Logo
Serigor Inc

Security Endpoint Engineer Admin (ONSITE)

Serigor Inc, Washington, District of Columbia, us, 20022


Job Title:

Security Endpoint Engineer Admin (ONSITE)Location:

Washington, DCDuration:

12 Months+Job Description:The Endpoint Engineer/Administrator will be intimately familiar with next generation Endpoint management/protection platforms including but not limited to Microsoft Intune, Tanium, and SCCM provisioning and patching management, Jamf macOS device management and CrowdStrike security. The engineer must have mastery level skill with Endpoint Device and patch Management. Hands on experience with implementing and managing the following technologies like Device Provisioning, Windows Autopilot, Creation and Configuration of device policies, Software Packaging & distribution, Windows OS and software patching, reporting in Intune using Graph explorer and API. To be successful in this position, the candidate will be responsible for managing the endpoint devices within our organization, ensuring that they are secure, up-to-date, and functioning at peak performance. As an Endpoint Engineer, the candidate will also be responsible for providing support to end-users, troubleshooting issues, and identifying areas for improvement. Must display excellent teamwork skills, technical, written, and oral communication skills, and ability to learn and adapt in a fast-paced environment. The candidate must have in depth knowledge of the afore-mentioned point products and can formulate Security policy and manage Security configuration.Specific Tasks:Day-to-day administration of our MDM environment, including Configuration of Intune and AutopilotMaintain the development, test and production environmentsManage various device policies and desktop applications in Microsoft Intune and JamF within the organizationDeploy software updates, Windows OS patches, and updates to endpoints using automated toolsDevelop and maintain endpoint operating system infrastructure and perform day to day tune up and maintenance as required policies and proceduresManage various components of Azure AD, Intune, Tanium, and SCCM and JamfTroubleshoot endpoint issues and provide support to end-usersCreate and update endpoint agent policies as per requirementsProvide assistance and validation of implementation timelines and delivery managementCommunicate clearly to executive management/end users and manage the reporting processCoordinate and drive Endpoint solutions and direction to achieve measurable increases in OS deployment, end-user knowledge, and operationsApplication Packaging / scripting for deployment of apps on Windows and macOSProvide up to date information on SW updates and alertsSupport team in the design and implementation of highly available, scalable, and secure modern mobility solution using industry best practices on Microsoft Intune and AzureAD + other 3rd party technologiesCreate and maintain technical documentation as well as assist with training and related materials as neededExperience And Skills:3+ years Performing successful Windows OS updates6+ years total progressive IT experience5+ years of Endpoint Management and Security3+ years Troubleshooting complex experience in endpoint engineering with PowerShell, VBScript and batch scripting. Strong focus on Windows and macOS devices5+ Experience with device management platforms such as Microsoft Intune, Tanium, SCCM and/or Jamf2+ years Strong understanding of network technologies, such as DNS, DHCP, TCP/IP, VPN, and other related technologies2+ years cloud-based platforms such as Azure AD and Intune, integration with endpoint management solutionsExperience with Tanium and SCCMAnalytical and problem-solving skillsExcellent communication and interpersonal skillsAbility to work independently and as part of a team in a fast-paced environmentMinimum Qualifications:Endpoint Engineer subject-matter expert (SME)Experience in managing Azure AD, Intune, Tanium (Jamf would be a plus)BS computer science/IT/SW or related fieldData security and networking experience requiredBackground check and credit check will be requiredTravel Requirements:No travel anticipatedResponsibilities:The Endpoint Engineer is responsible for effective Device provisioning, Software and policy installation/configuration, operations, and maintenance of device management infrastructureParticipates in technical research and development to enable continuing innovation within the infrastructureEnsures that system hardware, operating systems, software systems, and related procedures adhere to District policies, standards, and guidelinesEndpoint engineering and provisioning, operations and support, maintenance and research and development to ensure continual innovationDevice provisioning for new and existing devices using Windows Autopilot, configuration of device-based policies, applications, services, settings in accordance with standards and project/operational requirementsPerforms daily system monitoring, verifying the systems and key processes, reviewing system and application logs, and verifying completion of scheduled jobs such as backupsPerforms regular security monitoring to identify any possible intrusionsDeploy Operating system images, software packages, device configuration policies, patches, and updates to endpoints using automated tools like Intune, Tanium and JamFProvides Tier III support per request from various agenciesInvestigates and troubleshoots issuesDiagnoses and recovers from software failuresCoordinates and communicates with impacted agenciesApplies operating system (OS) patches and upgrades on a regular basis and upgrades administrative tools and utilitiesUpgrades and configures system software that supports infrastructure applications or Asset Management applications per project or operational needsExpertise in Security:Expertise in implementing, administrating and operating information security technologies such as firewalls, IDS/IPS, SIEM, Antivirus, network traffic analyzers and malware analysis toolsUtilizes advanced experience with scripting and tool automation such as Perl, PowerShell, RegexDevelops, leads, and executes information security incident response plansDevelops standard and complex IT solutions & services, driven by business requirements and industry standardsMay also leverage dynamic and static code assessment tools to measure vulnerability of applications throughout the SDLCMinimum Education/Certification Requirements:BS Degree in IT, Cybersecurity, or Engineering, or equivalent experienceSkills:Demonstrated experience in Device Management Required: 6 YearsDemonstrated experience with Microsoft Intune Required: 3 YearsDemonstrated experience using Device Provisioning Required: 2 YearsDemonstrated experience with PowerShell and Shell scripting Required: 3 YearsDemonstrated experience with Endpoint Security management solutions Required: 3 YearsSoftware Packaging & Distribution Required: 4 YearsDevice policies, settings, and registry Required: 4 YearsOperating system (OS deployment, patches, and upgrades) Required: 4 YearsWindows Autopilot Provisioning Required: 2 YearsBS Degree in IT, Cybersecurity, Engineering, or equivalent experience Required

#J-18808-Ljbffr