Endpoint Security Engineer

Summary

As an Endpoint Engineer you will focus on endpoint designs, deploys, and secure end-user devices (workstations, laptops) using tools like Intune, MCM, SCCM. Ensure proper OS images are deployed to all endpoint devises, test and manage software updates, ensure appropriate and enforce security policies (EDR/AV), and automate workflows to ensure stable, compliant, and efficient computing environments for endpoint migrations.

Key Responsibilities

• Endpoint Management & Provisioning: Managing the lifecycle of devices—including imaging, configuration, and decommissioning—using tools like Intune, SCCM/MECM, or Jamf.
• Security & Patch Management: Designing and enforcing endpoint security baselines, ensuring timely OS and application patching, and managing Microsoft Defender , and EDR/AV software.
• Automation & Scripting: Using PowerShell, Python, or bash to automate software deployment, configuration changes, and compliance remediation.
• Application Packaging: Oversee application rationale and ensure proper preparation for deploying software applications at scale to Windows environments.
• Troubleshooting & Support: Acting as an escalation point for complex technical issues relating to endpoints that cannot be resolved by standard IT support.
• Compliance & Reporting: Monitoring device health and security compliance, maintaining documentation, and ensuring adherence to security policies (e.g., NIST, DISA STIGs).

Basic Qualifications & Skills

• Experience: Generally 2-8+ years in systems administration or engineering.
• Tools: Deep knowledge of Microsoft Intune, MECM (SCCM), Active Directory, and Group Policy.
• 8140 Certification required
• Security Knowledge: Familiarity with endpoint security tools

Additional Requirements

• Please note pursuant to a government contract this specific position requires an Active DoD Secret Clearance
• Please note pursuant to a government contract this specific position requires United States Citizenship