Job Description
This is a remote position.
SUMMARY
The
Endpoint Security Engineer serves as a technical escalation point responsible for advanced endpoint support, identity administration, and day-to-day operation of security tooling across client environments. This role requires independent execution, strong judgment, and the ability to operate in security- and compliance-sensitive environments. Success is measured not by ticket volume alone, but by stability, documentation quality, risk reduction, and client confidence.
JOB RESPONSIBILITIES
Endpoint & User Support
- Tier 2 / 3 support for Windows and macOS workstation operating systems
- Diagnose and resolve complex endpoint, application, and access issues
- Manage endpoint lifecycle : provisioning, hardening, patching, and decommissioning
- Support hybrid and fully remote user environments
Identity & Productivity Platforms
Administer Google Workspace and Microsoft 365User provisioning / deprovisioningMFA, conditional access, and device security policiesExchange Online, SharePoint, and OneDrive supportTroubleshoot SSO, MFA failures, identity drift, and access anomaliesSecurity Tooling Operations
Operate and respond to alerts from :Endpoint Detection and Response (EDR)Remote Monitoring and Management (RMM)Application control / allow-listing platformsPerform first-line security alert triage and escalationEnforce endpoint security baselines and least-privilege principlesRecognize and report suspicious or non-compliant activitySystems & Infrastructure Support
Support Windows Server environments (Active Directory, DNS, Group Policy, file services)Assist with server migrations, workstation refreshes, and infrastructure projectsExecute changes following documented change control processesChange Management & Risk Awareness
Assess impact and risk before making system changesFollow formal change control and approval processesUnderstand blast radius and rollback considerationsEscalate changes that introduce security or operational riskDocumentation, Evidence & Audit Readiness
Produce clear, defensible documentation for :Access changesSecurity actionsIncident response activitiesMaintain accurate ticket notes suitable for audit reviewContribute to SOPs, runbooks, and knowledge base articlesClient Interaction & Boundary Management
Communicate clearly with technical and non-technical stakeholdersSet expectations and provide accurate status updatesProfessionally push back on insecure or out-of-scope requestsEnforce security standards without bypassing controls “to be helpful”Incident Response & Operational Support
Participate in security incidents and after-action reviewsAssist with containment, evidence collection, and remediationDocument root cause, corrective actions, and prevention stepsQUALIFICATIONS
5+ years in Helpdesk, Desktop, or Endpoint Support (MSP experience strongly preferred)Hands-on experience with :Google Workspace administrationMicrosoft 365 administrationWindows Server and Windows workstation operating systemsMacOS supportExperience working with :EDR platformsRMM platformsApplication control / endpoint hardening toolsStrong troubleshooting methodology and root-cause analysis skillsComfortable operating within SLAs and escalation frameworksStrong written documentation and technical communication skillsProven ability to work independently with minimal supervisionSound judgment in security-sensitive environmentsNice to have Experience :
NinjaOne RMMSentinelOneThreatLockerServer migration support (on-prem to cloud or hybrid)Networking fundamentals (DNS, DHCP, VLANs, firewalls, VPNs)Google Cloud Platform (GCP)AWSScripting or automation (PowerShell, Bash, Python)Experience supporting compliance-driven environments (NIST, CMMC, SOC 2)JOB REQUIREMENTS
Should be willing to accept a long-term work-from-home arrangement.Should be amenable to a permanent night shift schedule.