Endpoint Platform Engineer – Commonwealth Scientific and Industrial Research
📌 Vacancy Fact Sheet
- Reference Number: VN-0770788
- Agency: Commonwealth Scientific and Industrial Research
- Job Title: Endpoint Platform Engineer
- Position Number: 103600
- Classification: Position Number 103600
- Closing Date: Sunday 19 July 2026
- Job Type: Full-Time, Ongoing
- Location: Perth WA, Clayton VIC, Black Mountain ACT,
- Future Merit Locations: Perth, Clayton, Black Mountain, Adelaide, St Lucia
- Salary: $100,103 – $113,251
- Office Arrangement: Flexible (Flexible)
About Commonwealth Scientific and Industrial Research
As Australia’s national science agency, CSIRO is solving the greatest challenges through innovative science and
technology. Many of our iconic innovations were once considered impossible until someone, just like you, joined us
and took on the challenge.
Visit CSIRO.au for more information.
The opportunity
As the Endpoint Platform Engineer within CSIRO’s Information Management & Technology (IM&T) team, you will play
a key role in supporting and enhancing the endpoint platforms that underpin Australia’s national science agency.
Working across Windows, macOS and iOS environments, you’ll help design, deploy, manage and improve secure,
modern endpoint solutions using technologies such as Microsoft Intune, Microsoft Configuration Manager, JAMF Pro,
Entra ID and Windows Autopilot.
Collaborating with a geographically dispersed team, you’ll contribute to the delivery of enterprise endpoint services,
application packaging, device management, security compliance, patching and automation initiatives, ensuring staff
across CSIRO’s scientific, corporate and operational environments have reliable, secure and high-performing
technology solutions.
Duties
- High-level duties include:
- Administer, support and improve CSIRO’s managed endpoint services across Windows, macOS and iOS using
- Microsoft Intune, Microsoft Configuration Manager, Group Policy, JAMF Pro, Apple Business Manager and
- related enterprise endpoint management technologies.
- Configure and maintain endpoint enrolment, provisioning and management workflows, including Windows
- Autopilot, Microsoft Intune enrolment, Microsoft Configuration Manager, Apple Automated Device Enrolment,
- mobile device management workflows, configuration profiles and Volume Purchase Program application
- management.
- Package, test, deploy and maintain applications, scripts, configuration changes and self-service workflows for
- managed Windows and macOS endpoints.
- Support endpoint operating system lifecycle activities across Windows, macOS and iOS, including upgrades,
- patching, compliance reporting, troubleshooting, remediation and end-user support escalation.
- Administer and support Windows endpoint engineering activities, including Microsoft Configuration Manager,
- Microsoft Intune, Windows Autopilot, Windows Update for Business, Group Policy, application deployment,
- endpoint configuration and compliance remediation.
- Administer and support Apple endpoint engineering activities, including macOS and iOS devices managed
- through JAMF Pro, Apple Business Manager, Automated Device Enrolment, Volume Purchase Program,
- Microsoft Intune, configuration profiles, application deployment and compliance remediation.
- Role particulars
- Location and office arrangements: Kensington WA, clayton VIC, Black Mountain ACT, Waite SA, St Lucia QLD
- Salary: AU$100,103 – AU$113,251 per annum (pro rata for part-time), plus 15.4% superannuation
- Tenure & work schedule: Indefinite
- Reference: 103600
Eligibility / Notes
- As the successful candidate, you will bring:
- Essential criteria
- Demonstrated experience supporting Windows and Apple endpoint platforms in an enterprise environment,
- with the ability to troubleshoot complex technical problems and contribute to service improvement activities
- across managed endpoints.
- Experience with enterprise endpoint management technologies such as Microsoft Intune, Microsoft
- Configuration Manager, Group Policy, JAMF Pro, Apple Business Manager, Windows Autopilot, Automated
- Device Enrolment, Volume Purchase Program, configuration profiles or equivalent device management
- platforms.
- Experience in packaging, deploying or maintaining applications and configuration changes on managed
- Windows or macOS endpoints, including scripted installs, application updates, patching or remediation
- activities.
- Experience with scripting or automation using languages such as PowerShell, Bash, Python, or similar.
- Understanding of enterprise endpoint security concepts, including patch management, configuration
- compliance, vulnerability remediation, access control, certificates, device enrolment and endpoint hardening.
- Demonstrated ability to investigate technical issues, perform root cause analysis, apply sound judgement and
- implement practical solutions.
- Effective written and oral communication skills, including the ability to communicate with staff and clients at all
- levels and produce technical documentation, support procedures and end-user guidance.
- Desirable:
- Experience administering Microsoft Configuration Manager in an enterprise environment, including collections,
- applications, packages, task sequences, compliance settings, software updates, reporting or operating system
- deployment.
- Experience administering Microsoft Intune and Windows endpoint services, including Windows Autopilot,
- Windows Update for Business, device configuration profiles, compliance policies, application deployment,
- endpoint analytics and reporting.
- Experience administering Jamf Pro in an enterprise environment, including policies, configuration profiles,
- smart groups, extension attributes, patch management, package deployment and self-service workflows.
- Experience with endpoint security practices such as vulnerability management, CIS benchmarks, security
- baselines or privileged access management.
- Knowledge of Active Directory, Entra ID, Kerberos, certificate services, Group Policy, networking, storage,
- SMB, printing or web services as they relate to managed endpoint platforms.
- Knowledge of version control systems, change management processes and structured release practices.
- Relevant industry certifications or training, such as Microsoft endpoint management certifications, Microsoft
- security certifications, JAMF 200, JAMF 300, Apple device support certifications, ITIL, Security+ or equivalent.
- For full details about this role, and other criteria, please review the Position Description.
How to Apply
Position Contact Careers Online, 1300 984 220
Agency Recruitment Site https://jobs.csiro.au/
Applicants to vacancies notified in all formats of the electronic Public Service Gazette should be aware:
that the names of successful applicants will also be notified in all formats of the electronic Public Service Gazette
applicants found suitable may be offered similar employment opportunities by other Australian Public Service agencies
Industry, Science, Energy and
Resources
Vacancy