Sr. Endpoint Security / Microsoft Engineer

Location: Onsite - Media PA

Please confirm -

• Availability for occasional pilot-store and after-hours/weekend deployment work
• Brief summary of the candidate's largest endpoint security migration, including:
  • Products migrated from/to
  • Approximate number of endpoints
  • What the candidate personally engineered and automated

Project Details

• Environment: 20,000 store endpoints

Role Overview
Client is migrating 20,000 store endpoints from Trellix to SentinelOne across Windows POS terminals, in-store/back-office servers, and embedded/kiosk devices.
This is a hands-on engineering role, not an advisory/architect position. The engineer will build the automation, package deployments, test in the lab and pilot stores, execute deployment waves, troubleshoot failures, and support stabilization.
Non-Negotiable Requirements

• 8 years endpoint, security, or systems engineering
• At least one enterprise-scale endpoint security agent migration
• Deep hands-on Trellix ENS / McAfee ePO
  • Policies and modules
  • Exclusions
  • Agent-to-ePO communication
  • Tamper protection
  • Uninstall and cleanup
• Deep hands-on SentinelOne Singularity
  • Console administration
  • Sites/groups and policies
  • Agents and exclusions
  • Detection/mitigation modes
  • Quarantine and rollback
  • Upgrades
• Advanced PowerShell scripting plus working Bash
• Must personally be able to automate:
  Detection Trellix removal cleanup reboot SentinelOne install/enrollment validation logging remediation/rollback
• Strong Windows 10/11, IoT/LTSC and Windows Server endpoint engineering
• Enterprise deployment experience with SCCM/MECM, Intune and/or Ivanti
• Experience with pilot, QA/UAT, production deployment, change management, and hypercare

Strongly Preferred

• Distributed retail, restaurant, or branch endpoint environments
• Experience supporting unattended/revenue-producing endpoints
• Large-scale phased/wave deployments
• DNS, proxy, TLS/certificate and endpoint networking troubleshooting
• Experience handling bandwidth-constrained remote locations