Senior Cybersecurity Patch and Endpoint Management Engineer

Senior Cybersecurity Patch & Endpoint Management Engineer Position Overview

The Senior Cybersecurity Patch & Endpoint Management Engineer serves as the technical subject matter expert for enterprise patch management, endpoint engineering, vulnerability remediation, identity security, compliance enforcement, and cybersecurity automation across client, server, cloud, and hybrid environments.

This role supports a complex enterprise environment consisting of approximately 3,000 managed endpoints, including Windows workstations, Windows and Linux servers, Azure-hosted systems, virtual desktop infrastructure (VDI), mobile devices, and hybrid cloud workloads.

The ideal candidate will possess deep expertise across Microsoft Entra ID, Microsoft Defender XDR, CrowdStrike Falcon, Public Key Infrastructure (PKI), Windows Autopilot, Microsoft Intune, Azure Update Manager, Patch My PC, Kusto Query Language (KQL), PowerShell automation, and enterprise vulnerability management programs.

This position plays a critical role in strengthening organizational security posture by driving security compliance, reducing cyber risk, automating remediation processes, and ensuring adherence to cybersecurity standards, regulatory requirements, and vulnerability management objectives across the enterprise.

Primary Responsibilities

Enterprise Patch Management & Vulnerability Remediation

Serve as the enterprise owner for patch management and vulnerability remediation programs.

Responsibilities include:

Developing and maintaining patching strategies across:

• Windows Server
• Linux Server
• Windows Client
• macOS and iOS
• Android
• Citrix and VMware Horizon virtual desktops
• Azure Virtual Machines
• Azure Arc-managed systems
• Microsoft 365 services
• Third-party applications

Managing and optimizing:

• Azure Update Manager
• Microsoft 365 update channels
• Patch My PC
• Microsoft Intune Update Rings
• Microsoft Configuration Manager (where applicable)

Establishing patch deployment rings, pilot groups, production deployments, rollback strategies, and emergency remediation procedures.

Leading remediation efforts for critical and actively exploited vulnerabilities.

Developing automated workflows for:

• Vulnerability identification
• Risk prioritization
• Patch deployment
• Validation testing
• Compliance reporting

Partnering with Security Operations teams to ensure remediation objectives and service levels are achieved.

Building executive dashboards that provide visibility into patch compliance, risk exposure, and remediation progress.

Microsoft Entra ID (Expert Level)

Serve as the technical authority for Microsoft Entra ID, identity security, authentication services, identity governance, privileged access management, and Zero Trust identity architecture.

Responsibilities

• Design and maintain enterprise identity architectures.
• Implement and support:
• Conditional Access
• Identity Protection
• Access Reviews
• Entitlement Management
• Identity Governance
• Authentication Methods
• Manage hybrid identity integrations.
• Support SAML, OAuth, OpenID Connect, SCIM, and federation-based authentication solutions.
• Conduct identity security assessments and remediation activities.
• Develop and maintain Zero Trust identity architectures.
• Support secure integrations between enterprise SaaS applications and Microsoft Entra ID.

CrowdStrike Falcon Vulnerability Management (Expert Level)

Serve as the technical lead for enterprise vulnerability management, providing strategic oversight and operational leadership for risk reduction initiatives.

Responsibilities

• Administer and optimize CrowdStrike Falcon and Falcon Spotlight across workstation, server, cloud, and hybrid environments.
• Own vulnerability identification, prioritization, remediation coordination, validation, and reporting processes.
• Develop enterprise vulnerability management procedures aligned with cybersecurity policies, risk frameworks, and compliance requirements.
• Analyze vulnerability intelligence, exploitability data, threat intelligence, and business impact to prioritize remediation efforts.
• Collaborate with Security, Infrastructure, Service Desk, and Operations teams to remediate critical vulnerabilities.
• Establish remediation SLAs, metrics, and reporting.
• Develop executive dashboards highlighting vulnerability trends, remediation progress, compliance posture, and organizational risk.
• Lead mitigation efforts for high-risk vulnerabilities when patching is not immediately feasible.
• Integrate vulnerability intelligence with Microsoft Defender, Intune, Azure, patching platforms, SIEM solutions, and security operations workflows.
• Support audits, compliance assessments, penetration testing activities, and security reviews.
• Develop automated remediation solutions utilizing PowerShell, Microsoft Graph, Azure Automation, APIs, and related technologies.
• Monitor emerging threats, active exploit campaigns, and zero-day vulnerabilities.
• Advance vulnerability management governance aligned to NIST, CIS Controls, Zero Trust principles, and industry best practices.

Endpoint Engineering & Microsoft Intune (Expert Level)

Serve as the technical authority for modern endpoint management, endpoint security, device lifecycle management, and Microsoft Intune administration.

Responsibilities

• Design, implement, and support Microsoft Intune across Windows, macOS, iOS/iPadOS, Android, and hybrid-managed devices.
• Architect and manage MDM, MAM, and modern endpoint management solutions.
• Develop configuration profiles, compliance policies, security baselines, administrative templates, endpoint privilege management policies, and application protection policies.
• Design and support Windows Autopilot deployment solutions.
• Manage the complete device lifecycle, including enrollment, provisioning, configuration, software deployment, monitoring, retirement, and decommissioning.
• Integrate Intune with Microsoft Entra ID, Microsoft Defender XDR, Conditional Access, and related Microsoft technologies.
• Implement endpoint security controls aligned with Zero Trust principles and cybersecurity requirements.
• Configure and manage Windows Update for Business, feature updates, quality updates, driver updates, and expedited security updates.
• Develop proactive remediation solutions utilizing PowerShell, Microsoft Graph API, and Intune Remediations.
• Support environments consisting of approximately 3,000 managed endpoints while maintaining high levels of security, availability, and operational efficiency.

Windows Autopilot (Expert Level)

Serve as the technical authority for Windows Autopilot, modern device provisioning, zero-touch deployment, endpoint onboarding, and lifecycle management.

Responsibilities

• Design and maintain Windows Autopilot deployment strategies.
• Support:
• User-Driven Deployments
• Pre-Provisioning
• Self-Deploying Mode
• Hybrid Entra Join
• Microsoft Entra Join
• Manage device registration, hardware hash imports, deployment profiles, dynamic group assignments, and enrollment status page configurations.
• Develop zero-touch deployment strategies for remote and distributed workforces.
• Automate:
• Device Enrollment
• Application Deployment
• Security Baseline Enforcement
• Compliance Policy Assignment
• Certificate Deployment
• Endpoint Security Configuration
• Support large-scale device refreshes, deployment modernization efforts, and merger and acquisition integrations.
• Establish KPIs around deployment success, onboarding efficiency, compliance attainment, and reduction of manual deployment activities.

Compliance, Security & Risk Management

Partner with Security, Risk, Audit, and Compliance teams.

Support compliance requirements aligned to:

• NIST
• CIS Controls
• Zero Trust Framework
• Internal Security Standards

Develop remediation plans for audit findings.

Maintain compliance reporting and evidence collection.

Support risk reduction initiatives and continuous security improvement programs.

Advanced Automation & Scripting (Expert Level)

Serve as the technical authority for enterprise automation, scripting, configuration management, and remediation engineering.

Technical Expertise

• PowerShell
• PowerShell Desired State Configuration (DSC)
• Microsoft Graph API
• Microsoft Graph PowerShell SDK
• Azure Automation
• Azure Logic Apps
• Azure Functions
• REST APIs
• JSON Integrations
• Microsoft Intune Remediations

Responsibilities

• Automate patch deployment workflows across endpoints, servers, cloud workloads, and third-party applications.
• Develop automated vulnerability remediation processes.
• Automate device onboarding, provisioning, configuration, and lifecycle management.
• Create compliance validation and remediation scripts.
• Develop enterprise reporting for:
• Patch Compliance
• Vulnerability Exposure
• Device Health
• Security Posture
• Certificate Status

Integrate Microsoft, security, ITSM, and monitoring platforms through APIs and automation.

Build reusable automation frameworks that improve operational efficiency and reduce manual intervention.

Maintain enterprise standards for secure scripting, source control, testing, documentation, and change management.

Advanced Analytics & KQL

Develop advanced analytics and reporting solutions using Kusto Query Language (KQL) supporting:

• Microsoft Defender
• Microsoft Sentinel
• Microsoft Entra ID
• Azure Log Analytics
• Security Operations

Deliver:

• Threat Analytics
• Security Reporting
• Compliance Reporting