Workplace Platform Engineer

About the Role

NextEra is looking for a skilled Workplace Platform Engineer to oversee and advance its digital workplace technologies. The role entails managing Microsoft 365 services, Entra ID, Intune-based endpoint administration, automation workflows, and productivity applications to deliver secure and efficient workplace solutions organization-wide.

Primary Responsibilities

• Design, deploy, and maintain architectures for Microsoft 365 and Entra ID (Azure AD).
• Manage Conditional Access, Single Sign-On, enterprise applications, privileged access, and identity governance.
• Resolve complex identity/authentication issues effectively.
• Lead Intune endpoint management covering device compliance, security baselines, application deployment, and update schedules.
• Integrate endpoint security and plan device lifecycles.
• Define workplace technology standards and develop service catalogues.
• Administer and govern productivity tools such as Jira, ManageEngine, n8n automation, DigiCert PKI, Figma, Adobe Experience Manager, and MarkMonitor.
• Collaborate with business units to enhance productivity and user satisfaction.
• Create automation scripts and workflows using PowerShell and n8n, employing best practices in code reviews, secrets management, monitoring, and error handling.
• Implement technical controls aligned with business security and compliance requirements across Microsoft 365 and endpoints.
• Manage risks, compliance initiatives, and ensure adherence to security standards.
• Handle escalation of Level 2 issues involving endpoints, identities, collaboration, and workplace systems.
• Perform root cause analyses and establish long-term solutions for recurring problems.
• Evaluate and conduct major platform changes with full rollback plans and documentation.
• Oversee vendor relations, software licenses, renewals, and optimize licensing costs.
• Develop and upkeep runbooks, knowledge bases, operational guidelines, and training resources for Service Desk teams.
• Define escalation procedures to empower Service Desk for autonomous resolution of standard requests.

Required Skills and Experience

• Demonstrable experience in workplace engineering, end-user computing, Microsoft 365 administration, or endpoint management.
• Strong hands-on expertise with Microsoft 365, Microsoft Entra ID (Azure AD), Conditional Access, and Microsoft Intune.
• Proficiency in endpoint security practices.
• PowerShell scripting and familiarity with automation platforms like n8n.
• Working knowledge of Jira, ManageEngine, Public Key Infrastructure (PKI) / certificate management, and allied workplace technologies.
• Track record of successfully handling critical escalations and resolving complex technical problems.
• Experience managing software vendors, subscriptions, and licensing models effectively.
• Excellent skills in documentation, stakeholder communication, and technical leadership.