Own the full lifecycle of endpoint protection across our workforce: CrowdStrike deployment and policy management, disk encryption, patch compliance, workstation configuration baselines, USB/device controls, and browser security.
Own the operational side of access: provisioning when people join, revocation when they leave, and nothing falling through the cracks in between.
Be the first line for security-related requests and IT issues — employee requests, alert triage, investigation support, and escalation when needed.
Own procurement, ordering destruction, and re-provisioning of endpoints.
Own the security side of the employee lifecycle end-to-end: provisioning, configuration, deprovisioning, and verification.
Ensure endpoint and access controls remain aligned to corporate security policies and compliance requirements.

2+ years in IT security, systems administration, or a hybrid security operations role
Hands-on experience with endpoint management tools (CrowdStrike, JumpCloud, Jamf, or similar)
Familiarity with identity platforms — JumpCloud, Google Workspace, or equivalent
Comfort working across Mac and Windows environments
Strong operational instincts: you close loops, you follow up, you notice when something's off
Clear communicator — you can explain a security issue to a non-technical employee without making it complicated
Scripting or automation experience is a plus (PowerShell, Python, Bash)

System Engineer – Security Administration, Endpoint Management

Key skills