Senior Endpoint Security Engineer

Key Responsibilities:

• Configure, deploy, and administer MDM platforms such as JumpCloud, SureMDM, Microsoft Intune,
  Hexnode, Jamf, ManageEngine, or comparable tools.
• Create and enforce device policies, application allowlists, kiosk configurations, and compliance reporting.
• Manage a large fleet of Windows and macOS computers, Android and iOS tablets, and other corporate devices.
• Own the JumpCloud platform, including:
• User and device lifecycle management
• Centralized security policies covering MFA, disk encryption, and patch status
• Directory services, single sign-on (SSO), and RADIUS configurations
• MDM escalations and policy deployment planning
• Administer CrowdStrike Falcon and its next-gen SIEM capabilities for endpoint protection and threat
  detection; monitor agent health, version compliance, and alerts, and coordinate threat response with
  Information Security.
• Support automation for employee onboarding and offboarding.
• Produce reports and dashboards for compliance, audits, and internal stakeholders.
• Apply endpoint hardening, patch management, and user access control best practices.
• Stay current on relevant security threats, product updates, and recommended controls.

Required Skills and Experience

• 5–8 years of experience in IT infrastructure, endpoint management, or endpoint security (at least 5 years
  required).
• Hands-on experience with one or more MDM tools; SureMDM experience is preferred. Microsoft Intune, Jamf,
  SOTI, or similar experience is relevant.
• Strong experience with JumpCloud for identity and device management.
• Working knowledge of CrowdStrike Falcon or an equivalent endpoint protection platform.
• Practical knowledge of macOS, Windows, Android, and iOS device configuration and troubleshooting.
• Experience with device compliance, patching, encryption, and endpoint monitoring.

Nice to Have

• JumpCloud Core or Specialist certification, or experience with the JumpCloud CLI or API.
• Scripting experience with PowerShell or Bash for administration and automation.
• Experience administering Google Workspace or Microsoft 365.
• Familiarity with ISO 27001, SOC 2, or similar security frameworks.
• Experience coordinating with end-user teams and Information Security.