stakeholders through clear verbal and written communication skills.
• Solid knowledge of endpoint management systems, such as JAMF and Intune, for managing enterprise endpoints.
• Demonstrate a strong commitment to endpoint management on both MacOS and Windows.
• 5+ years of hands-on experience deploying, managing and securing device endpoints. 
• Demonstrated expertise in managing endpoint operating systems, including Windows 10/11, macOS, and mobile platforms (iOS and Android) 
• Proficient with Endpoint and Configuration Management tools such as Intune & JAMF
• Create, deploy, update and troubleshoot application packages using JAMF & Intune.
• Familiarity with software update management on endpoints
• EDR – solid understanding of Microsoft Defender & XDR.  
• Proficient with security concepts and able to troubleshoot and respond to security incidents. 
• Email Security using Barracuda, Microsoft, or similar products. 
• Azure Cloud and AWS experience is a bonus. 
• Able to understand and use logging for troubleshooting, incident response. 
• Understand of Microsoft’s Conditional Access policies
• Familiarity with Jira and Confluence
• Automation & programming skills with Azure bash, Apple script, PowerShell and MSFT Graph, other languages are a plus
• Understand of enterprise authentication: SSO, MFA, FIDO2 standard, Passkey
• Basic understanding of Zero Trust Architecture
• Good understanding of IT security relating to endpoints.   Able to train and assist people in a SOC or SIDAR role. 
• Azure OpenAI & CoPilot, ChatGTP, AI experience is a bonus.
• Linux Support is a plus along with network skills. 
• Certifications are considered advantageous.
• B.S. Degree in Computer Science, Information Technology, Engineering or equivalent experience.

#LI-GL1