Principal Client Platform Engineer

Roblox is seeking a Principal Client Platform Engineer to serve as the technical architect of our global endpoint ecosystem. Reporting to the Client Services Manager you will define the long-term strategy for how our fleet scales secures and evolves. This role goes beyond day-to-day management you will establish architectural standards drive automation-first platform design and ensure thousands of builders have secure reliable tools to do their best work. From strengthening our security posture in a complex hybrid environment to mentoring senior engineers you will shape the technical foundation that powers innovation at Roblox.

You Will:

• Standardize the global security and management strategy for our entire fleet of macOS Windows Linux Android iOS and ChromeOS devices to ensure peak performance and ironclad compliance.
• Evolve of our deployment pipeline driving the automated rollout of patches OS upgrades and complex certificate lifecycles for all endpoints.
• Lead the hardening of our endpoint security posture partnering with InfoSec to architect automated remediation workflows and deploying advanced observability tools like CrowdStrike and Kolide.
• Design and scale internally owned systems within our hybrid environment.
• Lead complex platform initiatives from architecture through global deployment and operational maturity.
• Collaborate with cross-functional stakeholders across Corporate Engineering Security Engineering and People Ops to align technical roadmaps with broader company goals.
• Navigate and resolve high-level ambiguity transforming vague technical requirements into scalable engineering solutions.
• Serve as a technical escalation point diagnosing deep-level architectural failures in hardware software and enterprise networking.
• Participate in the teams on-call rotation providing senior-level response for critical system availability and high-priority security incidents.

You Have:

• 10 years of experience in endpoint engineering systems architecture or infrastructure engineering.
• Proven experience securing and managing global fleets of 5000 devices.
• Deep expertise with endpoint management platforms such as Jamf Pro Workspace ONE Google Endpoint Management Fleet or Microsoft Intune.
• Strong programming ability in Python Bash Go or Ruby with a focus on automation and systems integration.
• Experience implementing Infrastructure-as-Code and GitOps-based configuration management.
• Advanced knowledge of Identity and Access Management and Zero Trust architecture across Okta Google Workspace and Entra ID.
• Strong understanding of PKI certificate lifecycle management and enterprise networking security.
• Demonstrated ability to lead large technical initiatives and influence cross-functional stakeholders.

You Are:

• A security-focused architect passionate about solving complex endpoint challenges at scale.
• Comfortable working through ambiguity with the ability to provide technical clarity and direction in a fast-paced evolving environment.
• Heavily metrics-driven and customer-centric using data to validate the effectiveness of security controls and improve the Builder experience.
• A collaborative engineer who builds strong relationships with cross-functional partners and mentors junior & senior team members.

Required Experience:

Staff IC