Endpoint Platform Engineer

Acknowledgement of Country 

CSIRO acknowledges the Traditional Owners of the land, sea and waters, of the area that we live and work on across Australia. We acknowledge their continuing connection to their culture and pay our respects to their Elders past and present. View our vision towards reconciliation. 

Role highlights

• Support world leading science through secure, modern endpoint technologies.
• Manage & enhance Windows, macOS & mobile platforms used across CSIRO.
• Drive innovation in endpoint management, automation & cyber security.

About CSIRO

As Australia's national science agency, CSIRO is solving the greatest challenges through innovative science and technology. Many of our iconic innovations were once considered impossible until someone, just like you, joined us and took on the challenge.

Visit CSIRO.au for more information.

The opportunity 

As the Endpoint Platform Engineer within CSIRO's Information Management & Technology (IM&T) team, you will play a key role in supporting and enhancing the endpoint platforms that underpin Australia's national science agency.

Working across Windows, macOS and iOS environments, you'll help design, deploy, manage and improve secure, modern endpoint solutions using technologies such as Microsoft Intune, Microsoft Configuration Manager, JAMF Pro, Entra ID and Windows Autopilot.

Collaborating with a geographically dispersed team, you'll contribute to the delivery of enterprise endpoint services, application packaging, device management, security compliance, patching and automation initiatives, ensuring staff across CSIRO's scientific, corporate and operational environments have reliable, secure and high-performing technology solutions.

High-level duties include:

• Administer, support and improve CSIRO’s managed endpoint services across Windows, macOS and iOS using Microsoft Intune, Microsoft Configuration Manager, Group Policy, JAMF Pro, Apple Business Manager and related enterprise endpoint management technologies.
• Configure and maintain endpoint enrolment, provisioning and management workflows, including Windows Autopilot, Microsoft Intune enrolment, Microsoft Configuration Manager, Apple Automated Device Enrolment, mobile device management workflows, configuration profiles and Volume Purchase Program application management.
• Package, test, deploy and maintain applications, scripts, configuration changes and self-service workflows for managed Windows and macOS endpoints.
• Support endpoint operating system lifecycle activities across Windows, macOS and iOS, including upgrades, patching, compliance reporting, troubleshooting, remediation and end-user support escalation.
• Administer and support Windows endpoint engineering activities, including Microsoft Configuration Manager, Microsoft Intune, Windows Autopilot, Windows Update for Business, Group Policy, application deployment, endpoint configuration and compliance remediation.
• Administer and support Apple endpoint engineering activities, including macOS and iOS devices managed through JAMF Pro, Apple Business Manager, Automated Device Enrolment, Volume Purchase Program, Microsoft Intune, configuration profiles, application deployment and compliance remediation.

Role particulars

Location and office arrangements: Kensington WA, clayton VIC, Black Mountain ACT, Waite SA, St Lucia QLD 

Salary: AU$100,103 – AU$113,251 per annum (pro rata for part-time), plus 15.4% superannuation

Tenure & work schedule: Indefinite

Reference: 103600

As the successful candidate, you will bring:

Essential criteria

• Demonstrated experience supporting Windows and Apple endpoint platforms in an enterprise environment, with the ability to troubleshoot complex technical problems and contribute to service improvement activities across managed endpoints.
• Experience with enterprise endpoint management technologies such as Microsoft Intune, Microsoft Configuration Manager, Group Policy, JAMF Pro, Apple Business Manager, Windows Autopilot, Automated Device Enrolment, Volume Purchase Program, configuration profiles or equivalent device management platforms.
• Experience in packaging, deploying or maintaining applications and configuration changes on managed Windows or macOS endpoints, including scripted installs, application updates, patching or remediation activities.
• Experience with scripting or automation using languages such as PowerShell, Bash, Python, or similar.
• Understanding of enterprise endpoint security concepts, including patch management, configuration compliance, vulnerability remediation, access control, certificates, device enrolment and endpoint hardening.
• Demonstrated ability to investigate technical issues, perform root cause analysis, apply sound judgement and implement practical solutions.
• Effective written and oral communication skills, including the ability to communicate with staff and clients at all levels and produce technical documentation, support procedures and end-user guidance.

Desirable:

• Experience administering Microsoft Configuration Manager in an enterprise environment, including collections, applications, packages, task sequences, compliance settings, software updates, reporting or operating system deployment.
• Experience administering Microsoft Intune and Windows endpoint services, including Windows Autopilot, Windows Update for Business, device configuration profiles, compliance policies, application deployment, endpoint analytics and reporting.
• Experience administering Jamf Pro in an enterprise environment, including policies, configuration profiles, smart groups, extension attributes, patch management, package deployment and self-service workflows.
• Experience with endpoint security practices such as vulnerability management, CIS benchmarks, security baselines or privileged access management.
• Knowledge of Active Directory, Entra ID, Kerberos, certificate services, Group Policy, networking, storage, SMB, printing or web services as they relate to managed endpoint platforms.
• Knowledge of version control systems, change management processes and structured release practices.
• Relevant industry certifications or training, such as Microsoft endpoint management certifications, Microsoft security certifications, JAMF 200, JAMF 300, Apple device support certifications, ITIL, Security+ or equivalent.

For full details about this role, and other criteria, please review the Position Description. 

Not sure if you meet all the criteria?

While it is CSIRO policy that the successful candidate must meet all the essential criteria, there are many ways to demonstrate this. Don’t let the list discourage you. If you are unsure about applying, please reach out to the contact person in the Position Description.

Setting you up for success

We are committed to providing a recruitment process that is fair, equitable and accessible to everyone. We recognise that it may be helpful for us to adjust our process to make it equitable for your individual situation. Please contact Careers.online@csiro.au and let us know how we can support you.  

Life at CSIRO and flexible work arrangements

We work flexibly at CSIRO, offering a range of options for how, when and where you work. We can discuss flexible work arrangements with you during the recruitment process. CSIRO also offers a range of leave entitlements, benefits and career development opportunities. To find out more, visit Careers at CSIRO.

Inclusion and belonging

Solving Australia's greatest challenges takes a diversity of minds and lived experiences. We know diverse teams are more effective and deliver more innovative outcomes. As an equal employment opportunity organisation, we are committed to creating diverse and inclusive teams where people feel they belong. We recognise true diversity encompasses all ages, abilities, cultures, faiths, levels of education, genders, sexualities, diversity of thought and much more. We focus on hiring people who share our values of People First, Further Together, Making it Real and Trusted.

CSIRO holds Gold Status for the Australian Workplace Equality Index for LGBTQIA+ inclusion, and a Science in Australia Gender Equity Bronze Award.

Eligibility 

This is a security assessed position, applications for this position are open to Australian Citizens with the successful candidate being required to be able to obtain and maintain a security clearance at the Negative Vetting 1 level. Appointment to this role is subject to provision of a national police check and may be subject to other security/medical/character requirements.

Child safety 

CSIRO is committed to the safety and wellbeing of all children and young people involved in our activities and programs. View our Child Safe Policy. 

How to apply 

Please apply online and submit a cover letter (maximum 2 pages) and CV that demonstrate your motivation and ability to meet the essential requirements of this role.

Applications close 

Sunday 19th of July 2026, 11pm AEST