Principal Client Platform Engineer

Roblox is seeking a Principal Client Platform Engineer to serve as the technical architect of our global endpoint ecosystem. Reporting to the Client Services Manager, you will define the long-term strategy for how our fleet scales, secures, and evolves. This role goes beyond day-to-day management — you will establish architectural standards, drive automation-first platform design, and ensure thousands of builders have secure, reliable tools to do their best work. From strengthening our security posture in a complex hybrid environment to mentoring senior engineers, you will shape the technical foundation that powers innovation at Roblox.

You Will:

• Standardize the global security and management strategy for our entire fleet of macOS, Windows, Linux, Android, iOS, and ChromeOS devices to ensure peak performance and ironclad compliance.
• Evolve of our deployment pipeline, driving the automated rollout of patches, OS upgrades, and complex certificate lifecycles for all endpoints.
• Lead the hardening of our endpoint security posture, partnering with InfoSec to architect automated remediation workflows and deploying advanced observability tools like CrowdStrike, and Kolide.
• Design and scale internally owned systems within our hybrid environment.
• Lead complex platform initiatives from architecture through global deployment and operational maturity.
• Collaborate with cross-functional stakeholders across Corporate Engineering, Security, Engineering, and People Ops to align technical roadmaps with broader company goals.
• Navigate and resolve high-level ambiguity, transforming vague technical requirements into scalable engineering solutions.
• Serve as a technical escalation point, diagnosing deep-level architectural failures in hardware, software, and enterprise networking.
• Participate in the team’s on-call rotation, providing senior-level response for critical system availability and high-priority security incidents.

You Have:

• 10+ years of experience in endpoint engineering, systems architecture, or infrastructure engineering.
• Proven experience securing and managing global fleets of 5,000+ devices.
• Deep expertise with endpoint management platforms such as Jamf Pro, Workspace ONE, Google Endpoint Management, Fleet, or Microsoft Intune.
• Strong programming ability in Python, Bash, Go, or Ruby with a focus on automation and systems integration.
• Experience implementing Infrastructure-as-Code and GitOps-based configuration management.
• Advanced knowledge of Identity and Access Management and Zero Trust architecture across Okta, Google Workspace, and Entra ID.
• Strong understanding of PKI, certificate lifecycle management, and enterprise networking security.
• Demonstrated ability to lead large technical initiatives and influence cross-functional stakeholders.

You Are:

• A security-focused architect passionate about solving complex endpoint challenges at scale.
• Comfortable working through ambiguity, with the ability to provide technical clarity and direction in a fast-paced, evolving environment.
• Heavily metrics-driven and customer-centric, using data to validate the effectiveness of security controls and improve the Builder experience.
• A collaborative engineer who builds strong relationships with cross-functional partners and mentors junior & senior team members.