Sr. Endpoint Security / Microsoft Engineer

This is a hands-on engineering role, not an advisory/architect position. The engineer will build the automation, package deployments, test in the lab and pilot stores, execute deployment waves, troubleshoot failures, and support stabilization.

Non-Negotiable Requirements

• 8 years endpoint, security, or systems engineering
• At least one enterprise-scale endpoint security agent migration
• Deep hands-on Trellix ENS / McAfee ePO
• Policies and modules
• Exclusions
• Agent-to-ePO communication
• Tamper protection
• Uninstall and cleanup
• Deep hands-on SentinelOne Singularity
• Console administration
• Sites/groups and policies
• Agents and exclusions
• Detection/mitigation modes
• Quarantine and rollback
• Upgrades
• Advanced PowerShell scripting plus working Bash

• Must personally be able to automate: Detection * Trellix removal * cleanup * reboot * SentinelOne install/enrollment * validation * logging * remediation/rollback

• Strong Windows 10/11, IoT/LTSC and Windows Server endpoint engineering
• Enterprise deployment experience with SCCM/MECM, Intune and/or Ivanti
• Experience with pilot, QA/UAT, production deployment, change management, and hypercare

Strongly Preferred

• Distributed retail, restaurant, or branch endpoint environments
• Experience supporting unattended/revenue-producing endpoints
• Large-scale phased/wave deployments
• DNS, proxy, TLS/certificate and endpoint networking troubleshooting
• Experience handling bandwidth-constrained remote locations