Endpoint Automation Engineer

About the role

We are looking for a hands-on Endpoint Automation Engineer to design, build and continuously improve the automation that powers our global endpoint environment. This is a cross-platform engineering role focused on making endpoint services scalable, secure, reliable and consistent across Windows, macOS, Linux and mobile devices.

You will replace repetitive administration with reusable code, integrations and event-driven workflows. Working across endpoint management, identity, security, application delivery, observability and device lifecycle services, you will use the Microsoft technology stack as core platforms while creating automation that operates across a broader endpoint technology ecosystem.

• Location: Amsterdam, The Netherlands
• Contract: Employee, Full Time
• Category: Business Services
• Team: IT
• Department: Shared Services
• Work flexibility: TomTom’ers come to the office two days a week, and the remaining three are free to be worked in either location.

Engineering mindset

Automation is the product, not an afterthought. We are looking for someone who sees a repetitive task, fragile hand-off or one-off script and asks, “How can we make this reliable, reusable and self-service?”

You should be comfortable investigating unfamiliar systems, working from API documentation and turning operational requirements into maintainable automation. Your designs account for failure, test before release, instrument what you build and favour reusable services over isolated scripts. You take ownership from design through operation, document your solutions and balance long-term engineering improvements with immediate business needs.

What success looks like

You will measurably reduce manual work, deployment lead time and configuration inconsistency across the endpoint estate. Provisioning, configuration, software delivery, patching, compliance and lifecycle processes will become increasingly automated, observable, auditable and recoverable.

Over time, you will help establish a shared Endpoint Automation model in which cross-platform services are delivered through reusable code, APIs, pipelines and common engineering standards rather than only platform-specific administration.

What you'll do

• Design and maintain automation frameworks for endpoint enrollment, provisioning, configuration, application delivery and retirement.
• Build reusable tools, services and workflows using PowerShell, APIs and other appropriate programming languages.
• Integrate endpoint platforms with identity, security, infrastructure, asset and service-management systems.
• Apply Git, CI/CD, automated testing and configuration-as-code practices to make endpoint changes controlled, repeatable and auditable.
• Identify manual, error-prone or fragmented processes and redesign them as resilient, self-service automation.

Security, Compliance & Observability

• Translate endpoint security and compliance requirements into policy-as-code, automated controls and measurable outcomes.
• Automate operating-system and third-party application patching, vulnerability remediation and exception handling.
• Build automated guardrails for encryption, endpoint protection, authentication and device compliance.
• Create telemetry, dashboards and alerting that provide actionable visibility into automation performance, device health and risk.
• Partner with Security teams to automate evidence collection, audit reporting and remediation workflows.

Engineering, Lifecycle & Support

• Define endpoint automation architecture, engineering standards and a roadmap that reduces operational effort and platform fragmentation.
• Engineer automated application packaging, deployment, update and rollback pipelines.
• Evaluate platform capabilities, APIs and emerging technologies for opportunities to simplify or extend endpoint automation.
• Troubleshoot complex failures across automation, endpoints, identity, networking, security and device-management services.
• Convert recurring incidents and support escalations into automated detection, remediation or prevention.
• Document automation designs, operating models and support procedures, and enable teams to use them effectively.

What you'll need

• Minimum 5 years of experience building automation for endpoint operations in a modern enterprise environment.
• Hands-on expertise with Microsoft Intune, Entra ID, Windows Autopilot and endpoint compliance, with the ability to automate their administration through supported interfaces.
• Demonstrated ability to create production-quality automation using PowerShell, REST APIs, Microsoft Graph, or other programming languages.
• Experience automating application packaging, deployment, patching and vulnerability-remediation workflows.
• Practical knowledge of Git, CI/CD, testing, secrets management and controlled configuration deployment.
• Strong understanding of endpoint security, modern identity and the interaction between devices, cloud services and automation platforms.
• A bachelor’s degree in IT, Computer Science or equivalent practical experience.

Additional experience that would be valuable:

• Automating macOS and Jamf, Linux endpoint management, or mobile device-management platforms.
• Azure or other cloud services for hosting functions, workflows, integrations and automation data.
• Infrastructure or configuration as code, automated testing and release pipelines.
• Vulnerability-management, endpoint-security or observability platforms with accessible APIs.
• SSO, OAuth, SQL and data-analysis technologies used in system integrations and reporting.

What we offer

A competitive compensation package, of course.

Time and resources to grow and develop, including a personal development budget and paid leave for learning days, as well as paid access to e-learning resources such as O’Reilly and LinkedIn Learning.

Time to support life outside of work, with enhanced parental leave plus paid leave to care for loved ones and volunteer in local communities.

Improve your home office with a setup budget and get extra support with a monthly allowance.

Enjoy options to work from your home country and abroad for a set number of days each year, to visit family and friends, or to simply explore the world we’re mapping.

Take the holidays you want with a competitive holiday plan, plus an extra day off to celebrate your birthday.

Join annual events like our Hackathon and DevDays to bring your ideas to life with talented teammates from around the world.

Meet your team

We’re Employee IT. We’re on a mission to deliver a seamless user experience for TomTom'ers across. Whether we're creating solutions to enable collaboration, increase productivity or help people communicate, your work will ensure TomTom'ers are equipped to create the first real-time map. In our team, you’ll help design, develop, deliver, operate and support solutions through a defined set of services, so that we can continue to bring people closer to the world around them.