Endpoint Engineer

Job Title: Endpoint Security Engineer
Location-Type: Remote with monthly onsite travel to Charlotte, NC required (travel expenses covered by client); local candidates may work hybrid from Charlotte, NC
Start Date: ASAP
Duration: Contract, 6 months (potential to extend or convert to permanent)
Compensation Range: $60-65/hr W2 potential to extend
Benefits: Eligible for Health, Dental, Vision, and 401K
Visa Sponsorship: Not eligible for visa sponsorship

Job Description:
This role serves as a hands-on Endpoint Security Engineer supporting the client's IT and security modernization initiative, acting as a trusted resource to assess, harden, and manage endpoint infrastructure across a large multi-site enterprise environment.

Job Summary
•Own endpoint devices throughout their full lifecycle, from deployment and configuration through decommission
•Implement and manage Microsoft Intune, supporting migration from the current MDM platform
•Implement and manage Microsoft Defender for Endpoint, supporting migration from the current endpoint protection platform
•Configure and enforce device policies, compliance policies, configuration profiles, and Group Policy (GPO)
•Manage Windows and macOS patching, build and maintain update rings, and test patches prior to broad deployment
•Monitor endpoints for suspicious activity, investigate security events, and support the incident response team with containment and remediation
•Automate repetitive endpoint management and security tasks, and continuously evaluate evolving threats and best practices

Minimum Requirements:
•5 years of hands-on experience as an Endpoint Security Engineer in enterprise environments
•Strong experience implementing and managing Microsoft Defender for Endpoint (MDE)
•Hands-on experience implementing and managing Microsoft Intune for MDM, including endpoint migration projects
•Deep technical knowledge of Windows 10/11 and macOS endpoint security, including GPO and security hardening
•Experience detecting, investigating, and remediating endpoint security incidents across large device fleets
•Ability to travel onsite to Charlotte, NC at least once per month (or availability to work hybrid locally)

Preferred Qualifications:
•Experience with JAMF for macOS device management
•Familiarity with Microsoft Active Directory and Entra ID
•Experience working with PowerShell and KQL for automation and threat hunting
•Strong communication and interpersonal skills with a collaborative, team-first mindset and a desire to mentor and develop others