End Point Engineer

Job Title: Endpoint Security Engineer Work Arrangement: Onsite with after-hours and weekend deployment support as needed Position Summary Our client is seeking an experienced Endpoint Security Engineer with extensive hands-on experience managing and migrating enterprise endpoint security platforms. This position requires demonstrated expertise with both Trellix Endpoint Security (ENS)/ePolicy Orchestrator (ePO) and SentinelOne Singularity, along with advanced PowerShell automation, Windows endpoint engineering, and enterprise-scale software deployment.

Required Experience - 8+ years of experience in endpoint, security, or systems engineering - Experience completing at least one enterprise-scale endpoint security agent migration - Deep hands-on experience with Trellix ENS and ePO, including: - Modules and policies - Exclusions - Agent-to-ePO communication - Agent uninstall and removal procedures - Tamper protection - Cleanup and remediation - Deep hands-on experience administering SentinelOne Singularity, including: - Management console - Sites and groups - Agent deployment and management - Policies and exclusions - Detection modes - Mitigation and quarantine - Rollback - Agent upgrades - Advanced PowerShell scripting experience supporting: - Detection - Automated uninstall and installation - Validation - Logging - Remediation - Rollback - Working proficiency with Bash - Expert-level Windows endpoint engineering experience with: - Windows 10 and 11 - Windows IoT and LTSC - Windows Server - Strong troubleshooting experience involving: - Application failures - Blocked executables - Endpoint agent conflicts - DNS - Proxy configurations - TLS - Certificates - Enterprise software deployment experience using MECM/SCCM, Microsoft Intune, or Ivanti - Experience working within formal change and release management processes, including: - Pilot deployments - QA - UAT - Production rollout - Experience supporting large, distributed retail, restaurant, or branch environments, including unattended and bandwidth-constrained endpoints - Ability to support systems and endpoints that are directly tied to business operations and revenue - Availability for onsite work and after-hours or weekend deployment windows as required by project phase