Endpoint Security Engineer (Trellix to SentinelOne migration)

Job description

The consultant will be responsible for the end-to-end engineering effort, including designing the migration strategy, building the automation required to execute it, validating functionality through testing, and supporting deployment through stabilization.

This is a highly hands-on engineering role, not an advisory position. The ideal candidate will have experience writing deployment and remediation scripts, troubleshooting complex endpoint issues, supporting pilot deployments, and driving large-scale enterprise rollouts. The environment consists of business-critical systems that operate continuously, requiring strong operational discipline and attention to deployment quality, rollback procedures, and automated reporting.

Key Responsibilities

Assess the existing Trellix environment and design the migration approach for various endpoint types while minimizing security exposure during the transition to SentinelOne.Configure and administer SentinelOne, including site and group structure, policies, detection and mitigation settings, update rings, connectivity requirements, and application exclusions.Develop automation using PowerShell and Bash for silent installs, uninstalls, validation, cleanup, logging, remediation, rollback procedures, and reboot management.Package and deploy software through enterprise endpoint management platforms such as MECM/SCCM, Microsoft Intune, and Ivanti, including detection logic, dependencies, retry behavior, and deployment scheduling.Build and maintain a representative test environment and develop automated validation procedures to confirm successful Trellix removal, SentinelOne installation, policy assignment, application compatibility, performance, and rollback functionality.Support testing efforts by identifying and troubleshooting deployment issues, documenting findings, and providing feedback to the project team throughout the validation process.Plan and execute pilot deployments, followed by phased enterprise-wide rollout activities, including real-time monitoring and remediation of deployment issues.Act as the senior technical escalation resource during deployment and hypercare phases while partnering with vendor support teams as needed.Participate in project planning, design reviews, risk assessments, status meetings, documentation efforts, and knowledge transfer activities.

Required Experience:

8+ years of experience in Endpoint Engineering, Security Engineering, Systems Engineering, or a related discipline.Experience supporting at least one enterprise-scale endpoint security platform migration.Strong hands-on experience with Trellix ENS and ePO, including policies, exclusions, agent communication, uninstall procedures, tamper protection, and cleanup activities.Strong hands-on experience administering SentinelOne Singularity, including agents, policies, sites/groups, exclusions, detection and mitigation settings, rollback capabilities, and platform upgrades.Advanced PowerShell scripting experience focused on automated deployment, validation, remediation, logging, and rollback processes.Working knowledge of Bash scripting.Expert-level Windows endpoint administration across Windows 10, Windows 11, Windows IoT/LTSC, and Windows Server environments.Strong troubleshooting experience involving endpoint security products, application conflicts, service and driver issues, networking, DNS, certificates, proxies, and TLS communications.Experience deploying software at enterprise scale through MECM/SCCM, Microsoft Intune, and/or Ivanti.Experience operating within formal change management and release management processes, including testing, QA, UAT, pilot deployments, and production rollouts.Experience supporting large distributed environments such as retail, restaurant, hospitality, branch-based, or multi-site enterprise organizations where endpoints are remotely managed and business critical.Ability to support occasional after-hours and weekend deployment activities as project phases require.

Must-Have Skills:

SentinelOneTrellix / McAfee ePOENSPowerShellSCCM / MECMIntuneIvantiWindows Endpoint EngineeringEnterprise Software DeploymentEndpoint Security Migration

Ideal Background:

Large-scale endpoint migrationsEnterprise device managementRetail, restaurant, branch, or distributed environments10,000+ endpoint deploymentsStrong scripting and automation experienceHands-on engineering rather than project management or architecture-only backgrounds