Engineer - Endpoint Experience

Skills this role screens for

Also

Overview

We’re looking for an Engineer - Endpoint Experience to join the Endpoint Experience team we are building within Workplace Experience, part of Digital Foundation. The team owns how ASOS manages its estate of employee devices (laptops, workstations, phones, and tablets): how security policy reaches every device, how changes are proven safe before they roll out, how applications are packaged and offered to ASOSers, how we measure whether the service works, and which devices we buy in the first place.

ASOS is investing in endpoint engineering as an in-house capability. We want raising patch compliance, rolling out new tools to ASOSers (for example AI tooling for every employee), and evolving our device platforms to be routine engineering work we control end to end, rather than projects with long lead times. You will help build the foundations that make device management a product with version control, automated testing, staged rollouts, and clear metrics, and you will help evaluate the major device vendors and management platforms as we evolve our estate.

This is a hands-on engineering role in a growing team. You will work with senior engineers who will support your development, and you will own meaningful pieces of the platform end to end: building pipelines, writing automation, packaging applications, running device evaluations, and instrumenting the metrics that tell us how we are doing. Our device management platforms today are Intune for Windows and Jamf for Apple devices.

The role reports to the Engineering Manager for Endpoint Experience and works closely with Cyber Security, Developer Productivity, IT Support, Finance, and Procurement. The team is not a first-line support function: first response and device handover stay with IT Support, and servers are owned by Workplace Infrastructure (on-premises) and Developer Infrastructure (cloud).

Purpose of the Role

The Engineer - Endpoint Experience exists to help make the ASOS device estate secure by default, predictably reliable, and measurably good to use. Today, too much of what happens to a device between purchase and retirement is manual, slow to change, and hard to see. The team’s job is to make it engineered: every change versioned and reviewed, proven safe on a representative cohort before it reaches everyone, and visible in metrics that tell us whether employees are better off.

The work

Key Responsibilities

Also

Configuration & Compliance

• Build and maintain the pipelines that take device configuration and the security policy authored by Cyber Security as versioned code and deploy it through Intune and Jamf, and the automation that detects and reports drift
• Build and operate the automation that keeps patch compliance at the required level and reports it transparently
• Build and maintain endpoint security configurations and compliance baselines, implementing device controls defined by Cyber Security through Intune and Jamf.
• Build the device side of joiners-movers-leavers automation, from day-one provisioning to leaver device recovery and wipe

Also

Safe Change

• Build and operate the test harness that validates policy, OS, application, and configuration changes against representative device cohorts before fleet-wide rollout, including staged rings, health checks, and rollback, and keep those cohorts healthy and representative

Also

Measurement & Continuous Improvement

• Instrument device telemetry and build the dashboards that show service health, compliance, time to provision, change failure rate, support demand, and employee satisfaction
• Help run the regular cadence of employee feedback, investigate incidents and change failures, fix root causes, and feed learnings back into the harness and pipelines

Also

The ASOS App Store

• Package, test, and publish applications to the self-service catalogue and to automated deployments, keep them current with security updates prioritised, and retire software no longer needed or licensed
• Package and maintain the curated developer toolset with Developer Productivity, so that a new engineer’s machine is ready to build and ship on day one
• Automate repetitive packaging and update work so that employees can find and install what they need without a ticket

Also

Device Estate Governance

• Run structured evaluations of candidate devices with real users, collect performance, reliability, and satisfaction data, and write up the results
• Maintain device standards and employee personas, ensuring hardware, applications and device configurations remain aligned to business requirements, while supplying the data (device age, failure rates, cost) that informs lifecycle and refresh decisions.

Also

Cross-Functional Collaboration

• Work day to day with IT Support so that changes reaching the fleet are understood and supportable, and with Cyber Security engineers on translating requirements into tested device policy
• Share what you learn across Digital Foundation through documentation and demos

Also

What Success Looks Like

• Pipelines and automation you own running reliably, with runbooks others can follow, and your changes reaching the fleet through the harness with a low change failure rate
• Dashboards that colleagues across Workplace Experience and its stakeholders trust and use
• Applications you package reaching the fleet reliably, with employees able to self-serve rather than raise tickets
• Device evaluations that produce clear, evidence-based write-ups that inform purchasing decisions
• Visible growth in your ownership and technical scope over your first year

Who they want

About You

You have solid experience managing modern devices and want to move from operating tools to building the platform behind them. You are curious about how a fleet of devices can be managed like a production system, you enjoy automating things others do by hand, and you care about the people who use the devices you manage. AI assistants are a normal part of how you work, and you use them wherever they get you to a goal faster or better.

Also

You likely bring

• Hands-on experience with Microsoft Intune or Jamf Pro, ideally both, managing Windows or macOS devices in an enterprise environment
• Scripting and automation skills in PowerShell, Python, or shell, and some experience with version control and CI pipelines, or a strong desire to apply them to endpoint management
• An understanding of how endpoint security controls, compliance requirements, identity, and conditional access translate into device configuration
• Experience packaging and deploying applications and OS updates, and dealing with what happens when they go wrong
• Comfort with telemetry and data: building a dashboard, spotting a trend, and explaining what it means
• Fluency with AI-assisted ways of working, and an appetite to keep learning what they can do
• Clear written communication, and the habit of asking why a process exists before automating it

Also

Why This Role Matters

Every ASOS employee depends on devices that are secure, reliable, and stay out of their way. How we manage that estate determines how quickly we can respond to a new threat, how much time IT Support spends firefighting, and how much we spend on hardware. This role builds the foundations that let us move quickly on all three at once, with evidence rather than guesswork.

We believe being together in person helps us move faster, align more effectively, and build stronger teams. Our approach to working together includes spending at least two days a week in the office to support collaboration, decision-making, and shared ownership.

What's in it for you?…