Own the deployment, configuration, and lifecycle management of endpoint security tooling (EDR/ETR/EPP, host-based controls, hardening frameworks).
Design and enforce security configuration baselines across Windows, macOS, and Linux systems.
Build and manage configuration enforcement mechanisms (Ansible-based or similar) to detect and remediate drift on endpoints, particularly Linux systems.
Develop automation to deploy endpoint agents and security tooling, apply role/group/system-type specific configurations, continuously re-apply or enforce desired-state configurations.
Partner on RBAC design and implementation for endpoint and server access.
Collaborate with IT, Infrastructure, and Security teams to integrate endpoint security with identity and access controls, server and workstation provisioning pipelines, incident response and detection workflows.
Write and maintain code and infrastructure that supports endpoint security enforcement (Python, Bash, PowerShell, Ansible; Terraform as applicable).
Help define and document endpoint security standards, runbooks, and operational playbooks.
Serve as a technical voice for endpoint security decisions, tradeoffs, and future roadmap planning.

Requirements

Experience in security engineering, endpoint security, systems administration, or systems security.
Hands-on experience deploying and managing enterprise endpoint security tools.
Strong understanding of Windows, macOS, and Linux internals, hardening techniques, and security controls.
Significant experience with configuration management and enforcement, especially: Ansible or similar, Desired-state or drift-remediation models
Strong scripting and automation skills in Python and Bash (PowerShell experience is a plus).
Experience designing or supporting RBAC models for endpoint or server access.
Ability to work independently, take ownership of complex systems, and drive improvements end-to-end.

Benefits

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

endpoint securityEDRETREPPAnsiblePythonBashPowerShellTerraformconfiguration management

Soft Skills

independenceownershipcollaborationcommunicationtechnical decision-making