Endpoint Security Engineer

STAND 8 provides end to end IT solutions to enterprise partners across the United States and with offices in Los Angeles, New York, New Jersey, Atlanta, and more including internationally in Mexico and India.

Endpoint Security & Endpoint Management Engineer is responsible for leading the deployment, configuration, and ongoing management of endpoint security and management platforms across enterprise environments. This role focuses on enhancing endpoint visibility, strengthening threat protection, and ensuring policy enforcement across Windows and macOS systems. The engineer collaborates closely with security, compliance, and infrastructure teams to support operational excellence and regulatory alignment. The position plays a critical role in advancing endpoint security posture and maintaining system stability in a fast-paced environment.

Location & Work Type
Location: Remote, US
Work Type: Remote

Key Responsibilities

• Lead the deployment and expansion of endpoint management platforms across enterprise environments.


• Configure and manage endpoint security tools to enhance threat detection, response, and protection capabilities.


• Develop and maintain queries, dashboards, and reports for endpoint health, compliance, and inventory tracking.


• Integrate endpoint management and security platforms to ensure unified visibility and remediation workflows.


• Build and maintain automated patching and software deployment processes.


• Monitor alerts, investigate incidents, and fine-tune security policies to improve detection accuracy.


• Administer device configuration profiles, compliance policies, and application deployments.


• Manage directory services, device groups, and policy targeting to support enterprise security requirements.


• Troubleshoot complex endpoint issues across Windows and macOS environments.


• Collaborate with cross-functional teams to support compliance initiatives and security frameworks.


• Develop documentation including runbooks, SOPs, and configuration standards.


• Participate in change management and approval workflows to maintain operational governance.

Qualifications
Required:

• 3+ years of hands-on experience with Tanium in an enterprise environment.


• 3+ years of hands-on experience with Microsoft Defender for Endpoint, including policy configuration and alert management.


• Strong proficiency with Microsoft Intune for device configuration, compliance, and app management.


• Experience managing Entra ID (Azure AD) groups, device objects, and dynamic membership rules.


• Demonstrated ability to troubleshoot complex endpoint policy issues across Windows and macOS.


• Familiarity with HIPAA, SOC 2, PCI DSS, or similar compliance frameworks in an endpoint security context.


• Comfortable working in a fast-paced environment with shifting priorities and agentic tooling.

Preferred (Optional):

• Experience with Tanium Comply and Protect modules for CIS benchmark assessment and remediation.


• Familiarity with Microsoft Purview DLP and Insider Risk Management.


• Experience with macOS Platform SSO, including Secure Enclave and PSSO extension configuration.


• Knowledge of Okta or Entra ID-based identity infrastructure.


• Exposure to scripting and automation (PowerShell, Bash, JavaScript/Node.js) for endpoint tooling.


• Experience with Nodeware, Vanta, or similar vulnerability/compliance management platforms.


• Microsoft certifications such as SC-200, MD-102, or equivalent Tanium certifications.

Benefits

• Medical coverage and Health Savings Account (HSA) through Anthem


• Dental/Vision/Various Ancillary coverages through Unum


• 401(k) retirement savings plan


• Paid-time-off options


• Company-paid Employee Assistance Program (EAP)


• Discount programs through ADP WorkforceNow

Additional Details
The base range for this contract position is $60 - $70 / per hour, depending on experience. Our pay ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target for new hires of this position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Qualified applicants with arrest or conviction records will be considered.

About Us
STAND 8 provides end-to-end IT solutions to enterprise partners across the United States and globally with offices in Los Angeles, Atlanta, New York, Mexico, Japan, India, and more. STAND 8 focuses on the "bleeding edge" of technology and leverages automation, process, marketing, and over fifteen years of success and growth to provide a world-class experience for our customers, partners, and employees.
Our mission is to impact the world positively by creating success through PEOPLE, PROCESS, and TECHNOLOGY.
Check out more at ; and reach out today to explore opportunities to grow together!
By applying to this position, your data will be processed in accordance with the STAND 8 Privacy Policy.