Security Engineer
Core
Design, implement, and maintain standardized security baselines for enterprise Windows and macOS endpoints using Microsoft Intune, MECM, and Jamf Pro to improve cybersecurity posture.
Role type
Senior Endpoint Security Baseline Engineer
Builds
Enterprise endpoint security configurations and compliance policies
Domain
Federal government contracting / Endpoint Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Microsoft Intune administration, Microsoft Endpoint Configuration Manager (MECM) administration, Microsoft Security Baselines implementation, CIS Benchmarks, Microsoft Defender for Endpoint, BitLocker/FileVault configuration, Windows Firewall/ASR rules, Entra ID/Conditional Access, PowerShell scripting, NIST 800-53 compliance, Zero Trust Architecture
Preferred skills
Jamf Pro administration, Azure Virtual Desktop support, Microsoft Intune Administrator Associate (MD-102), Microsoft Security Administrator (SC-300), CISSP, Security+
Technologies
Microsoft Intune, Microsoft Endpoint Configuration Manager, Jamf Pro, Microsoft Defender for Endpoint, Entra ID, Azure Virtual Desktop
Responsibilities
Engineer and maintain Microsoft Intune Security Baselines and Endpoint Security policies, Develop and maintain Group Policy and Jamf security configurations, Implement Microsoft Defender for Endpoint settings and attack surface reduction rules, Configure compliance policies supporting Zero Trust initiatives, Validate security baseline deployments through testing and pilot implementations, Troubleshoot policy conflicts between Intune, MECM, Active Directory, and Jamf
Seniority
Senior, hands-on IC