Automation Engineer, Sr.

About the Stefanini DEX3Practice

The Stefanini DEX3Practice delivers Digital Employee Experience managed services to large global enterprise customers. The practice is organized into four tracks: Product Owners own the customer relationship, roadmap, and backlog Architects own platform and solution design Platform Engineers run the DEX platforms and Automation Engineers own the engineering lifecycle for automations delivered through the DEX platforms. Nexthink is the practice's primary DEX platform, withControlUp, LakesideSysTrack,Aternity, 1E, and other platforms supported based on customer requirements. Depending on the account, platforms are integrated with tools such as Microsoft Intune, ServiceNow, and Azure. The practice consults with customer endpoint teams on Microsoft Intune and builds specific Intune artifacts onrequest, butdoes not administer customer Intunetenantsday to day. Automation assets live in a shared GitHub library with pull-request review, AI-assisted code review, and automated code signing before anything reaches acustomerestate. The team works closely with Stefanini colleagues globally to standardize practices and share reusable assets.

Position Summary

The Senior DEX Automation Engineer designs, develops, tests, and implements endpoint automations that improve the Digital Employee Experience across large enterprise environments. The practice owns automation in the DEX platforms, so this role builds and operates remediation, self-healing workflows, platform integrations, and reusable automation assets primarily as Nexthink Remote Actions,ControlUpScript-Based Actions, and the supporting PowerShell and API layers behind them, across Windows, macOS, and virtual desktop environments. Deep Microsoft Intune and Unified Endpoint Management expertise is what makes those automations correct and makes the engineer a credible advisor to customer endpoint teams it is applied in a consulting capacity rather than as tenant administration.

The engineer works with the DEX3Practice Lead, Product Owners, Architects, Platform Engineers, customer endpoint teams, and IT service management stakeholders. The role translates DEX observations, device telemetry, recurring support demand, and customer priorities into secure, maintainable solutions that produce measurable operational and employee-experience outcomes.

Key Responsibilities

DEX Platform Automation (owned by the practice)

• Own the engineering lifecycle for automations delivered through the DEX platforms, from design and development through testing, release, support, and continuous improvement, including Nexthink Remote Actions andControlUpScript-Based Actions, triggers, and automation policies.

• Translate findings from Nexthink,ControlUp, and other DEX platforms into automated remediation and measurableservice-improvementuse cases.

• Develop automation workflows based on experience metrics, alerts, sentiment, and user-impacting events.

• Contribute to platform onboarding, use-case design,investigationworkflows, alert tuning, and technical validation.

Automation Engineering

• Design, develop, test, deploy, andmaintainproduction-grade endpoint automations using PowerShell and the DEX platforms native capabilities.

• Create proactive remediation, self-healing, validation, and recovery workflows for recurring endpoint and employee-experience issues.

• Build reusable automation assets and patterns that can be safely adapted across multiple customer environments.

• Follow the practice's GitHub-based workflow: branching, pull requests, peer and AI-assisted code review, testing, release notes, signed releases, and rollback plans.

• Implement structured logging, error handling, security controls, and operational monitoring for automated solutions.

• Use AI codingassistants responsiblyto accelerate development while retaining full ownership of correctness, security, and testing.

Microsoft Intune and UEM Advisory

• Act as the practice's Intune and UEM subject-matter expert for customer endpoint teams: assess configuration profiles, compliance policies, application deployment, endpoint security baselines, and lifecycle practices, and recommend improvements that reduce friction and support demand.

• Advise onWindows Autopilot, enrollment, provisioning, policy assignment, and device readiness, and on Windows 10/11, Microsoft Entra ID, Group Policy, co-management, and modern management transitions.

• Use Microsoft Graph and REST APIs to query device, application, identity, and compliance data for telemetry, validation, and reporting in support of DEX automations.

• Build specific Intune artifacts on request, such as a configuration profile, an Autopilot adjustment, or a remediation script package, and hand them to thecustomerendpoint team for deployment day-to-day tenant administration remains with the customer.

• Use Endpoint Analytics and device-health data alongside DEX telemetry toidentifyfriction and prioritize remediation opportunities.

ITSM and Azure Integration

• Integrate endpoint and DEX capabilities with ServiceNow or other ITSM platforms for incident enrichment, automated ticket creation and closure, and workflow automation.

• Design or contribute to supporting Azure services (Automation, Functions, Logic Apps, Key Vault) where platform-native capabilities are not sufficient, partnering with Azure specialists where deeper cloud engineering isrequired.

• Partner with the practice's ServiceNow and Azure engineers to keep integrations secure, supportable, and documented.

Customer Delivery and Engineering Practice

• Participate in discovery workshops, technical design sessions, sprint planning, demonstrations, and customer reviews.

• Work with Product Owners to estimate effort,identifydependencies and risks, document acceptance criteria, and communicate blockers early.

• Create clear technical designs, runbooks, support procedures, upgrade guides, andknowledge-transfermaterials.

• Mentor developing engineers, contribute to code reviews, and help evolve thepractice'sdevelopment standards and reusablelibrary.

• Collaborate with global Stefanini team members whilemaintainingdependable coverage for US customer hours.

Professional Experience

• 5+ years of experience in endpoint engineering, EUC, digital workplace, desktop engineering, UEM, or a closely related discipline.

• 3+ years of deep, hands-on Microsoft Intune experience in enterprise environments, sufficient to advise customer endpoint teams and to design remediations that respect their configuration.

• Experience supporting large-scale environments with thousands of endpoints and production change controls.

• Experience developing and operating automation used by enterprise support or engineering teams experience doing so in DEX platforms is highly preferred.

• Experience working directly with customers or internal stakeholders to gather requirements and deliver technical outcomes.

Core Technical Skills

• Advanced PowerShell scripting, including functions, modules, error handling, logging, testing, and maintainable code structure.

• Microsoft Intune, including configuration profiles, compliance policies, application packaging and deployment, endpoint security, reporting, and remediation capabilities.

• Windows Autopilot and Windows 10/11 endpoint provisioning, administration, troubleshooting, and lifecycle management.

• Microsoft Entra ID, identity and authentication fundamentals, Group Policy, and hybridendpoint-managementconcepts.

• Microsoft Graph API and REST API integration, including authentication, testing, and structured data handling.

• Git-based source control, including branching, pull requests, code review, testing, and release and rollback concepts.

• Secure handling of credentials, certificates, service principals, managed identities, and secrets, with least-privilege API access across Graph, ServiceNow, Intune, and Azure.

• Strong understanding of enterprise infrastructure fundamentals, including networking, identity, security, application delivery, and change management.

Professional Capabilities

• Strong analytical and troubleshooting skills with the ability to move from telemetry or symptoms to root cause and scalable remediation.

• Clear written and verbal communication with technical and non-technical audiences.

• Ability to work independently, manage competing priorities, document decisions, and deliver reliably in customer environments.

• Commitment to secure coding, peer review, testing, documentation, and continuous improvement.

Preferred Qualifications

DEX Platforms (highly preferred)

• Nexthink hands-on experience or certification, especially DEX Automation, Remote Actions, NQL, Content Management, or platform administration.

• ControlUpexperience, including Script-Based Action development, triggers, and automation policies.

• LakesideSysTrack,Aternity, 1E (TeamViewer DEX), or another enterprise DEX/endpoint observability platform.

• Experience building DEX-driven remediation or self-healing use cases.

Endpoint, Integration and Development

• ServiceNow integration or workflow automation (REST, Integration Hub, Flow Designer), or Jira Service Management.

• SCCM/Microsoft Configuration Manager and co-managementJamfor macOS management mobile device management.

• Azure Virtual Desktop, Citrix Virtual Apps and Desktops, VMware, or other VDI environments.

• Microsoft Defender for Endpoint, endpoint security baselines, vulnerability remediation, or security operations collaboration.

• GitHub Actions, CI/CD pipeline creation, or automated code signing for script delivery.

• Python, Azure Automation, Logic Apps, or Power Automate.

• AI coding assistants (GitHub Copilot, Claude Code, Cursor, or similar) applied to automation or analytics work.

• Power BI, dashboarding, operational analytics, benefit tracking, or value reporting.

• Microsoft 365 Endpoint Administrator, Intune, Azure, Nexthink,ControlUp, ITIL, or related certifications.

Education

Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent relevant professional experience.