Endpoint Specialist

About the role

Planet is seeking an Endpoint Specialist to own the engineering and reliability of its Windows and macOS device estate. You will work with Microsoft Intune and JAMF to ensure thousands of devices are secure, compliant, and consistently managed across the organization.

Key responsibilities

• Design, implement, and maintain endpoint policies, baselines, and compliance rules for Windows and macOS using Intune and JAMF.
• Package, test, and deploy applications (Win32, MSI, macOS) and manage the enterprise application catalogue.
• Plan and execute OS and third‑party patching (Windows Update for Business, JAMF Patch) with full compliance reporting.
• Engineer zero‑touch device provisioning with Autopilot and JAMF, standardising imaging, enrolment and configuration.
• Implement endpoint security hardening, encryption (BitLocker, FileVault) and ensure adherence to PCI DSS and other security standards.
• Automate routine endpoint tasks and remediation using PowerShell, Microsoft Graph API and shell scripting.
• Serve as the highest escalation point for endpoint incidents, driving permanent fixes and maintaining runbooks.
• Monitor device health, track compliance metrics and continuously improve the digital employee experience.

Required profile

• Deep hands‑on experience with Microsoft Intune for device and app management, compliance and Autopilot.
• Strong macOS management background using JAMF Pro.
• Proven expertise in application packaging and deployment for Windows and macOS.
• Extensive experience designing and reporting on large‑scale OS and third‑party patching.
• Solid understanding of endpoint security, encryption and hardening practices.

Required skills

• Microsoft Intune
• JAMF Pro
• PowerShell
• Microsoft Graph API
• Shell scripting (macOS)
• Win32, MSI, PSADT packaging
• macOS application packaging
• Windows Update for Business
• BitLocker
• FileVault