Overview
We’re looking for a Senior Engineer - Endpoint Experience to join the Endpoint Experience team we are building within Workplace Experience, part of Digital Foundation. The team owns how ASOS manages its estate of employee devices (laptops, workstations, phones, and tablets): how security policy reaches every device, how changes are proven safe before they roll out, how applications are packaged and offered to ASOSers, how we measure whether the service works, and which devices we buy in the first place.
ASOS is investing in endpoint engineering as an in-house capability. We want raising patch compliance, rolling out new tools to ASOSers (for example AI tooling for every employee), and evolving our device platforms to be routine engineering work we control end to end, rather than projects with long lead times. You will build the foundations that make device management a product with version control, automated testing, staged rollouts, and clear metrics, and you will continuously evaluate the major device vendors and management platforms to drive the evolution of our estate.
This is a hands-on senior role. You will be one of the first engineers in a team we are growing, set the technical bar for those who join after you, do a large share of the building yourself, and act as the technical counterpart to Cyber Security, IT Support, and Procurement. You will own the technical approach for our device management platforms, today Intune for Windows and Jamf for Apple devices, and for our security baselines and endpoint automation.
The role reports to the Engineering Manager for Endpoint Experience and works closely with Cyber Security, Developer Productivity, IT Support, Finance, and Procurement. The team is not a first-line support function: first response and device handover stay with IT Support, and servers are owned by Workplace Infrastructure (on-premises) and Developer Infrastructure (cloud).
Purpose of the Role
The Senior Engineer - Endpoint Experience exists to make the ASOS device estate secure by default, predictably reliable, and measurably good to use. Today, too much of what happens to a device between purchase and retirement is manual, slow to change, and hard to see. The team’s job is to make it engineered: every change versioned and reviewed, proven safe on a representative cohort before it reaches everyone, and visible in metrics that tell us whether employees are better off.
Key Responsibilities
Technical Leadership
Set the engineering standards and technical approach for the team, shape the roadmap with the Engineering Manager, and make and document clear trade-offs between security, employee experience, cost, and simplicity
Configuration & Compliance
Design and build the pipeline that takes device configuration and the security policy authored by Cyber Security as versioned code, validates it, and deploys it through Intune and Jamf, so every change is traceable to a reviewed source and drift is detected
Safe Change
Design and build the test harness that validates policy, OS, application, and configuration changes against representative device cohorts before fleet-wide rollout, with staged rings, health gates, and automated rollback, so it becomes the single path to production for device changes
Measurement & Continuous Improvement
Define and publish the metrics that describe service health and employee experience (satisfaction, device health, compliance, time to provision, change failure rate, support demand), combine them with regular employee feedback, and turn them into a prioritised improvement backlog
Define the endpoint analytics strategy, establishing the measures, telemetry and service health indicators used to assess compliance, employee experience and platform effectiveness.
The ASOS App Store
Own the self-service application catalogue, the packaging standards and release process, and the lifecycle of applications on the estate, so that every application reaches devices through the same tested path as policy and stays current
Partner with Developer Productivity to define and maintain the curated developer toolset (IDEs, runtimes, CLIs, AI coding tools, security tooling) so that new engineers are productive on day one
Device Estate Governance
Own device standards per employee persona, run structured evaluations of hardware, vendors, and management platforms against fit for purpose and total cost of ownership, and make evidence-based recommendations to Procurement and Finance
Define the lifecycle and refresh approach for the estate, balancing cost, sustainability, security posture, and employee experience
Define how applications, configurations and device capabilities are mapped to employee personas, ensuring provisioning remains secure, supportable and automated.
What Success Looks Like