endpoint security engineer

Coca-Cola HBC

<div>
 
 
 Department:
 
 Cyber Security &amp; Data Privacy Platform
 
 
 
 Location:
 
 Egypt, Greece, Bulgaria
 
 
 
 
 
 We are seeking a skilled and motivated
 
 Endpoint Security Engineer
 
 with expertise in administering Email Antispam and EDR solutions to join our cybersecurity team. In this role, you will be responsible for designing, implementing, and managing our email security and endpoint protection solutions. Your knowledge of Proofpoint's antispam capabilities and Microsoft Defender's advanced endpoint protection features will be crucial in safeguarding our organization against email-borne threats and endpoint vulnerabilities. The position will be reported directly to the Product Manager responsible for Endpoint Security.
 
 
 
 
 
 
 YOUR NEW KEY RESPONSIBILITIES:
 
 
 
 &bull; Design, deploy, and manage our company antispam solution to ensure effective filtering of inbound and outbound emails, blocking spam, phishing attempts, and malicious attachments.
 
 
 &bull; Configure policies for content filtering, URL categorization, and email encryption.
 
 
 &bull; Day to day configuration support and administration.
 
 
 &bull; Implement and manage EDR to provide advanced protection against malware, ransomware, and other endpoint vulnerabilities.
 
 
 &bull; Utilize threat intelligence and behavior-based analytics to detect and respond to security threats across endpoints.
 
 
 &bull; Develop and enforce email security and endpoint protection policies aligned with industry best practices and organizational requirements.
 
 
 &bull; Configure detection rules, custom policies, and security baselines for endpoints.
 
 
 &bull; Optimize Antispam and EDR configurations for accurate threat detection and minimal false positives.
 
 
 &bull; Maintain relationships with Proofpoint and Microsoft representatives, staying updated about product updates, patches, and security enhancements.
 
 
 &bull; Employee Training and Awareness.
 
 
 &bull; Ability to work as on call: It will be required to participate to the team&rsquo;s on call shift one week per month.
 
 
 
 
 
 
 ARE THESE YOUR SECRET INGREDIENTS?
 
 
 
 &bull; Bachelor&rsquo;s degree in computer science, Information Security, or related field (or equivalent experience).
 
 
 &bull; 5 years of proven experience as an Engineer with expertise in Antispam and EDR solutions.
 
 
 &bull; Experience with Proofpoint or Microsoft Defender for Endpoint will be considered as a plus.
 
 
 &bull; Experience with Privileged access management systems or network security tools will be considered as a plus.
 
 
 &bull; Strong understanding of email security protocols, antispam mechanisms, and endpoint protection concepts.
 
 
 &bull; Experience with email threat analysis, malware detection, and endpoint vulnerability assessment.
 
 
 &bull; Familiarity with email authentication mechanisms (SPF, DKIM, DMARC) and endpoint detection and response (EDR) tools.
 
 
 &bull; Excellent problem-solving skills and the ability to respond to security incidents promptly.
 
 
 &bull; Strong communication skills to collaborate with technical and non-technical stakeholders.
 
 
 &bull; English proficiency is a MUST
 
 
 
 
 
 
 BENEFITS:
 
 
 
 &bull; Competitive compensation and comprehensive benefits package.
 
 
 &bull; Opportunity to work with cutting-edge email security and endpoint protection technologies.
 
 
 &bull; Collaborative and innovative work environment.
 
 
 &bull; Continuous learning and professional development opportunities.
 
 
 &bull; Contribution to enhancing the organization's email and endpoint security posture.
 
 
 
 
 
 
 ABOUT YOUR NEW TEAM:
 
 
 
 We are Coca-Cola Hellenic, a growth-focused consumer goods business and strategic bottling partner of the Coca-Cola Company. We bottle, distribute and sell an unrivalled range of products in 29 markets in Europe, Africa and Eurasia. As we do, we create value for all stakeholders, support socio-economic growth and build a more positive environmental impact.
 
 
 We bring together more than 30,000 people from over 70 nationalities, coming from five continents. The diversity of our markets, from mature to emerging economies, provides a wide range of attractive opportunities for growth.
 
 
 We nurture our talents. We give opportunities to people across all functions and levels, as well as different geographies, backgrounds and education. We are willing to take a risk on the people we believe in, even if they don&rsquo;t have the perfect experience. We have faith in what every person can be. And although we have so much to be proud of, we always stay humble. We believe the real magic happens &ndash; for us and for you &ndash; when we OPEN UP.
 
 
 
 
 
 
 AT COCA-COLA HBC, DIVERSITY HELPS US THRIVE
 
 
 
 At Coca-Cola HBC, we are an inclusive employer that thrives on diversity. This means our environment provides equal opportunities for all, regardless of race, color, religion, age, disability, sexual orientation, or gender identity. Join us in nurturing a culture where everyone belongs and contributes to our collective success.
 
</div>

Endpoint Security Engineer

Sentar

<div>Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career.
Sentar is seeking a Endpoint Security Engineer in Charleston, SC!
Role Description:
As an Endpoint Security Engineer you will be a key member of a dedicated team responsible for architecting, implementing, and optimizing the enterprise's host-based security posture. You will manage the endpoint security platform. Your primary focus will be on engineering and maintaining robust security policies that align with DoD STIGs, industry best practices, and threat-informed defense frameworks like MITRE ATT&amp;CK. You are the owner of the endpoint security platform, providing the tools and enriched data that enable other teams to perform their duties. This role requires a blend of deep technical expertise, strong policy development skills, and a strategic mindset to ensure the security of diverse environments including Windows, Linux, cloud, and containerized systems.
<ul><li>Policy &amp; Architecture Engineering: Design, implement, test, and maintain security policies across all endpoint security tools. Provide architecture analysis and design reviews for endpoint protection systems, identifying gaps and engineering solutions to new threats.</li>
<li>Platform Administration &amp; Health: Administer, optimize, and maintain the health of the enterprise endpoint security platform, ensuring high availability and performance for both internal systems and subscribed customers.</li>
<li>Strategic Transition &amp; Modernization: Lead the technical evaluation, testing, and migration strategy on endpoint security solutions as needed.
</li><li>Subscriber Oversight &amp; Support: Serve as the Tier 3 escalation point for complex technical issues from the support desk. Provide oversight of customer-managed policies, ensuring critical controls remain active, and offer expert policy advice as needed.</li>
<li>Testing &amp; Validation: Develop and execute a strong testing and validation framework for all security policies and tool configurations to ensure efficacy and prevent operational impact.</li>
<li>Documentation: Create and maintain comprehensive documentation for all security policies, platform configurations, and operational procedures.</li>
</ul>
Qualifications:
Clearance Level: Secret with eligibility for upgrade to Top Secret (TS)
Education: N/A
Certifications: Must possess DoD 8570 IAT Level II and must possess DoD 8140 CSSP Auditor certification or being willing to get one within 120 days
Experience:
<ul><li>Demonstrated experience planning, configuring, and managing industry-standard enterprise-level endpoint security tools.</li>
<li>Strong understanding of endpoint security principles, including antivirus, host-based intrusion prevention (HIPS), and Endpoint Detection and Response (EDR).</li>
<li>Experience writing and implementing security policies to meet compliance frameworks (e.g., DoD STIGs).</li>
<li>Broad understanding of modern IT environments, including Windows/Linux operating systems, networking, cloud platforms, and containerization.</li>
<li>Excellent communication skills and the ability to act as a technical escalation point.</li>
</ul>
Highly desired:
<ul><li>Experience in leading a technical migration from a legacy security platform to a modern EDR solution.</li>
<li>Scripting or automation experience (e.g., Python, PowerShell) for policy management or data integration.</li>
<li>Familiarity with providing services in a multi-tenant or &quot;SaaS-like&quot; model</li>
<li>Experience with securing containerized environments and workloads.</li>
</ul>
Additional information:
<ul><li>This position requires a US Citizen.</li>
<li>Position may require up to 25% travel as needed</li>
<li>OCONUS travel may be required</li>
</ul>
Benefits at Sentar:
Our unique ownership model attracts top talent, giving employees the freedom to take initiative and drive meaningful improvements. In addition to cultivating a thriving and inclusive work environment, Sentar offers an extensive benefits package designed to support the well-being of employees and their families. Employee ownership is the foundation of our culture, promoting participation, teamwork, and accountability while ensuring long-term financial security and a commitment to excellence.
<ul><li>Voluntary Medical, Dental, Vision, with Health Savings or Flexible Spending Plan options</li>
<li>Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options</li>
<li>Group Term Life, Short-Term and Long-Term Disability is provided by Sentar to all qualifying employees</li>
<li>Generous 401(k) match</li>
<li>Competitive PTO plan that graduates quickly with years of service</li>
<li>Other leave programs; holiday schedule along with bereavement, maternity, jury and military duty</li>
<li>Mental health awareness programs</li>
<li>Tuition reimbursement</li>
<li>Professional development reimbursement</li>
<li>Recognition and Awards programs</li>
</ul>
If you are not ready to apply for this position, submit your resume here to join our talent community. We'll keep you updated occasionally on new job opportunities.
Sentar is an Affirmative Action and Equal Opportunity Employer M/F/Vets/Persons with Disabilities
Our culture is one of inclusivity and support. Sentar is proudly an Equal Opportunity and VEVRAA Federal Contractor Employer M/F/Vets/Persons with Disabilities. Follow these links to learn more about your rights: EEO Is the Law Poster; EEO Is Law Supplement; and Pay Transparency.
We want you to build your career at Sentar, so if you are an individual with a disability and require a reasonable workplace accommodation applying for a job or at any point in the employment process, contact the Recruiting Manager at recruiting@sentar.com. Please indicate the specifics of the assistance needed. Thank you for considering Sentar in your employment search.
Build, Innovate, Secure Your Career at Sentar.</div>

Abile Group, Inc.

<div>Overview:
<div>
Abile Group has an exciting and challenging opportunity for an Endpoint Security Engineer on a contract providing Network and Cybersecurity services supporting an Intelligence Community customer. All the personnel on the team will work together to support transport and cybersecurity information technology (IT) services on multiple networks and security domains, at multiple locations worldwide, inclusive of new facilities and building constructions to support the IC mission.</div><div></div><div> 
The right candidate will possess the below skills and qualifications and be ready to handle all responsibilities independently and professionally.</div>
Responsibilities:
<ul><li>Implements and applies technologies, processes, and practices designed to protect networks, devices, programs, and data from malicious attack, damage, or unauthorized access.</li><li>
Provides engineering and sustainment support for the various endpoint security solutions.</li><li>
Establishes computing environment by designing system configuration, directing system installation, and defining, documenting, and enforcing system standards.
</li><li>Provides specific, detailed information for hardware and software selection, implementation techniques, and tools for the most efficient solution to meet business needs, including present and future capacity requirements.
</li><li>Configures and installs various security products utilizing Linux OS.</li><li>
Works with both the software vendor and the customer to research, analyze, and implement enterprise-wide security solutions/capabilities/enhancements to support customer business/mission goals and objectives</li><li>
Assists with design, analysis, testing and implementation of state-of-the-art secure architectures</li><li>
Oversees security infrastructure sustainment, maintenance, and advanced configuration (policy management, database administration and security management tools)</li><li>
Oversees the reporting, documentation and investigation of all security related incidents; lead the development and implementation of corrective measures</li></ul>
Qualifications:
<div>
Clearance Required: TS/SCI with ability to obtain and maintain a CI poly</div><div></div><div> 
Degree and Years of Experience: Bachelor&rsquo;s degree (Engineering, Computer Science or related field) with 6 years additional experience. Additional experience may be considered in lieu of a degree.</div> 
<ul><li>
10 years of technical experience in Cyber Security</li></ul><div>
Required Certifications:
</div><ul><li>DoD 8570 IAT Level II certified (current)</li><li>
Must obtain a CSSP Infrastructure Support certification within 6 months of hire date</li></ul><div>
Desired Certifications:
</div><ul><li>CSSP Infrastructure Support certification</li><li>
Any Linux related certifications</li></ul><div>
Required Skills:
</div><ul><li>Working knowledge of maintaining Enterprise Cyber Security Engineering requirements utilizing all or some of the following tools: HBSS, Carbon Black Response/Protection, Microsoft ATA, Tanium</li><li>
Strong working knowledge of administering applications in a Linux environment</li><li>
Experience with large-scale enterprise/global networks in a high-paced, diverse environment 
</li><li>
Understanding of and experience with the DoD Architecture Framework and other key DoD network architecture and strategic planning instructions 
</li><li>
Experience in providing status reports and products to senior management and customers</li><li>
Experience with plans, designs, and evaluations of security systems and architectures</li></ul><div>
Desired Skills:</div><ul><li>
Windows Enterprise Active Directory (AD) architecture and VMWare virtualization</li></ul>
About Abile Group, Inc.:
<div>
Abile Group LLC was formed in July 2004 to partner with the Intelligence Community and their Contractors in the areas of Enterprise Analytics &amp; Performance Management, IT &amp; Systems Engineering and Program &amp; Project Management. We have significant experience with the Federal Government and are an EDWOSB dedicated to our employees and clients. We are looking for high performing employees who enjoy providing advice and guidance along with solutions development and implementation support, crafted by combining industry best practices with the clients&rsquo; subject matter experience and Abile&rsquo;s breadth of expertise.</div>
Hiring Statement:
<div>
Abile is committed to hiring the most qualified and best fit person for the job - always has, always will. Anyone requiring reasonable accommodations should email careers@abilegroup.com with requested details. A member of the HR team will respond to your request within 2 business days.</div><div></div><div> 
Please review our current job openings and apply for the positions you believe may be a fit. If you are not an immediate fit, we will also keep your resume in our database for future opportunities.</div></div>

Cardone Ventures

<div>Total Compensation: $190-$210 annually

Location: Scottsdale, AZ

Workplace Setting: Fully Onsite 


Position Summary

The Staff Infrastructure &amp;amp; Security Engineer is the sole technical owner of all cloud infrastructure, 
cybersecurity, identity, endpoint operations, and DevOps platform engineering for a 240-person business 
management consultancy operating a large-scale Azure and Microsoft Fabric environment. This role reports 
to the IT Director and is accountable for the end-to-end buildout, hardening, and operational excellence of 
every infrastructure and security workstream on the 2026 roadmap.

This includes SIEM deployment and zero-trust identity, disaster recovery, cloud cost optimization, and the 
CI/CD and hosting infrastructure powering our proprietary AI platform, the Hub &mdash; a multi-tenant &ldquo;Super App&rdquo; 
serving internal teams and external clients across multiple verticals, with a suite of AI-driven applications 
(Trainer, SalesIQ, Jarvis, Knowledge, Momentum, Dashboards, Blueprints, Capture) shipping at high velocity 
across web and mobile.

This is not a maintenance role: it is a greenfield buildout of enterprise-grade infrastructure, security posture, 
and developer platform across 80+ SharePoint sites, multiple Fabric Lakehouses, a growing multi-tenant 
client ecosystem, and a product engineering organization that needs world-class deployment and 
observability tooling. 


This role requires an AI-native engineer
<ul>
<li>LLM fluency is a hard requirement &mdash; not a preference. The throughput expected of this role 
assumes active, daily use of AI tooling to achieve what typically requires a multi-person team.</li>
<li>Claude AI (Anthropic) is provided and expected to be used for IaC authoring, detection rule 
development, runbook creation, policy generation, log analysis, and automation scripting.</li>
<li>Engineers who embrace AI as a force multiplier will thrive here. Those who don&rsquo;t will struggle to 
keep pace with the scope.</li></ul> 


What Success Looks Like
<ul>
<li>SIEM Operational</li>
<li>Within 6 months</li>
<li>Tuned alerting, active connectors, and initial SOAR 
playbooks live. Mean-time-to-detect under 30 minutes 
for critical events.</li></ul> 


Hub CI/CD
<ul>
<li>50%+ cycle time reduction</li>
<li>Zero-downtime deployments and sub-5-minute</li>
<li>rollback fully operational within the first 6 months.</li></ul> 


Hub Platform Uptime
<ul>
<li>99.9% SLA</li>
<li>Proactive alerting that surfaces degradation before end users or clients report it.</li></ul> 


Endpoint Compliance
<ul>
<li>100% fleet by end of Q3</li>
<li>Full Intune compliance across 240+ Windows and Mac 
endpoints with hardened baselines, automated 
patching, and DLP enforced.</li></ul> 


Disaster Recovery
<ul>
<li>Validated by end of Q3</li>
<li>Immutable backups, documented runbooks, and a 
successful DR drill with measured RTO. Quarterly 
tests sustained thereafter.</li></ul> 


Identity &amp;amp; Access
<ul>
<li>Within 6 months</li>
<li>MFA hardened, PIM enforced for all privileged roles, 
CA policies cleaned up and documented, first 
company-wide access review complete.</li></ul> 


Azure Cost Reduction
<ul>
<li>15%+ savings</li>
<li>Right-sizing, tagging enforcement, and cost 
optimization &mdash; while simultaneously improving 
reliability metrics.</li></ul> 


Penetration Test
<ul>
<li>H2 &mdash; zero unresolved criticals</li>
<li>Pass external pen test with no critical or high-severity 
findings unresolved beyond agreed SLAs.</li></ul> 


Objectives 

Hub Platform &amp;amp; DevOps
<ul>
<li>Design, build, and maintain CI/CD pipelines for the Hub platform and its application suite (Trainer, 
SalesIQ, Jarvis, Knowledge, Momentum, Dashboards, Blueprints, Capture), enabling multiple 
production deployments per day with automated testing, security scanning, and rollback.</li>
<li>Own the Hub&rsquo;s Azure hosting infrastructure &mdash; container orchestration, environment management 
(dev/staging/production), auto-scaling, and performance optimization across web and mobile delivery 
surfaces.</li>
<li>Implement and maintain full-stack observability across the Hub &mdash; APM, distributed tracing, structured 
logging, and real-time alerting &mdash; ensuring engineering and product teams have complete visibility into 
system health, latency, and error rates.</li>
<li>Build and manage infrastructure supporting the Hub&rsquo;s multi-tenant architecture: data isolation, per-client 
performance SLAs, and secure deployment patterns across internal teams, client verticals (Roofing, 
Home Services), and event deployments.</li>
<li>Partner with engineering to define and enforce deployment standards, branching strategies, 
environment promotion workflows, and infrastructure requirements for new launches including mobile 
releases, voice mode, telephony integrations, and AI agent capabilities (Dawson AI, Jarvis).</li></ul> 


Cloud Infrastructure &amp;amp; IaC
<ul>
<li>Architect and enforce Infrastructure-as-Code standards (Terraform or Bicep) across all Azure 
environments &mdash; eliminating manual provisioning and ensuring every resource is version-controlled, 
tagged, and auditable.</li>
<li>Own Azure cloud operations: cost optimization, monitoring and alerting, SRE metrics, capacity 
planning, incident response runbooks, and scale reviews supporting the Microsoft Fabric and OneLake 
data platform.</li>
<li>Administer and improve Microsoft Fabric, OneLake, and SharePoint Online environments: governance, 
access controls, and M365 ecosystem integration across 80+ SharePoint sites and multiple Fabric 
Lakehouses.</li></ul> 


Security Operations &amp;amp; SIEM
<ul>
<li>Design, deploy, and operationalize a SIEM platform (selection, connector integration, detection rule 
authoring, alert tuning, and SOAR pilot) &mdash; establishing the company&rsquo;s first centralized security 
monitoring capability.</li>
<li>Stand up and maintain the vulnerability management program: scanner deployment, baseline scanning, 
remediation sprints with SLAs, exception tracking, lightweight AppSec practices, cloud security posture 
reviews, and annual penetration test coordination.</li>
<li>Manage ongoing security posture: firewall policy hygiene, network segmentation, patch/firmware</li>
<li>Lifecycle, and continuous hardening across cloud and endpoint surfaces.</li></ul> 


Identity &amp;amp; Access Management
<ul>
<li>Build and execute the full IAM lifecycle in Entra ID: auth policies, MFA strengthening, PIM rollout, 
conditional access cleanup, SSO audit, passkey deployment, guest controls, and quarterly privileged 
access reviews.</li>
<li>Administer identity and access integrations across Okta (where applicable), Microsoft Entra ID, and key 
SaaS applications &mdash; SSO/MFA troubleshooting, SCIM provisioning, and least-privilege enforcement.</li></ul> 


Endpoint Management
<ul>
<li>Deploy and harden Intune endpoint management across both Windows and Mac fleets: security 
baselines, application control, patch cadence automation, compliance policies, and DLP rollout across 
240+ endpoints.</li>
<li>Maintain endpoint security posture: disk encryption enforcement, EDR/AV health, OS patching 
strategies, and remediation coordination.</li>
<li>Standardize device provisioning and lifecycle: new hire setups, hardware staging, asset tracking, and 
end-of-life coordination.</li></ul> 


Disaster Recovery &amp;amp; Business Continuity
<ul>
<li>Design and implement the backup and DR architecture: backup review, DR design, immutable storage, 
SaaS backup coverage (M365, critical SaaS), restore testing, RTO tuning, and runbook documentation.</li>
<li>Execute quarterly DR drills with measured RTO and maintain living runbooks that reflect current 
architecture.</li></ul> 


Automation, AI &amp;amp; Reporting
<ul>
<li>Operate as an AI-native practitioner &mdash; leveraging Claude AI and LLM tooling daily to accelerate IaC 
authoring, detection rule development, policy generation, runbook creation, log analysis, and 
automation scripting.</li>
<li>Automate repeatable tasks using PowerShell, Python, and Bash; build self-service tooling and 
knowledge base materials that reduce Tier 1/2 escalation load.</li>
<li>Produce clear, concise infrastructure and security status reporting for the IT Director, CTO, and 
executive stakeholders &mdash; covering risk posture, project progress, incident trends, and budget.</li></ul> 


Required Competencies
<ul>
<li>Deep, hands-on expertise across Azure cloud infrastructure &mdash; compute, networking, storage, Entra ID, 
Intune, Defender, and Sentinel or equivalent SIEM &mdash; with the ability to architect and implement at 
enterprise scale without a team.</li>
<li>Hands-on experience with container orchestration (Kubernetes/AKS or Azure Container Apps), CI/CD 
platforms (GitHub Actions, Azure DevOps), and IaC (Terraform strongly preferred; Bicep/ARM 
acceptable) for both corporate and application hosting environments.</li>
<li>Strong application-level observability skills &mdash; Datadog, Application Insights, Grafana &mdash; with the ability 
to instrument, monitor, and troubleshoot distributed systems serving web and mobile clients.</li>
<li>AI fluency is a hard requirement: Demonstrated proficiency using LLMs and AI-assisted tooling 
(Claude, Copilot, or equivalent) to accelerate IaC authoring, security policy generation, detection rule 
development, runbook creation, and automation scripting.</li>
<li>Command-level knowledge of modern security frameworks (NIST, CIS, zero-trust principles) and practical experience implementing identity governance, endpoint hardening, DLP, SIEM/SOAR, and vulnerability management programs.</li>
<li>Proven ability to own and execute 4&ndash;6 concurrent technical workstreams independently &mdash; prioritizing ruthlessly and delivering production-grade results without dedicated project management support.</li>
<li>Strong understanding of Microsoft Fabric, OneLake, and SharePoint Online administration, including data governance, access controls, and integration with the broader M365 ecosystem.</li>
<li>Exceptional written and verbal communication skills, with the ability to translate complex infrastructure and security decisions into clear business-risk language for non-technical executives.</li>
<li>Track record of building from zero &mdash; standing up programs, processes, and tooling in environments where none existed &mdash; rather than inheriting and maintaining mature infrastructure.</li></ul> 


Preferred Qualifications
<ul>
<li>Experience with SIEM/SOAR platforms (Microsoft Sentinel preferred; Splunk or equivalent acceptable) 
and detection engineering.</li>
<li>Familiarity with Microsoft Fabric and OneLake in production data environments.</li>
<li>Exposure to compliance/security frameworks (SOC 2&ndash;style controls) and evidence-driven operations.</li>
<li>Experience supporting multi-tenant SaaS platforms &mdash; especially with data isolation, per-tenant 
observability, and secure deployment patterns.</li>
<li>Mobile delivery experience (iOS/Android via CI/CD pipelines, app store deployments, MDM integration).</li>
<li>Certifications (nice to have): AZ-104, AZ-500, SC-200 (Sentinel), Terraform Associate, CKA/CKAD, 
CISSP/CISM, Security+.</li></ul> 


About the Hub Platform

The Hub is the company&rsquo;s proprietary AI-powered Super App &mdash; a multi-tenant platform serving internal teams 
and external clients across multiple industry verticals. It is the primary product of the engineering organization 
and the infrastructure this role is responsible for hosting, deploying, and keeping operational. 
Hub application suite
<ul>
<li>Trainer &mdash; AI-powered training and enablement</li>
<li>SalesIQ &mdash; sales intelligence and performance analytics</li>
<li>Jarvis &mdash; internal AI assistant and agent capabilities</li>
<li>Knowledge &mdash; organizational knowledge base and retrieval</li>
<li>Momentum &mdash; performance and goal tracking</li>
<li>Dashboards &mdash; executive and operational reporting</li>
<li>Blueprints &mdash; process documentation and workflow tooling</li>
<li>Capture &mdash; data capture and intake workflows</li>
</ul>
The Hub ships at high velocity across web and mobile, with active development of voice mode, telephony 
integrations, and AI agent capabilities. The infrastructure owner of the Hub is expected to be a close partner 
of the engineering team &mdash; not a gatekeeper. 


A Note on Claude AI

This role is expected to actively use Claude (Anthropic&rsquo;s AI) as a core part of the day-to-day workflow. We 
provide access and encourage its use for:
<ul>
<li>Writing and iterating on runbooks, SOPs, and technical documentation</li>
<li>Drafting and reviewing IaC templates, scripts, and configuration snippets</li>
<li>Log and alert analysis to accelerate incident triage</li>
<li>Detection rule authoring and SIEM query development</li>
<li>Summarizing CVEs, vendor docs, and change management notes</li>
<li>Building knowledge base content and training materials for the support team</li>
</ul>
We view AI fluency as a professional skill. Engineers who leverage these tools well achieve dramatically 
higher throughput, document more thoroughly, and spend more time on high-value architecture and security 
work. This role is explicitly scoped with that assumption built in. 


Additional Requirements
<ul>
<li>Onsite role at the primary office; travel to Scottsdale and other locations as needed.</li>
<li>Participation in an on-call rotation</li>
<li>Ability to lift and handle IT equipment (APs, switches, firewalls, laptops) for deployments and desk 
setups.</li></ul> 


COMMITMENT TO DIVERSITY

As an equal opportunity employer committed to meeting the needs of a multigenerational and multicultural workforce, Cardone Ventures recognizes that a diverse staff, reflective of our community, is an integral and welcome part of a successful and ethical business. We hire local talent at all levels regardless of race, color, religion, age, national origin, gender, gender identity, sexual orientation, or disability, and actively foster inclusion in all forms both within our company and across interactions with clients, candidates, and partners.

If this position caught your eye, send us your resume! For best consideration, include the job title and source where you found this position in the subject line of your email to careers@cardoneventures.com. Already a Cardone Ventures candidate? Please connect directly with your recruiter to discuss this opportunity.</div>

Staff Security Engineer

Intelligent Technical Solutions

<div>Job Description

We are seeking a CMMC Security Engineer to design and build compliant Azure and Microsoft 365 environments for our CMMC consulting clients. This is a hands-on technical role. You will provision GCC and GCC High tenants, architect network security (Azure Firewall, VPN, NSGs), configure Entra ID with Conditional Access and Privileged Identity Management, deploy Intune for endpoint management, stand up Microsoft Sentinel for SIEM/SOAR, configure Purview for data protection, and deploy Defender for Endpoint across client environments. You will work from documented SOPs and a Control-Task Tracker that maps each NIST 800-171 control to specific Azure/M365 configurations. You will also capture technical evidence (screenshots, configuration exports, audit logs) to support the compliance documentation created by our GRC Consultants.

Job Responsibilities
<ul>
<li>Design and deploy CMMC-compliant enclave architectures in Azure: cloud-only (GCC/GCC High), hybrid (on-prem + GCC), and on-premises environments. Select and implement the appropriate topology (hub-spoke, segmented) based on client requirements.</li>
<li>Provision and configure Microsoft 365 GCC and GCC High tenants including initial setup, domain verification, licensing assignment, and tenant hardening.</li>
<li>Configure Microsoft Entra ID: user provisioning, Security Groups, Administrative Units, Conditional Access policies (MFA, device compliance, location-based, session controls), Privileged Identity Management (PIM), and Identity Protection risk policies.</li>
<li>Deploy and configure Microsoft Intune: device enrollment, compliance policies, configuration profiles, security baselines (CIS/STIG), BitLocker encryption with FIPS 140-2 compliance, Windows Update for Business rings, and application management via Company Portal.</li>
<li>Deploy and configure Microsoft Sentinel: Log Analytics workspace setup, data connector deployment (M365, Entra ID, Defender, Azure Activity, Firewall, NSG flow logs), KQL-based analytics rules, automation playbooks (Logic Apps), and CMMC compliance workbooks/dashboards.</li>
<li>Deploy and configure Microsoft Defender for Endpoint: device onboarding, antivirus policies, Attack Surface Reduction (ASR) rules, endpoint DLP, network protection, web content filtering, and vulnerability management.</li>
<li>Configure Microsoft Purview: sensitivity labels (CUI, FCI, Public), auto-labeling policies, DLP policies across Exchange, SharePoint, Teams, and endpoints, and information barriers where required.</li>
<li>Design and implement Azure networking: Virtual Networks, subnets, NSGs, Azure Firewall, Azure Bastion, VPN Gateway (site-to-site and point-to-site), Private Endpoints, route tables, and DDoS Protection.</li>
<li>For hybrid environments: configure Azure AD Connect (or Cloud Sync), hybrid device join, pass-through authentication or password hash sync, split DNS, and Azure Arc for on-premises server management.</li>
<li>Configure encryption across the environment: BitLocker (XTS-AES 256), FIPS 140-2 compliance mode, TLS 1.2+ enforcement, VPN encryption (IKEv2/AES-256), and Purview encryption for CUI-labeled content.</li>
<li>Execute remediation tasks from the CMMC Remediation Tracker as assigned by the GRC Consultant. Each task maps a specific NIST 800-171 control objective to an Azure/M365 configuration with step-by-step instructions.</li>
<li>Capture and organize technical evidence for each implemented control: configuration screenshots, policy exports (JSON), audit log samples, compliance reports, and test results.</li>
<li>Support incident response capability deployment: Sentinel playbook creation, automated notification workflows, and incident response procedure testing.</li>
<li>Perform client environment migrations to GCC/GCC High (tenant-to-tenant migration using BitTitan, ShareGate, or native Microsoft tools).</li>
<li>Work across 4-7 concurrent client environments at various stages of build and remediation.</li>
</ul>
Job Qualifications 
Required Technical Experience
<ul>
<li>Willing to work in a hybrid setup&mdash;remotely or on-site at client locations, as required.</li>
<li>3+ years hands-on experience administering Microsoft Azure and M365 environments in a professional capacity (not lab-only).</li>
<li>Direct experience configuring Conditional Access policies, Entra ID PIM, and identity architecture (cloud-only and hybrid with Azure AD Connect).</li>
<li>Direct experience deploying and managing Microsoft Intune for endpoint compliance, configuration profiles, security baselines, and BitLocker management.</li>
<li>Direct experience deploying Microsoft Sentinel including data connectors, KQL query writing, analytics rules, and automation playbooks.</li>
<li>Experience configuring Azure networking: VNets, NSGs, Azure Firewall or third-party NVA, VPN Gateway, and network security architecture.</li>
<li>Experience deploying Microsoft Defender for Endpoint including device onboarding, ASR rules, and vulnerability management.</li>
<li>Proficiency with PowerShell and Microsoft Graph API for automation and bulk configuration tasks.</li>
<li>Understanding of NIST SP 800-171 controls and how they map to specific Azure/M365 technical implementations.</li>
</ul>
Strongly Preferred Technical Experience
<ul>
<li>Experience with Microsoft 365 GCC or GCC High environments (tenant provisioning, licensing nuances, feature differences from commercial M365).</li>
<li>Experience with tenant-to-tenant migrations (commercial to GCC/GCC High) using BitTitan MigrationWiz, ShareGate, or native Microsoft tools.</li>
<li>Experience configuring Microsoft Purview: sensitivity labels, auto-labeling, DLP policies across Exchange, SharePoint, Teams, and endpoints.</li>
<li>Experience with FIPS 140-2 configuration and DISA STIG or CIS benchmark implementation via Intune or GPO.</li>
<li>Experience supporting defense industrial base (DIB) or federal contractor IT environments.</li>
<li>Experience with Azure Arc for hybrid server management and Azure Bastion for secure remote administration.</li>
</ul>
Required Certifications

(must hold at least two from this list):
<ul>
<li>Microsoft Certified: Azure Solutions Architect Expert (AZ-305) - Architecture design and decision-making.</li>
<li>Microsoft Certified: Azure Administrator Associate (AZ-104) - Core Azure resource management.</li>
<li>Microsoft Certified: Security Operations Analyst Associate (SC-200) - Sentinel, Defender, and security operations.</li>
<li>Microsoft Certified: Identity and Access Administrator Associate (SC-300) - Entra ID, Conditional Access, PIM.</li>
<li>Microsoft Certified: Information Protection and Compliance Administrator (SC-400) - Purview, DLP, sensitivity labels.</li>
<li>Microsoft Certified: Endpoint Administrator Associate (MD-102) - Intune and device management.</li>
</ul>
Preferred Certifications

(significant advantage):
<ul>
<li>CompTIA Security+ (SY0-701)</li>
<li>CMMC Registered Practitioner (RP) - Understanding of CMMC framework from technical perspective.</li>
<li>Microsoft Certified: Cybersecurity Architect Expert (SC-100)</li>
<li>Microsoft 365 Certified: Administrator Expert (MS-102)</li>
<li>Certified Information Systems Security Professional (CISSP)</li>
<li>GIAC certifications (GSEC, GCIA, GCIH) - Deep security operations knowledge.</li>
</ul>
Skills &amp; Competencies
<ul>
<li>Execution-focused: ability to follow SOPs and runbooks precisely while identifying when something does not match documented steps and escalating appropriately.</li>
<li>Multi-tenant management: comfortable switching between 4-7 different client Azure/M365 environments daily without cross-contaminating configurations.</li>
<li>Documentation discipline: every configuration change is documented, every evidence artifact is captured, every deviation from the SOP is noted.</li>
<li>Troubleshooting: when Conditional Access blocks legitimate users, when Sentinel data connectors go unhealthy, or when WDAC blocks a required application, you can diagnose and resolve without waiting for escalation.</li>
<li>Security mindset: you understand why least privilege matters, why default-deny is the correct network posture, and why FIPS-validated encryption is required for CUI.</li>
<li>Clear written communication: when you find something in the client environment that does not match what the GRC Consultant scoped, you can document it clearly so the team can make decisions.</li>
</ul>
Compensation

 Pay rate ranges from $120,000.00/annum up to $170,000.00/annum and may vary by experience and location.

Benefits
<ul>
<li>Medical Insurance Plan</li>
<li>Dental &amp; Vision</li>
<li>Life Insurance</li>
<li>Disability Coverage</li>
<li>Paid Time Off (starts at 15 days per year)</li>
<li>Maternity/Paternity Leave</li>
<li>Paid US Holiday</li>
<li>Retirement Plan</li>
<li>Salary Advancement/Loan</li>
<li>Health &amp; Wellness Program</li>
<li>Company-paid training and certification</li>
<li>Supplemental Life Insurance (Employee-paid)</li>
<li>Supplemental Health Plans (Employee-paid)</li></ul></div>

CMMC Security Engineer (US Hybrid)

NeoSystems

<div>The Endpoint Engineer Level II supports Microsoft 365 environments for managed services customers. This role focuses on providing support and configuration for endpoint technologies across physical devices and cloud-hosted desktop platforms. This role supports customers in the Defense Industrial Base with a strong emphasis on compliance with CMMC 2.0 and NIST 800-171.

The Endpoint Engineer II works alongside more experienced engineers in a managed services environment to ensure secure, compliant, and consistent endpoint management across Windows 11 devices, Windows 365 Cloud PCs, and Azure Virtual Desktops.

This role will focus on both the ongoing operations of managed services as well as project-based onboarding and adoption.

Role &amp; Responsibilities:

 Endpoint Support &amp; Administration
<ul>
<li>Act as escalation point for Endpoint Engineer I support requests.</li>
</ul><ul><li>Configure and manage physical devices, Windows 365 Cloud PCs, and Azure Virtual Desktop environments using:</li>
</ul><ul><li>Microsoft Intune</li>
</ul><ul><li>Microsoft Endpoint Manager</li>
</ul><ul><li>Group Policy and local security policies (as needed)</li>
</ul><ul><li>Deploy applications, manage compliance policies, and enforce conditional access and endpoint protection settings.</li>
</ul><ul><li>Manage device enrollments, provisioning packages, and configuration profiles.</li>
</ul><ul><li>Assist in the application of compliance baselines and security settings aligned with Zero Trust principles.</li>
</ul>
Security &amp; Compliance Tasks
<ul>
<li>Support customer alignment with endpoint-related CMMC 2.0 and NIST 800-171 controls (e.g., system configuration, updates, access policies).</li>
</ul><ul><li>Monitor Defender for Endpoint alerts and assist with remediation steps under guidance.</li>
</ul><ul><li>Apply or verify device compliance policies (encryption, anti-malware, update status).</li>
</ul><ul><li>Support the Security Operations team and the Security Program Management organization with endpoint remediation and reporting as required.</li>
</ul>
Service Delivery &amp; Operations
<ul>
<li>Respond to service requests and incidents in alignment with SLAs and internal escalation paths.</li>
</ul><ul><li>Perform new customer onboarding using SOPs such as the Microsoft 365 Baseline component package produced by the Product Development team.</li>
</ul><ul><li>Troubleshoot persistent or advanced endpoint issues including profile corruption, policy misapplication, or user provisioning failures.</li>
</ul><ul><li>Collaborate with modern workplace and identity teams on cross-cutting access and compliance issues.</li>
</ul><ul><li>Document technical issues, solutions, and recurring patterns in internal knowledge base systems.</li>
</ul><ul><li>Use Remote Monitoring and Management (RMM) platforms such as NinjaOne and N-Central (N-Able) for:</li>
</ul><ul><li>Device status monitoring</li>
</ul><ul><li>Script execution</li>
</ul><ul><li>Patch compliance tracking</li>
</ul><ul><li>Remote troubleshooting</li>
</ul><ul><li>Record issues and time spent using internal PSA/ticketing systems.</li>
</ul>
Customer Engagement
<ul>
<li>Work directly with customer stakeholders, primarily technical contacts, to resolve routine issues and implement endpoint changes.</li>
</ul><ul><li>Participate in onboarding activities for new users, sites, or departments within existing managed customers.</li>
</ul><ul><li>Assist with software distribution and application lifecycle support.</li>
</ul><ul><li>Help maintain inventory and documentation of all managed endpoints (physical and virtual).</li>
</ul>
Team Collaboration
<ul>
<li>Escalate complex issues to more senior endpoint engineering staff or to other teams as necessary after performing troubleshooting.</li>
</ul><ul><li>Participate in regular team syncs and ongoing training sessions to stay current on Microsoft 365 features and changes.</li>
</ul>
Operational Excellence
<ul>
<li>Follow standard operating procedure (SOP) documents to support customers. Update SOPs where necessary when steps or processes change.</li>
</ul><ul><li>User PowerShell or other scripting technologies and frameworks to automate routine management tasks and generate reports.</li>
</ul><ul><li>Contribute to reusable scripts and configuration templates for device provisioning and baseline enforcement.</li>
</ul>
Competencies / Skills:
<ul>
<li>3&ndash;5 years of experience supporting enterprise Windows endpoints in a managed services, enterprise IT, or regulated environment.</li>
</ul><ul><li>Deep working knowledge of Microsoft Intune, Endpoint Manager, Windows 365, and Azure Virtual Desktop.</li>
</ul><ul><li>Experience configuring compliance and security policies to meet CMMC 2.0 or NIST 800-171 requirements.</li>
</ul><ul><li>Proficient in PowerShell for administration and basic automation.</li>
</ul><ul><li>Familiarity with RMM tools (e.g., NinjaOne, ConnectWise Automate, N-Able/N-Central) and PSA systems (e.g., ConnectWise Manage, ServiceNow).</li>
</ul><ul><li>Strong troubleshooting and escalation management skills.</li>
</ul><ul><li>Strong customer service orientation and clear communication skills.</li>
</ul><ul><li>U.S. Citizenship required (due to work with defense contractors and ITAR-regulated customers).</li>
</ul>
Preferred
<ul>
<li>Experience working in a managed services or IT outsourcing environment.</li>
</ul><ul><li>Familiarity with compliance-driven IT support (CMMC, NIST 800-171, DFARS 7012).</li>
</ul><ul><li>Exposure to scripting tools (PowerShell) for endpoint automation.</li>
</ul><ul><li>Hands-on experience with Azure Virtual Desktop or Windows 365.</li>
</ul><ul><li>Microsoft 365 Certified: Fundamentals (MS-900)</li>
</ul><ul><li>Microsoft 365 Certified: Modern Desktop Administrator Associate (MD-102)</li>
</ul><ul><li>CompTIA A+ or Security+</li></ul> 


Where required by law, this posting includes a good‑faith pay range for candidates who will perform the role in specific jurisdictions. For other locations, the actual compensation may differ. Final compensation will be determined based on qualifications, experience, skills, work location, internal equity, and current market data. This job posting is not a contract or promise of employment or any particular compensation, and any employment offer will be set out in a written offer letter.

EOE M/F/D/V</div>

Endpoint Engineer II

Prime System Solutions

<div>
 The Endpoint Systems Engineer is a critical member of the IT infrastructure team, responsible for the lifecycle management of all endpoint devices across the organization. This role bridges security, operations, and automation &mdash; ensuring that every managed device remains compliant, current, and performing at its best. The ideal candidate is hands-on with RMM tooling, comfortable writing PowerShell automation, and thrives in a fast-paced managed services or enterprise IT environment.
 
 
 
 Key Responsibilities
 
 
 
 
 Endpoint Patching &amp; Compliance
 
 
 
 <ul>
 <li>
 Deploy, schedule, and validate OS and software patches across Windows/macOS endpoints using Kaseya VSA and Datto RMM
 </li>
 <li>
 Manage patch policies, rings, and compliance baselines through Microsoft Intune
 </li>
 <li>
 Generate regular patch compliance reports and present remediation plans for non-compliant devices
 </li>
 <li>
 Maintain patch SLAs and minimize exposure windows for critical CVEs
 
 
 </li>
 </ul>
 
 Application Management
 
 
 
 <ul>
 <li>
 Package, deploy, and maintain third-party applications across the endpoint fleet via Intune and RMM tooling
 </li>
 <li>
 Manage application versioning, silent installs, and uninstall routines
 </li>
 <li>
 Monitor application health and ensure licensing compliance
 
 
 </li>
 </ul>
 
 Ticketing &amp; Incident Management
 
 
 
 <ul>
 <li>
 Triage, manage, and resolve endpoint-related tickets within ConnectWise Manage
 </li>
 <li>
 Document resolution steps clearly for knowledge base contribution
 </li>
 <li>
 Escalate complex issues appropriately while maintaining SLA commitments
 
 
 </li>
 </ul>
 
 Automation &amp; Scripting
 
 
 
 <ul>
 <li>
 Write and maintain PowerShell scripts to automate repetitive tasks such as software installs, system health checks, user provisioning, and reporting
 </li>
 <li>
 Develop and deploy scripts via RMM platforms at scale across managed endpoints
 
 
 </li>
 </ul>
 
 Asset &amp; Documentation Management
 
 
 
 <ul>
 <li>
 Maintain accurate endpoint inventory and configuration records through Liongard
 </li>
 <li>
 Ensure audit trails, change logs, and runbooks are up to date
 </li>
 <li>
 Contribute to internal IT documentation and SOPs
 
 
 </li>
 </ul>
 
 Security &amp; Compliance
 
 
 
 <ul>
 <li>
 Enforce endpoint security baselines (antivirus, EDR, encryption, MFA policies)
 </li>
 <li>
 Monitor for policy drift and remediate non-compliant devices proactively
 </li>
 <li>
 Collaborate with security teams on vulnerability management and endpoint hardening
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 <ul>
 <li>
 Experience in endpoint management, systems administration, or MSP role
 </li>
 <li>
 Hands-on experience with Kaseya VSA, Datto RMM, and/or Microsoft Intune
 </li>
 <li>
 Proficiency in PowerShell scripting for automation and system management
 </li>
 <li>
 Experience with ConnectWise (Manage or Automate) for ticketing and workflow
 </li>
 <li>
 Familiarity with Liongard or similar documentation/asset platforms
 </li>
 <li>
 Strong understanding of Windows endpoint management (Group Policy, MDM, registry)
 </li>
 <li>
 Knowledge of patch management best practices and vulnerability frameworks (e.g., CVSS)
 </li>
 <li>
 Excellent troubleshooting and communication skills
 
 
 </li>
 </ul>
 
 Preferred / Bonus Skills
 
 
 
 <ul>
 <li>
 Experience in a Managed Service Provider (MSP) environment
 </li>
 <li>
 Microsoft certifications (MD-102, AZ-800, or similar)
 </li>
 <li>
 Familiarity with macOS endpoint management
 </li>
 <li>
 Experience with endpoint security tools (CrowdStrike, SentinelOne, Defender for Endpoint)
 </li>
 <li>
 Basic networking knowledge (DNS, DHCP, VPN)
 </li>
 </ul>
</div>

Endpoint Systems Engineer

Search 10000+ Endpoint security engineer jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 endpoint security engineer jobs Near Me

Endpoint Security Engineer

Endpoint Security Engineer

Endpoint Security Engineer

Staff Security Engineer

CMMC Security Engineer (US Hybrid)

Endpoint Engineer II

Endpoint Systems Engineer