Endpoint Security / Microsoft Engineer

Job description

Build automation for agent removal, cleanup, installation, validation, and logging.

Develop, test, and deploy endpoint security solutions in lab and pilot store environments.

Execute phased/wave deployments, troubleshoot failures, and support post-deployment stabilization.

Participate in occasional pilot-store and after-hours/weekend deployment work.

Required Experience

8+ years in endpoint, security, or systems engineering roles.

Direct experience with at least one large-scale endpoint security agent migration.

Deep hands-on expertise in Trellix ENS/McAfee (ePO, policies, modules, exclusions, communication, tamper protection, uninstall/cleanup).

Advanced hands-on experience with SentinelOne Singularity (console, policies, agents, detection/mitigation, quarantine, upgrades).

Strong PowerShell scripting and working Bash skills.

Experience automating the full migration workflow.

Proficiency with Windows 10/11, IoT/LTSC, and Windows Server endpoint engineering.

Enterprise deployment experience using SCCM/MECM, Intune, and/or Ivanti.

Experience in pilot, QA/UAT, production deployment, change management, and hypercare.

Background supporting distributed retail, restaurant, or branch endpoint environments.

Familiarity with unattended/revenue-producing endpoints.

Expertise in large-scale phased/wave deployments.

Skills in DNS, proxy, TLS/certificate, and endpoint networking troubleshooting.

Experience working with bandwidth-constrained remote locations.

Non-Negotiable Requirements

Must be able to personally automate the complete migration process (detection, removal, cleanup, installation, validation, remediation).

Hands-on, engineering-focused (not advisory or architecture-only role).

Additional Information

Must be able to work onsite in Media, PA.

Occasional after-hours or weekend work for deployments is required.