At Finastra, we’re a global leader in financial services software, dedicated to expanding access to financial services and shaping what’s next for the industry. Our technology powers mission‑critical solutions across Lending, Payments and Universal Banking, supporting over 7,000 customers, including 80% of the world’s top 50 banks, in more than 110 countries.
We are seeking a Senior Client Platform Engineer to join our Workplace Technology team. This role will serve as a senior technical engineer and subject matter expert responsible for the engineering, security, automation, and lifecycle management of Finastra's endpoint platforms and services across the organization.
The successful candidate will drive the strategy, modernization, and operational excellence of endpoint technologies supporting Windows, macOS, iOS, and other client platforms. While a significant focus of this role will be on Apple technologies and their continued adoption across the enterprise, the engineer will also support broader endpoint management, security, compliance, and user experience initiatives.
Working closely with Endpoint Security, Security Engineering, Service Management, and Support teams, you will play a key role in shaping the future of endpoint management, device security, workplace automation, and modern end-user computing services.
This role is ideal for an experienced endpoint engineer who combines deep Apple expertise with broad endpoint management, security, and automation capabilities.
Key Responsibilities
Endpoint Platform Ownership
- Serve as a senior technical owner for enterprise endpoint platforms, with primary accountability for Apple technologies and support for the broader endpoint ecosystem.
- Define platform standards, engineering best practices, governance models, and technology roadmaps.
- Drive platform modernization initiatives focused on automation, security, operational efficiency, and user experience.
- Evaluate emerging endpoint technologies and provide recommendations for adoption.
- Act as a senior escalation point and subject matter expert for endpoint management technologies and services.
Endpoint Management & Device Lifecycle
- Manage the lifecycle of enterprise endpoint devices, including Windows, macOS, iOS, and mobile platforms from enrollment through retirement.
- Design and maintain automated provisioning, deployment, and device management processes.
- Support hardware refresh programs, lifecycle governance, and platform standardization initiatives.
- Ensure a secure, reliable, and consistent user experience across endpoint platforms.
Endpoint Management Platforms
- Administer and engineer enterprise endpoint management technologies including Microsoft Intune, IRU (formerly Kandji), Microsoft Configuration Manager (SCCM/MECM), Apple Business Manager, compliance policies, software distribution, and automated device enrollment.
- Develop scalable management frameworks supporting global endpoint deployments.
- Optimize device compliance, reporting, software distribution, and operational workflows.
- Support coexistence and modernization initiatives across endpoint management platforms.
Operating System & Application Management
- Plan, test, and deploy operating system updates and major releases across Windows and Apple platforms.
- Package, deploy, and manage enterprise applications.
- Maintain application compatibility and supportability across endpoint environments.
- Develop deployment standards, release management processes, and endpoint configuration baselines.
- Partner with business and technology teams to support application modernization initiatives.
Security & Compliance
- Implement and maintain endpoint security baselines and compliance standards.
- Partner with security teams to support vulnerability management, remediation, and endpoint risk reduction initiatives.
- Support deployment and management of enterprise security tools across endpoint devices.
- Assist with regulatory, audit, and compliance requirements while ensuring alignment with corporate security policies and standards.
Identity & Access Management
- Support integration between endpoint platforms and enterprise identity services.
- Manage integrations with Microsoft Entra ID, SSO, MFA, Conditional Access, and device compliance policies.
- Support modern device identity, Zero Trust, and secure access initiatives.
Automation & Engineering
- Develop automation solutions using scripting, APIs, and platform-native capabilities.
- Build proactive remediation, self-healing, and operational automation solutions.
- Integrate endpoint management platforms with enterprise systems and workflows.
- Develop reporting and operational dashboards to support platform management and decision-making.
Operational Excellence & Governance
- Monitor endpoint health, security, compliance, operational performance, and user experience metrics.
- Drive continuous service improvement, automation, and platform maturity initiatives.
- Create and maintain technical documentation, standards, architecture diagrams, and operational procedures.
- Participate in audits, governance reviews, technology assessments, and platform roadmap planning.
Qualifications
Required
- 5-7+ years of experience engineering and managing enterprise endpoint platforms.
- 4+ years of hands-on Apple platform administration and engineering experience.
- Experience with Microsoft Intune, Kandji, Jamf, or comparable endpoint management platforms.
- Strong understanding of Windows and Apple device management within enterprise environments.
- Experience managing endpoint security, compliance controls, vulnerability remediation, and device lifecycle services.
- Experience supporting operating system management, software deployment, and endpoint update management.
- Strong scripting and automation skills using PowerShell, Bash, Python, or similar technologies.
- Experience integrating endpoint platforms with identity and security services.
- Strong troubleshooting, analytical, and problem-solving abilities.
- Excellent written and verbal communication skills.
Preferred
- Experience with Apple Business Manager and Automated Device Enrollment.
- Experience integrating Apple devices with Entra ID and Conditional Access.
- Experience with Microsoft Intune and modern endpoint management practices.
- Experience supporting enterprise security tooling and vulnerability management programs.
- Experience within highly regulated and global enterprise environments.
- Apple, Microsoft, or endpoint management certifications.
- Experience supporting cloud-first workplace and endpoint modernization initiatives
We are proud to offer a range of incentives to our employees worldwide. These benefits are available to everyone, regardless of grade, and reflect the values we stand for:
Flexibility: Enjoy unlimited vacation, subject to local regulations and business priorities. Benefit from hybrid working arrangements and inclusive policies such as paid time off for voting, bereavement, and sick leave.
Well‑being: Access confidential one‑to‑one support through our Employee Assistance Program, connect with our network of Wellbeing Champions and Gather Groups, and take part in monthly events and initiatives designed to help you thrive—inside and outside of work.
Health & Financial Security: Medical, life and disability insurance, retirement plans, lifestyle, and other benefits.*
Sustainability: Paid time off for volunteering and donation‑matching opportunities to support causes that matter to you.
Inclusion: Get involved in our inclusion communities, such as Count Me In, Culture@Finastra, Proud@Finastra, Disabilities@Finastra, and Women@Finastra—open to everyone who wants to participate and contribute.
Career Development: Access online learning and accredited courses through our Skills & Career Navigator tool.
Recognition: Take part in our global recognition program, Finastra Celebrates, and share your voice through regular employee surveys that help shape our culture and ways of working.
*Specific benefits may vary by location.
At Finastra, each individual is unique—bringing their own ideas, perspectives, cultural backgrounds, and experiences. We learn from one another, value what makes us different, and create an environment where everyone feels included, supported, and able to be their authentic selves.
Be unique. Be exceptional. Help us make a difference at Finastra.
Skills Required
- 5-7+ years of experience engineering and managing enterprise endpoint platforms
- 4+ years of hands-on Apple platform administration and engineering experience
- Experience with Microsoft Intune, Kandji, Jamf, or comparable endpoint management platforms
- Strong understanding of Windows and Apple device management in enterprise environments
- Experience managing endpoint security, compliance controls, vulnerability remediation, and device lifecycle services
- Experience with operating system management, software deployment, and endpoint update management
- Strong scripting and automation skills using PowerShell, Bash, Python, or similar technologies
- Experience integrating endpoint platforms with identity and security services
- Strong troubleshooting, analytical, and problem-solving abilities
- Excellent written and verbal communication skills
- Experience with Apple Business Manager and Automated Device Enrollment
- Experience integrating Apple devices with Entra ID and Conditional Access
- Experience with Microsoft Intune and modern endpoint management practices
- Experience supporting enterprise security tooling and vulnerability management programs
- Experience within highly regulated and global enterprise environments
- Apple, Microsoft, or endpoint management certifications
- Experience supporting cloud-first workplace and endpoint modernization initiatives
Finastra Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Finastra and has not been reviewed or approved by Finastra.
-
Leave & Time Off Breadth — Leave is positioned as flexible/“unlimited” in many roles, which can support work-life balance when team norms allow it. Hybrid/flexible working is also framed as a core part of the overall rewards experience.
-
Parental & Family Support — Parental leave is described as relatively generous in the US, with multiple references to roughly three months (or around 12 weeks) fully paid and equal leave for mothers and fathers. This is repeatedly highlighted as a meaningful component of the benefits package.
-
Wellbeing & Lifestyle Benefits — Wellbeing support is emphasized through offerings like an Employee Assistance Program and TaskHuman coaching, alongside volunteering time off and employee networks. These programs broaden total rewards beyond cash compensation.
Finastra Insights
What We Do
At Finastra our purpose is to unlock the power of finance for everyone & redefine finance for good. We’re the orchestrator of open finance; building and delivering innovative, next-generation technology on our open Fusion software architecture and cloud ecosystem. We’re one of the world’s largest FinTechs, working with over 9,000 customers including 90 of the top 100 banks globally. We’re creating a pioneering open platform that’s disrupting the financial industry, changing how financial software is developed and used. We believe in collaboration for innovation, to unlock the potential of people, businesses and communities. We have an unmatched portfolio of financial software and deliver mission critical solutions for financial institutions of all sizes, on premises or in the cloud. Our open architecture and platform approach embrace a wide ecosystem of partners and co innovators. Together we're leading the way in which applications are written, deployed and consumed in the world of financial services. Our people mission is to be the most loved and inclusive fintech company in the world; a mission we take seriously. DE&I factors into everything we do and every decision we make as a business. When you join Finastra, you open up a world of possibilities. With us, you can supercharge financial institutions, big tech and fintech while also building a more inclusive finance industry. We believe our people thrive when given the opportunity to be their authentic selves and we trust our people to work how, when and where they want; this is OPENworking. Our 2+ policy provides the perfect mix of focused work at home, coupled with the meaningful connection that comes from in person collaboration, coaching and community. We're rolling out a new programme where our people take as much leave as they need; we do not count vacation days and we trust our people to work in a way that suits them, when it suits them. Come join the future of Fintech, and make your world. OPEN.
