Endpoint Engineer

Job description

The ideal candidate will have hands-on experience managing thousands of endpoints in complex environments and will work across endpoint management, vulnerability remediation, and security monitoring activities

.

This position combines technical engineering responsibilities with operational support and client-facing collaboration.this is a 5 days onsite position Key ResponsibilitiesPlan, test, and deploy operating system and application updates across large endpoint fleets using structured deployment strategies such as pilot groups and phased rollouts

.

Monitor patch compliance and coordinate maintenance windows, approvals, and remediation timelines

.

Troubleshoot patch deployment failures and coordinate rollback or recovery actions when updates introduce system instability or compatibility issues.Deploy, configure, and maintain endpoint protection platforms including EDR/XDR solutions

.

Tune security policies, configure alerting and prevention settings, and investigate suspicious endpoint activity

.

Contain or isolate compromised systems when threats are detected

.

Threat Detection and Incident ResponseInvestigate security alerts and abnormal endpoint behaviors including malware, ransomware, and unauthorized activity

.

Support incident response activities including investigation, containment, eradication, and recovery

.

Document findings and contribute to post-incident remediation and security improvements

.

Review endpoint vulnerability findings and prioritize remediation based on severity and risk exposure

.

Track remediation progress and ensure endpoint compliance across operating systems and applications

.

Support regular vulnerability scanning validation and endpoint security assessments

.

Implement endpoint security configurations and baseline standards across enterprise devices

.

Support endpoint encryption, firewall policies, privilege controls, and system security settings

.

Develop PowerShell scripts and automation to improve patch deployment, compliance reporting, and endpoint management processes

.

Generate operational reports and security metrics related to patch status, endpoint coverage, and vulnerability remediation

.

Maintain device inventory and asset lifecycle records for enterprise endpoints including desktops, laptops, and associated services

.

Ensure endpoints remain compliant with patching and security requirements throughout their lifecycle

.

Identify and remove outdated, unauthorized, or unsupported tools and applications from endpoint environments

.

Communicate security posture updates, patch compliance status, and incident response activities to internal teams and client stakeholders

.

Participate in operational reviews and security discussions to provide technical insights and recommendations

.