Principal Client Platform Engineer
Posted Updated
Description
- Roblox is seeking a Principal Client Platform Engineer to serve as the technical architect of our global endpoint ecosystem
- Reporting to the Client Services Manager, you will define the long-term strategy for how our fleet scales, secures, and evolves
- This role goes beyond day-to-day management — you will establish architectural standards, drive automation-first platform design, and ensure thousands of builders have secure, reliable tools to do their best work
- From strengthening our security posture in a complex hybrid environment to mentoring senior engineers, you will shape the technical foundation that powers innovation at Roblox
- Standardize the global security and management strategy for our entire fleet of macOS, Windows, Linux, Android, iOS, and ChromeOS devices to ensure peak performance and ironclad compliance
- Evolve of our deployment pipeline, driving the automated rollout of patches, OS upgrades, and complex certificate lifecycles for all endpoints
- Lead the hardening of our endpoint security posture, partnering with InfoSec to architect automated remediation workflows and deploying advanced observability tools like CrowdStrike, and Kolide
- Design and scale internally owned systems within our hybrid environment
- Lead complex platform initiatives from architecture through global deployment and operational maturity
- Collaborate with cross-functional stakeholders across Corporate Engineering, Security, Engineering, and People Ops to align technical roadmaps with broader company goals
- Navigate and resolve high-level ambiguity, transforming vague technical requirements into scalable engineering solutions
- Serve as a technical escalation point, diagnosing deep-level architectural failures in hardware, software, and enterprise networking
- Participate in the team’s on-call rotation, providing senior-level response for critical system availability and high-priority security incidents
- Advanced knowledge of Identity and Access Management and Zero Trust architecture across Okta, Google Workspace, and Entra ID
- Comfortable working through ambiguity, with the ability to provide technical clarity and direction in a fast-paced, evolving environment
- A security-focused architect passionate about solving complex endpoint challenges at scale
- 10+ years of experience in endpoint engineering, systems architecture, or infrastructure engineering
- Proven experience securing and managing global fleets of 5,000+ devices
- Experience implementing Infrastructure-as-Code and GitOps-based configuration management
- A collaborative engineer who builds strong relationships with cross-functional partners and mentors junior & senior team members
- Demonstrated ability to lead large technical initiatives and influence cross-functional stakeholders
- Heavily metrics-driven and customer-centric, using data to validate the effectiveness of security controls and improve the Builder experience
- Deep expertise with endpoint management platforms such as Jamf Pro, Workspace ONE, Google Endpoint Management, Fleet, or Microsoft Intune
- Strong programming ability in Python, Bash, Go, or Ruby with a focus on automation and systems integration
- Strong understanding of PKI, certificate lifecycle management, and enterprise networking security