Principal Client Platform Engineer

Role Overview

Roblox is seeking a Principal Client Platform Engineer to serve as the technical architect of our global endpoint ecosystem. Reporting to the Client Services Manager, you will define the long-term strategy for how our fleet scales, secures, and evolves. You will establish architectural standards, drive automation-first platform design, and ensure builders have secure, reliable tools.

Responsibilities

• Standardize the global security and management strategy for our entire fleet of macOS, Windows, Linux, Android, iOS, and ChromeOS devices to ensure peak performance and ironclad compliance.
• Evolve our deployment pipeline, driving the automated rollout of patches, OS upgrades, and complex certificate lifecycles for all endpoints.
• Lead the hardening of our endpoint security posture, partnering with InfoSec to architect automated remediation workflows and deploying advanced observability tools like CrowdStrike and Kolide.
• Design and scale internally owned systems within our hybrid environment.
• Lead complex platform initiatives from architecture through global deployment and operational maturity.
• Collaborate with cross-functional stakeholders across Corporate Engineering, Security, Engineering, and People Ops to align technical roadmaps with broader company goals.
• Navigate and resolve high-level ambiguity, transforming vague technical requirements into scalable engineering solutions.
• Serve as a technical escalation point, diagnosing deep-level architectural failures in hardware, software, and enterprise networking.
• Participate in the team’s on-call rotation, providing senior-level response for critical system availability and high-priority security incidents.

Qualifications

• 10+ years of experience in endpoint engineering, systems architecture, or infrastructure engineering.
• Proven experience securing and managing global fleets of 5,000+ devices.
• Deep expertise with endpoint management platforms such as Jamf Pro, Workspace ONE, Google Endpoint Management, Fleet, or Microsoft Intune.
• Strong programming ability in Python, Bash, Go, or Ruby with a focus on automation and systems integration.
• Experience implementing Infrastructure-as-Code and GitOps-based configuration management.
• Advanced knowledge of Identity and Access Management and Zero Trust architecture across Okta, Google Workspace, and Entra ID.
• Strong understanding of PKI, certificate lifecycle management, and enterprise networking security.
• Demonstrated ability to lead large technical initiatives and influence cross-functional stakeholders.

Work Arrangement

Roles based in an office are onsite Tuesday, Wednesday, and Thursday, with optional presence on Monday and Friday.