Endpoint Security Engineer - SentinelOne / Microsoft Intune

Job description

You will administer enterprise endpoint protection technologies, investigate security threats, maintain security policies, automate operational tasks, and help modernize endpoint management as the organization transitions from Microsoft Endpoint Configuration Manager (MECM/SCCM) to Microsoft Intune.

We are looking for someone who enjoys hands-on technical work, solving complex endpoint security problems, and collaborating with cybersecurity and infrastructure teams.

What You'll Do

Endpoint Security – SentinelOne

Administer, maintain, and troubleshoot SentinelOne EPP/EDR across enterprise Windows endpoints.Deploy and manage SentinelOne agents, security policies, and endpoint protection configurations.Monitor security alerts, investigate suspicious activity, and coordinate incident response with Cybersecurity Operations.Configure malware protection, behavioral detection, ransomware prevention, device control, and endpoint hardening policies.Troubleshoot agent health, deployment failures, policy conflicts, and endpoint protection issues.Microsoft Intune & Endpoint Management

Configure and manage Intune endpoint security policies, device compliance settings, and security baselines.Support enterprise endpoint deployments, policy enforcement, and device management operations.Assist with the transition from MECM/SCCM to Microsoft Intune.Troubleshoot Windows endpoint management and security configuration issues.Work with Microsoft Entra ID and Windows security technologies to maintain endpoint compliance.Automation & Security Operations

Develop PowerShell scripts to automate endpoint management, security reporting, and remediation activities.Use APIs and automation tools to improve endpoint security operations.Support integration with SIEM/SOAR platforms where applicable.Collaborate with security analysts and infrastructure teams to investigate and resolve technical issues.Infrastructure Support & Documentation

Support scheduled maintenance activities involving Windows-based endpoint management servers and supporting database infrastructure.Perform assigned technical tasks under approved Change Records.Maintain technical documentation, SOPs, implementation guides, and troubleshooting procedures.Required Qualifications

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.At least 3 years of enterprise endpoint security administration experience.Hands-on experience administering SentinelOne EPP/EDR, including agent deployment, policy management, or security alert investigation.Experience managing endpoint security configurations and policies using Microsoft Intune.Strong PowerShell scripting and automation skills.Experience supporting Windows 10/11 enterprise environments.Knowledge of endpoint security, malware protection, security incident response, and endpoint hardening.Familiarity with Microsoft Entra ID (Azure AD) and Windows security controls.Ability to troubleshoot complex endpoint security and operational issues.Must be eligible to obtain and maintain a Public Trust clearance.Preferred Qualifications

Experience with Microsoft MECM/SCCM and migration to Intune.Experience with SentinelOne APIs and security workflow automation.Experience with SIEM/SOAR platforms such as Microsoft Sentinel, Splunk, IBM QRadar, or Cortex XSOAR.Knowledge of NIST SP 800-53, CIS Benchmarks, and Zero Trust security principles.Experience supporting federal government or large enterprise environments.Relevant Microsoft endpoint administration, SentinelOne, or cybersecurity certifications.What Makes You Successful

You have personally administered endpoint protection platforms rather than only monitoring alerts.You can investigate endpoint security problems and implement solutions independently.You are comfortable working with Intune, Windows, and PowerShell.You collaborate effectively with cybersecurity, engineering, and operations teams.You take ownership of technical issues and document your work clearly.