Security Endpoint Manager

Position Title Security Endpoint Manager

Location: Washington DC

Project End Date: 09/30/2024 (With Possible extension to next fiscal year).

Short Description:

client is seeking an engaging leader to serve as Endpoint Engineering manager shall assist with implementing and operating Endpoint Security IT infrastructure.

Complete Description:

The Endpoint Engineering manager will be intimately familiar with next generation Endpoint management/protection platforms including but not limited to Microsoft Intune Tanium provisioning and patching management Jamf macOS device management and CrowdStrike security. The engineer must have mastery level skill with Endpoint Device and patch Management. Hands on experience with implementing and managing the following technologies like Device Provisioning Windows Autopilot Creation and Configuration of device policies Software Packaging & distribution Windows OS and software patching reporting in Intune using Graph explorer and API. To be successful in this position the candidate will be responsible for managing the endpoint devices within our organization ensuring that they are secure uptodate and functioning at peak performance. As an Endpoint Engineering manager the candidate also be responsible for providing support to endusers troubleshooting issues and identifying areas for improvement. Must display excellent teamwork skills technical written and oral communication skills and ability to learn and adapt in a fastpaced environment. The candidate must have in depth knowledge of the aforementioned point products and can formulate Security policy and manage Security configuration.

Responsibilities:
1. The Endpoint Engineer is responsible for effective Device provisioning Software and policy installation/configuration operations and maintenance of device management infrastructure.
2. Participates in technical research and development to enable continuing innovation within the infrastructure.
3. Ensures that system hardware operating systems software systems and related procedures adhere to District policies standards and guidelines.
4. Endpoint engineering and provisioning operations and support maintenance and research and development to ensure continual innovation.
5. Device provisioning for new and existing devices using Windows Autopilot configuration of devicebased policies applications services settings in accordance with standards and project/operational requirements.
6. Performs daily system monitoring verifying the systems and key processes reviewing system and application logs and verifying completion of scheduled jobs such as backups.
7. Performs regular security monitoring to identify any possible intrusions.
8. Deploy Operating system images software packages device configuration policies patches and updates to endpoints using automated tools like IntuneTanium and JamF.
11. Provides Tier III support per request from various agencies.
12. Investigates and troubleshoots issues.
13. Diagnoses and recovers from software failures.
14. Coordinates and communicates with impacted agencies.
15. Applies operating system (OS) patches and upgrades on a regular basis and upgrades administrative tools and utilities.
17. Upgrades and configures system software that supports infrastructure applications or Asset Management applications per project or operational needs.


Responsibilities:
1. Expertise in implementing administrating and operating information security technologies such as firewalls IDS/IPS SIEM Antivirus network traffic analyzers and malware analysis tools.
2. Utilizes advanced experience with scripting and tool automation such as Perl PowerShell Regex.
3. Develops leads and executes information security incident response plans.
4. Develops standard and complex IT solutions & services driven by business requirements and industry standards.
5. May also leverage dynamic and static code assessment tools to measure vulnerability of applications throughout the SDLC.

Minimum Education/Certification Requirements:
BS Degree in IT Cybersecurity or Engineering or equivalent experience

Skill Assessment: (Please include the years of experience last used and brief description on skills below information is to be submitted along with the resume)

Skill

Required / Desired

Amount of Experience

Years Used

Short Brief Description

Project

Demonstrated experience in Device Management

Required

8 years

Demonstrated experience with Microsoft Intune

Required

5 years

Demonstrated experience using Device Provisioning

Required

4 years

Demonstrated experience with PowerShell and Shell scripting

Required

5 years

Demonstrated experience with Endpoint Security management solutions

Required

6 years

Software Packaging & Distribution

Required

6 years

Device policies settings and registry

Required

6 years

Operating system (OS deployment patches and upgrades)

Required

4 years

Windows Autopilot Provisioning

Required

BS Degree in IT Cybersecurity Engineering or equivalent experience

Required