Senior Endpoint Engineer (423643) POST NUMBER: 430240
Location: 100% Remote
Position Type: 6M C2H
Hourly / Salary: BOE!
JOB SUMMARY
Vaco Technology is currently seeking a Senior Endpoint Engineer for a 6M C2H opportunity that is 100% remote-based. The Senior Endpoint Engineer will be joining a team that has already developed the infrastructure but they need this person to come in and work with a variety of different levels, from lower-level helpdesk, field techs, acquisition teams, laptop installs, etc. up through the Engineering and Architecture level. Essentially, this company is streamlining their entire organization. This Senior Endpoint Engineer will be working within an Azure Cloud with CloudFlare backbone environment, ensuring laptops are updated, imaged, and configured properly as well as ensuring stock is always available. A key function of the Senior Endpoint Engineer will be creating and maintaining detailed documentation, including how things are unboxed, how they are configured, detailed inventory, and ensuring system updates are properly updating. The Senior Endpoint Engineer will be supporting 3500 users with a 30% year-over-year growth rate. Additionally, the long-term goal for the Senior Endpoint Engineer role will eventually be to move into leadership once everything has been streamlined and documented. The ultimate goal of this project, is to create a seamless onboarding process for any new users and to retire and replace equipment that will no longer be utilized. The Senior Endpoint Engineer will work within an established and mature user environment where there is currently no-one owning this project, where this role provides the opportunity to shape the direction in a greenfield space.
- Landscape Assessment: Conduct a comprehensive assessment of the current IT environment to identify gaps and opportunities for improvement in endpoint management.
- Design / Architecture: Develop and implement robust endpoint security architectures and strategies using Microsoft InTune, Autopilot, and Azure.
- Security Management: Manage security settings, including antivirus, encryption, firewalls, and threat protection on all endpoint devices.
- Policy Development: Create and enforce security policies and procedures for endpoint devices, ensuring compliance with organizational and regulatory standards.
- Azure Integration: Architect and integrate endpoint security solutions with Azure Active Directory and other Azure services to enhance security and streamline management processes.
- Tool Identification: Identify and document the necessary tools and technologies required for the successful deployment and management of endpoint devices.
- Automation / Optimization: Develop automation solutions using scripting languages like PowerShell to optimize endpoint management tasks and improve security posture.
- Incident Management: Lead the response to security incidents involving endpoint devices, conducting in-depth investigations and applying corrective actions to mitigate risks.
- Performance Monitoring: Continuously monitor endpoint security metrics and performance, using data to identify vulnerabilities and implement improvements.
- Collaboration / Support: Work closely with IT teams and end users to provide expert guidance on endpoint security issues and ensure optimal device performance.
- Documentation / Training: Maintain detailed documentation of endpoint security configurations, processes, and incident responses. Develop and deliver training sessions to improve user awareness and security practices.
- Project Leadership: Lead the endpoint update project, collaborating with Vaco Managed Services for the Field Services component, and ensuring that all objectives are met on time and within budget.
JOB REQUIREMENTS
- Senior Endpoint Engineer (5 years) – Assess IT Landscape / Design Endpoint Solutions / Implementation / Detailed Documentation
- Endpoint Management Solutions – Azure (Cloud Infrastructure / AAD / Security Features) / InTune (MDM / App Management / Conditional Access) / AutoPilot (Deployment / Integration) / Combined Workflow (Provisioning / Deployment / Management / Ongoing Management)
- Endpoint Management / Optimization Tools – InTune / AutoPilot / MS Endpoint Manager for Device Management / Deployment
- Azure Cloud Platform / Services – AAD / Azure Security Center (Defender / Sentinel) / Security Devices, etc.
- PowerShell Scripting (hands-on) – Automation / Configuration Management
- Security Concepts (understanding) – Zero Trust / EDR (Endpoint Detection / Response)
- Create / Maintain Detailed Documentation – System / Design Documentation | Detailed Unboxing Instructions / Configurations / Inventory, etc.
PREFERRED (not required)
- Certifications – AZ-500 MS Certified: Azure Security Engineer Associate, MD-102 MS Certified: Endpoint Administrator Associate, and/or Relevant Security Certifications
Vaco values a diverse workplace and strongly encourages women, people of color, LGBTQ+ individuals, people with disabilities, members of ethnic minorities, foreign-born residents, and veterans to apply.
EEO Notice
Vaco is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by federal, state or local law.
Vaco LLC and its parents, affiliates, and subsidiaries are committed to the full inclusion of all qualified individuals. As part of this commitment, Vaco LLC and its parents, affiliates, and subsidiaries will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact HR@vaco.com .
Vaco also wants all applicants to know their rights that workplace discrimination is illegal.
By submitting to this position, you agree that you will be giving Vaco the exclusive right to present your as a candidate for the foregoing employment opportunity. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications. You also agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal.
Privacy Notice
Vaco LLC and its parents, affiliates, and subsidiaries (“we,” “our,” or “Vaco”) respects your privacy and are committed to providing transparent notice of our policies.
- California residents may access Vaco’s HR Notice at Collection for California Applicants and Employees here.
- Virginia residents may access our state specific policies here.
- Residents of all other states may access our policies here.
- Canadian residents may access our policies in English here and in French here.
- Residents of countries governed by GDPR may access our policies here.
Pay Transparency Notice
Determining compensation for this role (and others) at Vaco depends upon a wide array of factors including but not limited to:
- the individual’s skill sets, experience and training;
- licensure and certification requirements;
- office location and other geographic considerations;
- other business and organizational needs.
With that said, as required by local law, Vaco believes that the following salary range referenced above reasonably estimates the base compensation for an individual hired into this position in geographies that require salary range disclosure. The individual may also be eligible for discretionary bonuses.