Endpoint Security Engineer

This is a hard requirement because of federal compliance obligations. ,or visa holders cannot be considered., This is a senior, high-ownership IT and security generalist role reporting directly to the Head of IT & Security. You will own the company’s endpoint security posture end to end. That covers device management, EDR operations alongside a managed security provider, and hands-on support for live compliance certification cycles.

This is not a help desk role and not a pure security analyst role. You will build, run and mature the function in a fast-moving environment with real audit deadlines. A CMMC gap assessment is due in November 2026, and a full audit follows in February 2027.

What You’ll Do

Endpoint & Device Management

• Own and architect the MDM environment for a predominantly macOS fleet (about 90% Mac) using JAMF Pro, with Windows managed through Microsoft Intune.
• Run zero-touch deployments using Apple Business Manager (ABM) and Windows Autopilot.
• Manage device posture, configuration profiles and policy enforcement across a globally distributed workforce.
• Automate employee lifecycle workflows (onboarding, offboarding, device provisioning) to reduce manual effort and technical debt.

Security Operations

• Manage the EDR platform (SentinelOne), which runs alongside an external SOC/MSSP/MDR partner.
• Work hands-on with the SOC on security incident response, including escalation paths and response coordination.
• Triage and resolve EDR findings, and enforce allow/block lists through MDM.
• Keep endpoint security controls aligned with the company’s risk posture.

Compliance & Certifications

• Partner with the Head of IT & Security to achieve and maintain certifications, including FedRAMP Moderate, CMMC, ISO 27001, SOC 2 and UK Cyber Essentials Plus.
• Use Vanta to run compliance automation, collect evidence and monitor controls continuously.
• Provide audit evidence, remediate control gaps and contribute directly to upcoming assessments.

Identity & Productivity Stack

• Administer Google Workspace and Okta, including SSO, SCIM/SAML provisioning and lifecycle management.
• Work asynchronously with teams across the US and India, and coordinate cross-organization IT support., JAMF Pro · Apple Business Manager · Microsoft Intune · Windows Autopilot · SentinelOne (or CrowdStrike) · Vanta (or a similar GRC tool) · Google Workspace · Okta, * Real ownership. You report directly to the Head of IT & Security with broad visibility across the business.
• Business impact. The compliance posture you help build directly enables the company’s expansion into federal and public-sector markets.
• Growth stage. You get Series D resources and funding with a fast-moving, startup-style culture.
• Meaningful work. You’ll work on live FedRAMP, CMMC and ISO programs with real deadlines, not just a checklist.

• ship. This is a hard requirement because of federal compliance obligations. Naturalized citizens are welcome, regardless of how long you have held citizenship. ,or visa holders cannot be considered.
• 8+ years of IT Operations experience as a broad generalist, with a proven track record in a scaling or high-growth company.
• Hands-on experience with JAMF Pro or Microsoft Intune for MDM, including zero-touch deployment with Apple Business Manager.
• Hands-on experience managing SentinelOne or CrowdStrike EDR and its findings, including working with a security operations center (SOC) or MSSP/MDR provider on security incident response.
• Direct, hands-on experience with Vanta or another GRC/compliance automation tool for compliance certification work.
• Administrator-level experience with Google Workspace and Okta.
• Active involvement in at least one compliance certification cycle (SOC 2, FedRAMP, CMMC, ISO 27001 or equivalent). Advisory-only exposure is not sufficient.
• Strong analytical and research skills to interpret information security risk, regulations and industry standards.
• Experience working asynchronously and coordinating support across teams and time zones.

Preferred Qualifications

• JAMF Pro as your primary Mac MDM platform.
• Microsoft Intune with Windows Autopilot deployment experience.
• Direct experience with SentinelOne and Vanta specifically, rather than comparable tools.
• Hands-on FedRAMP Moderate or CMMC experience.
• ISO 27001 or UK Cyber Essentials Plus certification experience.
• Scripting or automation skills (Python, Bash or PowerShell) for IT workflow automation.
• Background in a federal-adjacent or regulated industry (government contractor, aerospace/defense, healthcare, fintech).

• OTE: $160,000 - $200,000 (base + bonus)
• Equity may be offered; details are shared during the interview process.
• Additional benefits and time-off details are shared by the hiring team.

Our client is a well-funded, high-growth enterprise infrastructure software company headquartered in San Jose, California. It is a Series D company valued at over $1B, backed by leading growth investors and strategic partners. Its platform is used by large enterprises, telcos and public-sector and federal agencies. With a growing federal customer base, the company is investing heavily in security and compliance, and this role is central to that effort., Uplers is an equal opportunity recruiter. Citizenship is required for this position due to federal compliance mandates.