Senior Cybersecurity Patch and Endpoint Management Engineer

The Senior Cybersecurity Patch & Endpoint Management Engineer serves as the technical subject matter expert for enterprise patch management, endpoint engineering, vulnerability remediation, identity security, compliance enforcement, and cybersecurity automation across client, server, cloud, and hybrid environments. This role supports an enterprise environment of approximately 3,000 managed endpoints.

Responsibilities

Serve as enterprise owner for patch management and vulnerability remediation programs; Develop and maintain patching strategies across Windows, Linux, macOS, iOS, Android, virtual desktops, Azure, Azure Arc, Microsoft 365 and third-party applications; Lead remediation of critical and actively exploited vulnerabilities; Develop automated workflows for vulnerability identification, risk prioritization, patch deployment, validation and compliance reporting; Serve as technical authority for Microsoft Entra ID, identity security, Conditional Access and Zero Trust identity architecture; Serve as technical lead for CrowdStrike Falcon vulnerability management, including remediation SLAs and executive dashboards; Serve as technical authority for Microsoft Intune, endpoint security and device lifecycle management; Design and support Windows Autopilot deployment solutions; Support compliance requirements aligned to NIST, CIS Controls and Zero Trust; Develop advanced automation and scripting using PowerShell, Microsoft Graph and Azure Automation; Develop KQL-based analytics and reporting solutions

Requirements

7+ years of experience in cybersecurity, infrastructure engineering, endpoint engineering, or systems engineering; 5+ years leading enterprise patch management and vulnerability remediation initiatives; Experience supporting environments with 3,000+ managed endpoints; Expert-level Microsoft Intune administration and engineering; Expert-level Microsoft Entra ID administration and identity governance; Expert-level Microsoft Defender XDR administration; Advanced CrowdStrike Falcon administration experience; Advanced PKI and certificate services administration; Advanced PowerShell automation and scripting experience; Experience supporting cloud, hybrid, and on-premises environments; Strong understanding of cybersecurity frameworks and security controls; Strong communication and executive presentation skills

Nice to have

Microsoft Certified Cybersecurity Architect Expert; Microsoft Certified Identity and Access Administrator Associate; Microsoft Certified Security Operations Analyst Associate; Microsoft Certified Endpoint Administrator Associate; Microsoft Certified Azure Administrator Associate; Microsoft Certified Azure Security Engineer Associate; CompTIA Security+; CrowdStrike Falcon Certification; ITIL Foundation