Automation Engineer, Sr.

Details: ROLE MISSION

Own the engineering lifecycle for automations delivered through the DEX platforms and advise customer endpoint teams on Microsoft Intune, turning endpoint telemetry, DEX insight, and recurring support demand into reliable, reusable remediations that improve employee experience, reduce support demand, and strengthen device health across the DEX 3 Practice's enterprise accounts.

Employment Type

Full time

Location

Remote or customer-aligned, with working hours that support US accounts

Practice

Stefanini DEX 3 Practice (Digital Employee Experience) - Automation Engineering track

Job Family

Endpoint Engineering / Digital Workplace / Automation Engineering

Internal HR Mapping

Software Engineer, Senior (primary); Automation Engineer, Senior (alternate). Working title remains Senior DEX Automation Engineer.

Level

Senior individual contributor

Reports To

DEX 3 Practice Lead

About The Stefanini DEX 3 Practice

The Stefanini DEX 3 Practice delivers Digital Employee Experience managed services to large global enterprise customers. The practice is organized into four tracks: Product Owners own the customer relationship, roadmap, and backlog; Architects own platform and solution design; Platform Engineers run the DEX platforms; and Automation Engineers own the engineering lifecycle for automations delivered through the DEX platforms. Nexthink is the practice's primary DEX platform, with ControlUp , Lakeside SysTrack , Aternity , 1E, and other platforms supported based on customer requirements. Depending on the account, platforms are integrated with tools such as Microsoft Intune, ServiceNow, and Azure. The practice consults with customer endpoint teams on Microsoft Intune and builds specific Intune artifacts on request, but does not administer customer Intune tenants day to day. Automation assets live in a shared GitHub library with pull-request review, AI-assisted code review, and automated code signing before anything reaches a customer estate. The team works closely with Stefanini colleagues globally to standardize practices and share reusable assets.

Position Summary

The Senior DEX Automation Engineer designs, develops, tests, and implements endpoint automations that improve the Digital Employee Experience across large enterprise environments. The practice owns automation in the DEX platforms, so this role builds and operates remediation, self-healing workflows, platform integrations, and reusable automation assets primarily as Nexthink Remote Actions, ControlUp Script-Based Actions, and the supporting PowerShell and API layers behind them, across Windows, macOS, and virtual desktop environments. Deep Microsoft Intune and Unified Endpoint Management expertise is what makes those automations correct and makes the engineer a credible advisor to customer endpoint teams; it is applied in a consulting capacity rather than as tenant administration.

The engineer works with the DEX 3 Practice Lead, Product Owners, Architects, Platform Engineers, customer endpoint teams, and IT service management stakeholders. The role translates DEX observations, device telemetry, recurring support demand, and customer priorities into secure, maintainable solutions that produce measurable operational and employee-experience outcomes.

Key Responsibilities

DEX Platform Automation (owned by the practice)

• Own the engineering lifecycle for automations delivered through the DEX platforms, from design and development through testing, release, support, and continuous improvement, including Nexthink Remote Actions and ControlUp Script-Based Actions, triggers, and automation policies.
• Translate findings from Nexthink, ControlUp , and other DEX platforms into automated remediation and measurable service-improvement use cases.
• Develop automation workflows based on experience metrics, alerts, sentiment, and user-impacting events.
• Contribute to platform onboarding, use-case design, investigation workflows, alert tuning, and technical validation.

Automation Engineering

• Design, develop, test, deploy, and maintain production-grade endpoint automations using PowerShell and the DEX platforms' native capabilities.
• Create proactive remediation, self-healing, validation, and recovery workflows for recurring endpoint and employee-experience issues.
• Build reusable automation assets and patterns that can be safely adapted across multiple customer environments.
• Follow the practice's GitHub-based workflow: branching, pull requests, peer and AI-assisted code review, testing, release notes, signed releases, and rollback plans.
• Implement structured logging, error handling, security controls, and operational monitoring for automated solutions.
• Use AI coding assistants responsibly to accelerate development while retaining full ownership of correctness, security, and testing.

Microsoft Intune and UEM Advisory

• Act as the practice's Intune and UEM subject-matter expert for customer endpoint teams: assess configuration profiles, compliance policies, application deployment, endpoint security baselines, and lifecycle practices, and recommend improvements that reduce friction and support demand.
• Advise on Windows Autopilot, enrollment, provisioning, policy assignment, and device readiness, and on Windows 10/11, Microsoft Entra ID, Group Policy, co-management, and modern management transitions.
• Use Microsoft Graph and REST APIs to query device, application, identity, and compliance data for telemetry, validation, and reporting in support of DEX automations.
• Build specific Intune artifacts on request, such as a configuration profile, an Autopilot adjustment, or a remediation script package, and hand them to the customer endpoint team for deployment; day-to-day tenant administration remains with the customer.
• Use Endpoint Analytics and device-health data alongside DEX telemetry to identify friction and prioritize remediation opportunities.

ITSM and Azure Integration

• Integrate endpoint and DEX capabilities with ServiceNow or other ITSM platforms for incident enrichment, automated ticket creation and closure, and workflow automation.
• Design or contribute to supporting Azure services (Automation, Functions, Logic Apps, Key Vault) where platform-native capabilities are not sufficient, partnering with Azure specialists where deeper cloud engineering is required.
• Partner with the practice's ServiceNow and Azure engineers to keep integrations secure, supportable, and documented.

Customer Delivery and Engineering Practice

• Participate in discovery workshops, technical design sessions, sprint planning, demonstrations, and customer reviews.
• Work with Product Owners to estimate effort, identify dependencies and risks, document acceptance criteria, and communicate blockers early.
• Create clear technical designs, runbooks, support procedures, upgrade guides, and knowledge-transfer materials.
• Mentor developing engineers, contribute to code reviews, and help evolve the practice's development standards and reusable library .
• Collaborate with global Stefanini team members while maintaining dependable coverage for US customer hours.

Job Requirements

Details: Professional Experience

• 5+ years of experience in endpoint engineering, EUC, digital workplace, desktop engineering, UEM, or a closely related discipline.
• 3+ years of deep, hands-on Microsoft Intune experience in enterprise environments, sufficient to advise customer endpoint teams and to design remediations that respect their configuration.
• Experience supporting large-scale environments with thousands of endpoints and production change controls.
• Experience developing and operating automation used by enterprise support or engineering teams; experience doing so in DEX platforms is highly preferred.
• Experience working directly with customers or internal stakeholders to gather requirements and deliver technical outcomes.

Core Technical Skills

• Advanced PowerShell scripting, including functions, modules, error handling, logging, testing, and maintainable code structure.
• Microsoft Intune, including configuration profiles, compliance policies, application packaging and deployment, endpoint security, reporting, and remediation capabilities.
• Windows Autopilot and Windows 10/11 endpoint provisioning, administration, troubleshooting, and lifecycle management.
• Microsoft Entra ID, identity and authentication fundamentals, Group Policy, and hybrid endpoint-management concepts.
• Microsoft Graph API and REST API integration, including authentication, testing, and structured data handling.
• Git-based source control, including branching, pull requests, code review, testing, and release and rollback concepts.
• Secure handling of credentials, certificates, service principals, managed identities, and secrets, with least-privilege API access across Graph, ServiceNow, Intune, and Azure.
• Strong understanding of enterprise infrastructure fundamentals, including networking, identity, security, application delivery, and change management.

Professional Capabilities

• Strong analytical and troubleshooting skills with the ability to move from telemetry or symptoms to root cause and scalable remediation.
• Clear written and verbal communication with technical and non-technical audiences.
• Ability to work independently, manage competing priorities, document decisions, and deliver reliably in customer environments.
• Commitment to secure coding, peer review, testing, documentation, and continuous improvement.

Preferred Qualifications DEX Platforms (highly preferred)

• Nexthink hands-on experience or certification, especially DEX Automation, Remote Actions, NQL, Content Management, or platform administration.
• ControlUp experience, including Script-Based Action development, triggers, and automation policies.
• Lakeside SysTrack , Aternity , 1E (TeamViewer DEX), or another enterprise DEX/endpoint observability platform.
• Experience building DEX-driven remediation or self-healing use cases.

Endpoint, Integration and Development

• ServiceNow integration or workflow automation (REST, Integration Hub, Flow Designer), or Jira Service Management.
• SCCM/Microsoft Configuration Manager and co-management; Jamf or macOS management; mobile device management.
• Azure Virtual Desktop, Citrix Virtual Apps and Desktops, VMware, or other VDI environments.
• Microsoft Defender for Endpoint, endpoint security baselines, vulnerability remediation, or security operations collaboration.
• GitHub Actions, CI/CD pipeline creation, or automated code signing for script delivery.
• Python, Azure Automation, Logic Apps, or Power Automate.
• AI coding assistants (GitHub Copilot, Claude Code, Cursor, or similar) applied to automation or analytics work.
• Power BI, dashboarding, operational analytics, benefit tracking, or value reporting.
• Microsoft 365 Endpoint Administrator, Intune, Azure, Nexthink, ControlUp , ITIL, or related certifications.

Education

Bachelor's degree in Computer Science , Information Technology, Engineering, or a related field, or equivalent relevant professional experience.

,