End Point Engineer
Job ID: 08832
Location: [On-Site]
Employment Type: Contract
Job Title: Endpoint Security Engineer
Work Arrangement: Onsite with after-hours and weekend deployment support as needed
Position Summary
Our client is seeking an experienced Endpoint Security Engineer with extensive hands-on experience managing and migrating enterprise endpoint security platforms.
This position requires demonstrated expertise with both Trellix Endpoint Security (ENS)/ePolicy Orchestrator (ePO) and SentinelOne Singularity, along with advanced PowerShell automation, Windows endpoint engineering, and enterprise-scale software deployment.
Required Experience
- 8+ years of experience in endpoint, security, or systems engineering
- Experience completing at least one enterprise-scale endpoint security agent migration
- Deep hands-on experience with Trellix ENS and ePO, including:
- Modules and policies
- Exclusions
- Agent-to-ePO communication
- Agent uninstall and removal procedures
- Tamper protection
- Cleanup and remediation
- Deep hands-on experience administering SentinelOne Singularity, including:
- Management console
- Sites and groups
- Agent deployment and management
- Policies and exclusions
- Detection modes
- Mitigation and quarantine
- Rollback
- Agent upgrades
- Advanced PowerShell scripting experience supporting:
- Detection
- Automated uninstall and installation
- Validation
- Logging
- Remediation
- Rollback
- Working proficiency with Bash
- Expert-level Windows endpoint engineering experience with:
- Windows 10 and 11
- Windows IoT and LTSC
- Windows Server
- Strong troubleshooting experience involving:
- Application failures
- Blocked executables
- Endpoint agent conflicts
- DNS
- Proxy configurations
- TLS
- Certificates
- Enterprise software deployment experience using MECM/SCCM, Microsoft Intune, or Ivanti
- Experience working within formal change and release management processes, including:
- Pilot deployments
- QA
- UAT
- Production rollout
- Experience supporting large, distributed retail, restaurant, or branch environments, including unattended and bandwidth-constrained endpoints
- Ability to support systems and endpoints that are directly tied to business operations and revenue
- Availability for onsite work and after-hours or weekend deployment windows as required by project phase

