Engineering Manager - Client Platform & MDM

MongoDB is the unified data platform built for the AI era, enabling developers and enterprise organizations to build, transform, and scale applications. Over 67,000 customers—including 75% of the Fortune 100—rely on MongoDB Atlas across AWS, Google Cloud, and Microsoft Azure.

As Manager, Client Platform Engineering, you will own MongoDB’s worldwide endpoint estate, leading a globally distributed team of End User Computing (EUC) engineers responsible for macOS, Windows, and Linux endpoints, mobile device and application management, zero-touch provisioning, and patch delivery pipelines. This role combines deep hands-on client platform engineering expertise with people leadership to set technical strategy, instrument Digital Employee Experience (DEX) metrics, and partner closely with InfoSec on Zero Trust architecture and Conditional Access.

Key Responsibilities

• Global Endpoint Strategy & Roadmap: Own the architecture and multi-year roadmap across macOS, Windows, Linux, iOS, and Android endpoints—including MDM/UEM platform consolidation, configuration-as-code, and zero-touch provisioning.
• OS Release & Deployment Ring Management: Establish and run deployment rings, compatibility gating, and rollback plans for major and minor OS releases across all three desktop operating systems to meet strict compliance targets.
• Modern Management Administration: Administer and evolve MongoDB's management stack (Jamf Pro, Microsoft Intune, Kandji, Workspace ONE), leveraging Apple Declarative Device Management (DDM), Windows Autopilot, and Windows Autopatch.
• Mobile & BYOD Architecture: Lead mobile security end-to-end, balancing data protection against user experience via MDM for corporate devices and MAM/App Protection Policies (Intune, Android Enterprise Work Profile, Apple User Enrollment) for BYOD.
• Digital Employee Experience (DEX): Build and operate MongoDB’s Endpoint DEX program using telemetry tooling (Nexthink, SysTrack, ControlUp, Fleet/osquery, Intune Advanced Analytics) to define SLOs and automate proactive remediation.
• InfoSec Alignment & Device Trust: Partner with InfoSec and Identity teams to implement security baselines, patch SLAs, disk encryption key escrow, Conditional Access (Okta/Entra ID), and device trust controls.
• Engineering Management & Automation: Hire, mentor, and lead an international team of EUC engineers, holding the team to Git-based workflows, peer reviews, infrastructure-as-code (Bash, Python, Swift, PowerShell, Ansible), and automated L3 escalations.
• Vendor & Budget Ownership: Serve as the technical owner for endpoint vendor relationships, hardware evaluation, and the global IT endpoint tooling and licensing budget.

Requirements

EUC Architecture & Engineering Leadership Depth

• 8+ years of progressive experience in end-user computing, client platform engineering, or workplace engineering.
• 3+ years of direct people management experience hiring, coaching, and leading software/systems engineers.
• Multi-Country Fleet Ownership: Proven track record owning a multi-OS fleet of several thousand endpoints distributed across international regions and time zones.
• Hands-On Multi-Platform Depth:
  • macOS: Modern MDM management (Jamf Pro, Kandji/Iru, Intune, Workspace ONE) with Apple Business Manager, Automated Device Enrollment, and Declarative Device Management (DDM).
  • Windows 11: Enterprise management using Microsoft Intune, Windows Autopilot, and Windows Autopatch.
  • Linux: Managing desktop Linux endpoints as code via Ansible, Fleet, or equivalent tools.
• Mobile Management: Experience deploying both corporate MDM and BYOD MAM models (Intune App Protection, Android Enterprise, Managed Apple Accounts).
• DEX & Telemetry: Practical experience instrumenting endpoints with telemetry platforms (Nexthink, SysTrack, ControlUp, Fleet/osquery) to establish DEX SLOs and drive proactive remediation.
• Scripting & IaC: Scripting automation skills using Bash, Python, Swift, or PowerShell combined with Git-based version control workflows.
• Cross-Functional Collaboration: Demonstrated success collaborating with InfoSec, Identity, and IT Service Delivery teams on enterprise-wide security initiatives.

Preferred Qualifications

• Industry Certifications: Jamf Certified Expert, Microsoft 365 Certified: Endpoint Administrator Associate, or equivalent.
• Active standing in the MacAdmins or EUC community (MacAdmins Slack, Jamf Nation, MMS) or contributions to open-source projects (Munki, Installomator, Nudge, swiftDialog, osquery).
• Experience supporting engineering-heavy populations with elevated privileges, virtualization needs, and local AI/developer tools.
• Hands-on experience designing Okta / Microsoft Entra ID Conditional Access policies and device trust integrations.
• Familiarity with Experience Level Agreements (XLAs), ITIL/ITSM practices, and managing multi-million-dollar endpoint licensing budgets.

12-Month Success Milestones

• Months 1–3: Complete onboarding, establish relationships across global regions, and publish a comprehensive assessment of the worldwide fleet (coverage, compliance gaps, tooling, and top risks) alongside a prioritized hiring/execution roadmap.
• Months 4–6: Bring the engineering team to 90%+ staffing, publish official EUC service metrics/SLOs (patch compliance, DEX score, zero-touch rates), and ship a major OS release under a defined ring strategy.
• Months 7–12: Establish a fully operational, high-performing international EUC organization that consistently hits OS patch targets, runs proactive automated remediation routines, and maintains an endorsed 12-month endpoint architecture roadmap.

Total Rewards & Benefits

• Compensation & Equity: Base salary range of $137,000 – $270,000 USD + equity packages + Employee Stock Purchase Program (ESPP) participation.
• Healthcare & Family Support: 20 weeks of fully paid gender-neutral parental leave, fertility and adoption assistance, and transgender-inclusive health coverage.
• Retirement & Wellness: 401(k) retirement plan with match, flexible paid time off (PTO), mental health counseling, and wellness reimbursements.