Client Platform Engineering Senior Manager

Description

The Role

General Motors is undergoing a major transformation, both in how we operate and in how we will influence the future of transportation in the EV realm. Our Software Services team is on the forefront of this work, emboldening our culture by seeking out determined, innovative individuals who will join our team to help move us forward and achieve our mission.

The Senior Manager, Client Platform Engineering leads the team that manages endpoints across macOS, Windows, Linux, and VDI to keep them secure, standardized, and easy to use. The role focuses on streamlined provisioning and secure, direct-to-app access so employees can be productive from anywhere, on any device.

You'll own the strategy, roadmap, and delivery of our client platform: how devices are built, secured, managed, and updated at scale. Your team builds the tooling, automation, and standards that power our enduser experience - from zerotouch provisioning to secure access to critical apps without clunky VPNs.

• Define the longterm client platform strategy across macOS, Windows, Linux, and VDI.

• Own endpoint lifecycle: image/config design, provisioning, patching, compliance, and decommissioning.

• Drive standardization of base images, configurations, and policies while keeping things userfriendly and delightful.

• Support the move toward modern, cloudfirst management and zerotrust, directtoapp access, advocating AI-first behavior into team and org-wide fabric.

• Lead, mentor, and grow a Client Platform Engineering team (engineers / admins / tech leads).

• Set goals, priorities, and operating rhythms (backlog, sprints, oncall, incident reviews).

• Build a culture of automation-first, reliability, and security with strong partnership across IT and Security.

• Own and optimize endpoint management platforms (e.g., Intune/Endpoint Manager, Jamf, or similar).

• Implement automated, zero or lowtouch provisioning for laptops and VDI.

• Build and maintain configuration as code for device policies, profiles, and baselines.

• Design and run patching and software update strategies to hit aggressive compliance targets.

• Partner with Security to deploy and operationalize:

• EDR / AV / DLP

• Disk encryption

• Device compliance and posture checks

• Local admin and privilege controls

• Work with Network / Security to implement secure, direct-to-app access patterns (e.g., ZTNA, device posture, appbased access instead of fulltunnel VPN).

• Own the deployment and lifecycle of core client apps (productivity suites, collaboration tools, browsers, agents).

• Maintain hardened, auditable baselines for endpoints and VDI images.

• Ensure platforms align with internal security policies and relevant frameworks.

• Provide technical input for audits, risk assessments, and incident response involving endpoints.

• Maintain highquality documentation (runbooks, standards, diagrams, FAQs, selfservice guides).

• Act as the primary owner for all things client platform for security, infra, support, and business stakeholders.

• Translate business needs into platform capabilities and phased roadmaps.

• Communicate changes and impact clearly to both technical and nontechnical audiences.

• Manage vendors and tooling, including evaluations, renewals, and escalations.

• Bachelor's degree in Computer Science, Information Systems, Engineering, or equivalent experience.

• 8+ years in endpoint / client engineering, enduser computing, or related infrastructure roles.

• 4+ years leading engineers or acting as a technical lead with ownership of a platform or service.

• Handson experience managing macOS, Windows, Linux, and VDI in an enterprise environment.

• Deep expertise with multiple modern endpoint management platforms (e.g., Intune/Endpoint Manager, Jamf, SCCM/ConfigMgr, Workspace ONE, etc.).

• Strong background in:

• OS imaging / provisioning and device enrollment

• Patch management and update strategies

• Scripting & automation (PowerShell, Bash, Python, or similar)

• Endpoint security (EDR, DLP, disk encryption, compliance policies)

• Identity & access integration on endpoints (Azure AD/Entra ID, SSO, conditional access)

• Proven ability to design and operate at scale (thousands of devices, multiple OSes, multiple regions).

• Excellent communication skills and comfort working with security, infra, and business partners.

• Experience running global or multiregion client platforms.

• Track record implementing zerotrust / device posture / directtoapp access patterns.

• Experience with VDI/DaaS platforms (Citrix, VMware Horizon, AVD, etc.).

• Familiarity with configuration-as-code / infrastructure-as-code workflows (Git, CI/CD for config).

• Experience managing budgets, licensing, and vendor relationships for endpoint tools.

• New hires get a fully configured device and access to their apps with minimal manual effort.

• High patch and compliance rates across macOS, Windows, Linux, and VDI with minimal disruption.

• Fewer endpoint incidents and escalations, more selfservice and automation.

• Strong partnership with Security and Infra on zerotrust and modern management.

• A high-performing, engaged team that ships improvements regularly and reliably.

• Ongoing delight / experience metric: a lightweight recurring signal that employees can get work done without friction (devices stay fast/stable, apps open reliably, access is seamless, and help is easy when needed). Basically an "It Just Works" pulse.