Planet is a leading technology company transforming payments by putting customer experience first. We offer integrated solutions that include payment processing, VAT refunds, dynamic currency conversion, and management services for merchants in the Retail and Hospitality sectors worldwide.
In recent years, we have experienced significant growth, expanding our services and global presence.
With strong private equity investors, Advent International and Eurazeo, we have the financial capital and expertise to grow our capabilities and reach through acquisitions.
Our mission is to create a world of connected commerce where payments are simple, secure, and seamless, enabling our partners to deliver exceptional experiences to their customers.
Role Overview:
This role owns the engineering and reliability of Planet’s endpoint estate across Windows and macOS, delivered through Microsoft Intune and JAMF. Day to day, you will build and maintain device policies, patching and compliance, application packaging and deployment, and the golden standards that keep thousands of devices secure, consistent, and well-managed.
What you will do:
Endpoint management — Own and engineer the Windows and macOS estate through Microsoft Intune and JAMF, including policies, baselines, and compliance.
Application packaging & deployment — Package, test, and deploy applications (Win32, MSI, macOS) and manage the enterprise application catalogue.
Patching & updates — Design and run OS and third-party patching (Windows Update for Business, JAMF Patch); maintain compliance and reporting.
Device provisioning — Engineer zero-touch provisioning with Autopilot and JAMF; standardise imaging, enrolment, and configuration.
Endpoint security & compliance — Implement hardening, encryption (BitLocker / FileVault), and compliance policies in line with PCI DSS and security standards.
Automation — Automate endpoint tasks and remediations with PowerShell, the Microsoft Graph API, and shell scripting.
Escalation & 3rd line — Act as the highest escalation point for endpoint incidents and problems; drive permanent fixes.
Standards & documentation — Own endpoint standards, runbooks, and configuration baselines; keep them current and audited.
Continuous improvement — Track device health and compliance and improve the digital employee experience.
Success Measures
Thousands of Windows and macOS devices managed to standard through Intune and JAMF - high patch compliance, zero-touch provisioning, and a consistent, secure endpoint experience.
Who you are:
Deep hands-on experience engineering Microsoft Intune (device and app management, compliance, Autopilot).
Strong macOS management experience with JAMF Pro.
Application packaging and deployment expertise (Win32, MSI, PSADT, macOS packaging).
OS and third-party patching at scale, with compliance reporting.
Strong scripting and automation - PowerShell and the Microsoft Graph API; shell scripting for macOS.
Solid understanding of endpoint security - encryption, hardening, and compliance in a regulated environment.
Knowledge of Entra ID device identity, Conditional Access, and co-management.
Experience in an ITIL, change-controlled environment.
Microsoft (MD-102) or JAMF certification desirable.
Why Planet
Planet is an equal opportunity employer where diversity is valued, and all employment is decided based on qualifications, merit, and business need.
Come and grow your career in the most exciting, fast paced technology market, with a business that delivers feel-good connected commerce. We would love to hear from you – Apply now.
At Planet, we embrace a hybrid work model, with three days a week in the office.
Reasonable accommodations may be made in order to allow for an individual to perform the essential functions of this role successfully.
Skills Required
- Deep hands-on experience engineering Microsoft Intune (device and app management, compliance, Autopilot)
- Strong macOS management experience with JAMF Pro
- Application packaging and deployment expertise (Win32, MSI, PSADT, macOS packaging)
- OS and third-party patching at scale with compliance reporting (Windows Update for Business, JAMF Patch)
- Engineer zero-touch provisioning with Autopilot and JAMF; imaging, enrolment, and configuration
- Strong scripting and automation skills: PowerShell, Microsoft Graph API, and shell scripting for macOS
- Solid understanding of endpoint security: encryption (BitLocker, FileVault), hardening, and compliance in regulated environments (PCI DSS)
- Knowledge of Entra ID device identity, Conditional Access, and co-management
- Experience working in an ITIL, change-controlled environment
- Microsoft (MD-102) or JAMF certification
Planet (weareplanet.com) Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Planet (weareplanet.com) and has not been reviewed or approved by Planet (weareplanet.com).
-
Fair & Transparent Compensation — Company materials indicate salaries are benchmarked to market throughout the year, suggesting a structured approach to aligning pay with role value. Feedback suggests some roles can negotiate competitive offers at hire.
Planet (weareplanet.com) Insights
What We Do
Planet is a leading global provider of integrated technology and payments solutions for retail and hospitality customers. We create great experiences for the millions of people who use our Payments, Software, and Tax Free solutions every minute of every day. Planet empowers its customers to deliver amazing customer experiences by combining payments and technology in ways that drive greater loyalty, increase revenue and save time. Founded over 35 years ago and with our headquarters in London, today we have more than 2,500 employees located across six continents serving our customers in over 120 markets
