- Location
- Galway - Ireland
- Workplace
- Hybrid
- Type
- Full-time
- Department
- Engineering
- Education
- Master
- Source
- Workday
Description
Planet is a leading technology company transforming payments by putting customer experience first. We offer integrated solutions that include payment processing, VAT refunds, dynamic currency conversion, and management services for merchants in the Retail and Hospitality sectors worldwide.
In recent years, we have experienced significant growth, expanding our services and global presence.
With strong private equity investors, Advent International and Eurazeo, we have the financial capital and expertise to grow our capabilities and reach through acquisitions.
Our mission is to create a world of connected commerce where payments are simple, secure, and seamless, enabling our partners to deliver exceptional experiences to their customers.
Role Overview:
This role owns the engineering and reliability of Planet’s endpoint estate across Windows and macOS, delivered through Microsoft Intune and JAMF. Day to day, you will build and maintain device policies, patching and compliance, application packaging and deployment, and the golden standards that keep thousands of devices secure, consistent, and well-managed.
What you will do:
Endpoint management — Own and engineer the Windows and macOS estate through Microsoft Intune and JAMF, including policies, baselines, and compliance.
Application packaging & deployment — Package, test, and deploy applications (Win32, MSI, macOS) and manage the enterprise application catalogue.
Patching & updates — Design and run OS and third-party patching (Windows Update for Business, JAMF Patch); maintain compliance and reporting.
Device provisioning — Engineer zero-touch provisioning with Autopilot and JAMF; standardise imaging, enrolment, and configuration.
Endpoint security & compliance — Implement hardening, encryption (BitLocker / FileVault), and compliance policies in line with PCI DSS and security standards.
Automation — Automate endpoint tasks and remediations with PowerShell, the Microsoft Graph API, and shell scripting.
Escalation & 3rd line — Act as the highest escalation point for endpoint incidents and problems; drive permanent fixes.
Standards & documentation — Own endpoint standards, runbooks, and configuration baselines; keep them current and audited.
Continuous improvement — Track device health and compliance and improve the digital employee experience.
Success Measures
Thousands of Windows and macOS devices managed to standard through Intune and JAMF - high patch compliance, zero-touch provisioning, and a consistent, secure endpoint experience.
Who you are:
Deep hands-on experience engineering Microsoft Intune (device and app management, compliance, Autopilot).
Strong macOS management experience with JAMF Pro.
Application packaging and deployment expertise (Win32, MSI, PSADT, macOS packaging).
OS and third-party patching at scale, with compliance reporting.
Strong scripting and automation - PowerShell and the Microsoft Graph API; shell scripting for macOS.
Solid understanding of endpoint security - encryption, hardening, and compliance in a regulated environment.
Knowledge of Entra ID device identity, Conditional Access, and co-management.
Experience in an ITIL, change-controlled environment.
Microsoft (MD-102) or JAMF certification desirable.
Why Planet
Planet is an equal opportunity employer where diversity is valued, and all employment is decided based on qualifications, merit, and business need.
Come and grow your career in the most exciting, fast paced technology market, with a business that delivers feel-good connected commerce. We would love to hear from you – Apply now.
At Planet, we embrace a hybrid work model, with three days a week in the office.
Reasonable accommodations may be made in order to allow for an individual to perform the essential functions of this role successfully.
