Endpoint Security & IT Operations Engineer

About Infra360

About the Role

Key Responsibilities

1. Endpoint & Device Management

• Manage Windows, macOS and Linux endpoints across multiple environments.
• Manage endpoint enrollment, configuration, application deployment and device lifecycle.
• Administer UEM/MDM platforms such as Microsoft Intune, ManageEngine Endpoint Central, JumpCloud, Kaseya/Datto or similar tools.
• Maintain accurate hardware and software inventory.
• Monitor endpoint health and resolve configuration or security issues.
• Ensure devices remain managed, updated and compliant.

2. Endpoint Security

• Deploy and administer EPP/EDR solutions such as Microsoft Defender, CrowdStrike, SentinelOne, Sophos, Wazuh or equivalent.
• Configure endpoint security policies, firewall, anti-malware, anti-ransomware and device-control policies.
• Ensure encryption and other endpoint security controls are enabled.
• Monitor EDR coverage and security posture.
• Work with the SOC team to support endpoint investigation and remediation.

3. Identity & Access Management

• Manage user provisioning, deprovisioning and access lifecycle.
• Administer MFA, SSO, groups, roles and access policies.
• Support Joiner, Mover and Leaver processes.
• Manage access revocation and account changes.
• Support privileged-access management and periodic access reviews.
• Work with platforms such as Microsoft Entra ID, JumpCloud, Okta, Google Workspace or similar.

4. Device Compliance & Security Baselines

• Define and monitor endpoint compliance requirements.
• Ensure devices meet requirements for patching, encryption, EDR, firewall, screen lock and other security controls.
• Implement and maintain security baselines based on CIS Benchmarks, Microsoft security baselines and customer requirements.
• Identify and remediate non-compliant devices.

5. Patch & Vulnerability Management

• Monitor endpoint vulnerabilities and prioritize critical/high-risk issues.
• Coordinate OS and third-party application patching.
• Track patch compliance and remediation.
• Identify unsupported or end-of-life software.
• Work with the SOC and DevOps/SRE teams to coordinate remediation where required.

6. IT Security Operations

• Maintain visibility of users, devices, applications, licenses and security controls.
• Support IT security configuration and operational processes.
• Manage security exceptions and remediation activities.
• Maintain documentation, configurations and operational runbooks.
• Support customer environments in accordance with defined SLAs.

7. Automation

• Automate repetitive IT and security tasks using PowerShell, Bash, Python, UEM scripting or APIs.
• Automate activities such as software deployment, compliance checks, onboarding/offboarding, patch remediation and reporting.

8. Incident Remediation Support

• Support the SOC/MDR team during endpoint security incidents.
• Isolate or reconfigure compromised devices.
• Remove malicious software and apply required security controls.
• Patch vulnerable endpoints and validate remediation before returning devices to service.

What We're Looking For

• 1-3 years of experience in IT Operations, Endpoint Management, UEM/MDM or IT Security.
• Strong Windows administration experience.
• Hands-on experience with UEM/MDM platforms.
• Experience administering EPP/EDR solutions.
• Good understanding of IAM, MFA, SSO and access controls.
• Experience with patch and vulnerability management.
• Good understanding of endpoint security.
• Working knowledge of macOS and Linux.
• Strong troubleshooting and problem-solving skills.
• Good documentation and operational discipline.

• MSP/MSSP or managed-services experience.
• Microsoft Intune and Entra ID experience.
• ManageEngine Endpoint Central, JumpCloud or Kaseya/Datto experience.
• PowerShell, Python or Bash scripting.
• Knowledge of CIS Benchmarks.
• DLP/device-control experience.
• Exposure to ISO 27001 or SOC 2.

What Success Looks Like